1. Introduction & Scope
Welcome to Excellent Brain. We are committed to transparency and respect regarding the personal information and neurofeedback data collected from individuals, clinicians, families, and educational organizations who use our platform, including our hardware (EEG Headsets), physical accessories, software applications, online portals, and training modules (the "Services").
This Privacy Policy explains what information we gather, how we process it, with whom we share it, and the rigorous safeguards we place upon it. By accessing our platform, registering an account, or training with our connected hardware, you acknowledge the collection practices described here.
2. Information We Collect
To make brain training effective and monitor progress accurately, we must collect two general categories of information: Personal Information and Biometric Neurofeedback Metrics.
Account & Contact Data
- Names and primary email addresses
- Delivery address (for EEG hardware shipping)
- Role type (Child, Parent, Clinician, Teacher)
- Secure hashed login passwords
EEG & Training Metrics
- EEG wave frequency ratios (Beta, Theta, Alpha)
- Training duration & focus/attention index levels
- Gameplay scores and reaction times
- Diagnostic ADHD tracking surveys (optional)
Note on Hardware: Our EEG Headsets connect securely via Bluetooth and stream brain wave parameters to the application. Raw EEG signals are converted locally into focus indexes. We only transmit processed focus indexes and aggregated frequency amplitudes to our cloud servers to evaluate training success. We do not store raw, unencrypted neural signals.
4. How We Use Your Data
We use the collected information primarily to run and continuously optimize the neurofeedback games. Specific use cases include:
- 1 Personalizing Training Protocols: Dynamically adjusting difficulty levels of interactive games based on real-time focus indexes to keep training therapeutically productive.
- 2 Progress Visualization: Generating comprehensive charts, progress dashboards, and Focus Scores so parents, individuals, or coaches can witness improvement.
- 3 Clinical Dashboard Syncing: Sending performance metrics directly to authorized supervising teachers or clinical professionals as designated by the user account owner.
- 4 Operational Quality: Processing subscription payments, managing system updates, repairing device pairing bugs, and delivering hardware support requests.
5. Children's Privacy (COPPA)
Because Excellent Brain is highly requested by parents and schools for children with ADHD, we take children’s online safety exceptionally seriously. We strictly adhere to the Children’s Online Privacy Protection Act (COPPA) and general safety guidelines.
Accounts for minors (under the age of 18) must always be set up and supervised by a Parent or Legal Guardian. If you are a parent, you have full authority to request access to review, modify, or completely wipe out data generated by your child from our servers.
For schools using our technology: schools are responsible for obtaining parental consent before assigning Excellent Brain modules to classrooms. No children's details are used for commercial or advertising campaigns.
6. Clinicians & Schools Portals
Excellent Brain is often deployed as a professional tool within clinics or schools. In these scenarios, the clinician or school representative acts as an organization supervisor.
- Shared Reports: When you connect an individual account to a clinic or classroom dashboard, the corresponding clinicians or instructors receive access to training times, attention scores, and progress trends.
- Revocation of Access: You can break the linking connection with your training clinician or school administrator at any time directly through your primary user portal.
- Group Data: School and clinic managers only view collective statistics and designated progress trends of their authorized students or patients.
7. Security & Storage
We secure your neuro-physiological and personal data using top-tier organizational, software, and physical frameworks:
AES-256 Encryption
Data encrypted both in transit (SSL/TLS) and rest on cloud systems.
Limited Access
Strictly isolated internal access roles based on technical need.
Session Expiration
Auto session logouts to prevent visual leaks on shared computers.
We utilize reputable cloud server providers (e.g., Amazon Web Services / Google Cloud Platform), adhering to top industry standard safety levels.
8. Your Choices & Legal Rights
Depending on your location (such as the European Union under the GDPR, or California under CCPA/CPRA), you have extensive legal control over your records:
To make a request, contact our Privacy Operations Office as indicated below. We process valid requests within thirty (30) days free of charge.
9. Contact Information
If you have questions, comments, or complaints regarding this Privacy Policy or our general data security structures, please reach out to us: