Privacy Policy

This policy explains how NorwegianSpark SA (“we”), Org. no. 834 984 172, processes personal data when you use BrainLoop. We are the data controller. For any privacy question, contact thomaslien@norwegianspark.com.

What we collect

• Account data — email and authentication identifiers when you sign up.
• Billing data — subscription status and a customer ID. Card details are handled by Stripe; we never see or store them.
• App content — the habits, notes, journal entries, goals, and scores you create. Until you have an account, most of this stays in your browser only.
• Analytics — only if you consent, we collect aggregate usage data to improve the product.

Why we use it (legal basis)

• Contract — to provide the apps and your subscription.
• Consent — for analytics and any marketing email (double opt-in, per Norwegian markedsføringsloven §15).
• Legal obligation — to keep billing records as required by Norwegian bookkeeping law.

Processors we rely on

We share data only with the providers needed to run the service:

• Supabase — authentication and database hosting (EU region).
• Stripe — payments and subscriptions.
• Cloudflare — hosting and content delivery.
• PostHog (EU) and Resend — consent-gated analytics and transactional email, where enabled.

Where your data lives

We host in the EU/EEA wherever possible (for example, analytics on the EU PostHog instance) to keep data within European data-protection law.

Retention

We keep account and content data while your account is active. Billing records are retained for 5 years (Norwegian bokføringsloven §13). Consent records are retained for up to 3 years after account closure, with personal identifiers hashed.

Your rights

Under the GDPR you can request access, correction, deletion, portability, or restriction of your data, and you can withdraw consent at any time. Use our data-rights page or email us. We respond within 30 days (GDPR Art. 12(3)). You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

Changes

We’ll post any material changes here and update the date above.