Canonical public URL (use in Play Console, store listings, and support):
https://brain-forge-4a2af.web.app/privacy/
Last updated: 4 September 2026
Describes app version: 17.2.72 (Android versionCode 172; iOS CFBundleVersion 172)
App name: Brain Forge — Cognitive Training Suite
Package / Bundle ID (Android applicationId · iOS bundle identifier for this build): com.totuslife.brainforge
This policy describes Brain Forge for the Android application com.totuslife.brainforge (available on Google Play) and the iOS application with bundle identifier com.totuslife.brainforge (available on the Apple App Store). A separate legacy Play listing may exist under com.brainforge; refer to the store page and this policy’s Describes app version line for the build you installed. The lists below are a plain-language summary for the Google Play Data safety form and the App Store App Privacy (“nutrition label”) disclosures; what we collect or process depends on which features you use.
Brain Forge is a cognitive training app with brain games, puzzles, and chess multiplayer. It includes 19 training games (250 levels each), including Totus Word Quest (English crossword answers with bilingual clues where available), Factor Flow, Neuro-Link Logic, and Word Search Quest. New boss mini-games include checkers, bug trivia, Bomb Squad, peg solitaire, and algebra challenges. We are committed to protecting your privacy. This policy explains what information we handle and how we use it.
Any on-device summaries—including cognitive score, training credits, regional “brain” visualizations, charts, percentages, or neuroanatomical labels—are provided strictly for entertainment and general educational purposes. They are not factual medical data, clinical measurements, laboratory results, or medical imaging. Brain Forge is not presented as a medical device and does not hold medical-device certification (for example FDA clearance or equivalent) as a health product. The app does not diagnose, treat, monitor, alleviate, or prevent any disease or health condition. Do not use Brain Forge as a substitute for professional medical advice, diagnosis, or treatment.
Brain Forge does not:
com.google.android.gms.permission.AD_ID (it is blocked in the app configuration) so we do not seek advertising-ID access for marketing in this appWe do not ask you to create a named account in the app. Online features use Google Firebase, which processes limited technical and gameplay-related data on our behalf as a service provider when you use those features—see Service providers and online processing below. That is not a “sale” of your data by us for advertising; it is processing needed to run multiplayer, credit sync, and server-confirmed Arcade unlocks.
We also do not:
| Area | Mostly on your device | Sent to our Firebase project (Google) when you use the feature |
|---|---|---|
| Training games (scores, levels, progression) | Yes | No full per-game state upload for those titles |
| Optional Arcade credits & unlocks | Partial mirror may exist on device | Yes — anonymous user document fields as described below |
| Chess multiplayer (live board) | Local chess points stay on device | Yes — room document for sync |
| Settings / language / break-reminder preferences | Yes | Not for those preferences (they stay on-device as described below) |
If you never open Arcade or Chess multiplayer, you may not generate cloud-side Firestore data beyond what Firebase initializes for an anonymous session in some builds; the app is designed to minimize cloud use until those features run.
When you use Chess multiplayer or Arcade economy features, the app uses Firebase services operated by Google LLC (and affiliates), including for example Firebase Authentication (anonymous), Cloud Firestore, and Cloud Functions (callable). Google processes data under its own terms and privacy notices; we use Firebase as a processor / service provider to deliver those features.
Purposes of this processing include: authenticating an anonymous session, storing multiplayer room state, storing training-credit and unlock fields, applying server-confirmed credit spend, and protecting against trivial tampering with unlock state. We do not use Firebase in this app for advertising personalization.
Traffic between the app and Google Firebase generally uses encryption in transit (for example HTTPS/TLS) as provided by the platform and Google’s APIs. We do not operate our own servers for Brain Forge game logic beyond what Firebase provides in our project. No security practice is perfect; you use online features at your own risk as also stated in the Terms of Service.
If a security incident compromises user data collected from or through Brain Forge, we will notify affected users and the relevant authorities as required by applicable law — for example, Canadian privacy legislation (such as PIPEDA) and, for the iOS version, the Apple Developer Program License Agreement. Depending on what contact information is available, notice may be sent by email, in-app notice, or by posting on this page and through our support contact. Because Brain Forge does not collect your name or email address in normal use, we may not be able to identify or reach users of anonymous sessions directly; where that is the case, we will post a clear public notice here and through our support channels.
users/{anonymousUid} fields for Arcade (credits, processed totals, unlock ids) may persist until you ask us to delete them or we perform account cleanup, subject to legal requirements.If you are in the EEA, UK, Switzerland, or other regions with privacy laws, you may have the rights described in EEA, UK, and Switzerland (GDPR-style disclosures) below, including lodging a complaint with a supervisory authority.
Firebase data may be processed in data centers in the United States and other regions where Google operates infrastructure. If you use optional online features while in the EEA, UK, or Switzerland, personal data may be transferred to countries that the European Commission (or UK/Swiss authorities) have not deemed to provide an adequate level of protection. Those transfers typically rely on appropriate safeguards described in Google’s documentation—for example Standard Contractual Clauses (SCCs) or similar mechanisms under Regulation (EU) 2016/679 (the GDPR) and related UK/Swiss rules—between Google and its customers or within Google’s corporate group, as applicable. See Google Cloud & the GDPR and Firebase Privacy Information.
By using optional online features, you acknowledge that transfers may occur as part of providing those features. On-device use of training games does not require data transfers to our Firebase project beyond what is described for local storage.
This section summarizes how we approach obligations similar to those in the EU General Data Protection Regulation (GDPR) and the UK UK GDPR / Data Protection Act 2018 where they apply to processing related to Brain Forge. It is a plain-language description and not an exhaustive legal analysis.
Who decides “why” and “how” data is processed. For data processing we control in connection with Brain Forge (including configuration of Firebase for optional features), the developer identified on the Google Play listing or App Store page is typically the controller for that processing. Google (Firebase) generally acts as a processor or sub-processor when providing those cloud services, under its agreements and policies.
Categories of data, purposes, and legal bases (Article 6 GDPR). Depending on what you use:
We do not use Brain Forge to carry out solely automated decision-making with legal or similarly significant effects on you under Article 22 GDPR.
Your rights. Subject to applicable law and limits (for example where we must retain data), you may have the right to:
How to exercise rights. Submit a clear request through the Google Play listing or App Store page contact (Developer contact / email). We will respond within timelines and formats required by applicable law where we can verify and fulfill the request. For Firebase-held records tied to an anonymous session, we may need reasonable information to locate data, as described under Your choices, access, and data deletion above.
Children. Where Article 8 GDPR applies to offering online services directly to children and parental responsibility measures are required in your member state, parents or guardians should supervise use of optional online features; contact us via the Play listing or App Store page for requests concerning a child’s data where the law applies.
Representative or DPO. We do not generally publish a separate EU/UK representative or Data Protection Officer for Brain Forge; privacy requests are handled through the Play listing or App Store page unless we publish an additional address in a future update when required by law.
The following data is stored only on your device (local storage) and is never sent to our servers:
Most of this data stays on your phone. Clearing app data or uninstalling the app will remove the local copy.
Arcade training credits (optional cloud mirror): When you open the Arcade or after you earn scores, the app may sign in with Firebase Anonymous Auth and write a small document under users/{anonymousUid} in Firestore: training credit balance, processed cognitive total (used only to compute how many credits you have earned), and which Arcade titles you have unlocked. This is not your name, email, or contacts. It helps prevent trivial tampering with unlock state. If you are offline, credits may update only on-device until the next successful sync.
Expansion and offline-first titles (Totus Word Quest, Factor Flow, Neuro-Link Logic, Word Search Quest): These games run on your device like other training games. Progress and scores use the same local storage pattern and are not uploaded to our servers for those titles. Totus Word Quest crossword answers stay English/Latin letters; localized clue lines are bundled on-device where available.
Brain Forge includes an in-app Language selector. All 50 languages shown in the list ship with bundled interface text for the app shell—menus, stats, Settings, Arcade catalog names, level-selection chrome, and translated titles and short descriptions for each training game on home and game headers. English remains the fallback only if a future update omits a string for a locale. Word-based puzzle content (for example word-search letter grids, crossword grids and clues, word-scramble target words, hangman, riddles, and similar modes) may still use English or Latin letters, or English clues and answers, in some locales where curated, language-specific word banks are not yet used—by design for safety and fairness. That puzzle content is not uploaded from our servers when you change language; language choice is handled on-device and does not create an account or send your preference to Firebase.
The Chess multiplayer feature uses Firebase (Google) to allow you to play with a friend using a room code:
Firebase is operated by Google. Their privacy policy applies to data processed by Firebase: Firebase Privacy Policy.
The Arcade offers additional unlockable mini-games (abstract strategy, word and logic puzzles, geometry, reflex / brick-style paddle games, and skill games—the catalog may grow). Each catalog entry stays locked until you spend training credits to unlock it. It uses the same Firebase project with anonymous authentication:
users/{anonymousUid} may store: integer trainingCredits, integer processedCognitiveTotal (derived from your on-device cognitive score for credit math only), and a list of unlockedArcadeIds (catalog identifiers). No free-text profile or social data.Brain Forge uses minimal permissions:
Some levels include bonus challenges that may use your device’s text-to-speech (spoken hints or encouragement) or vibration / haptics. That feedback is produced on your device; we do not record your voice, store audio for upload, or send haptic or speech data to our servers.
Brain Forge suits a broad audience on Google Play and the Apple App Store. It has no third-party advertisements and is not built to profile users for ads. We aim to align disclosures with Google Play Families policies and the App Store age-rating / Kids-category guidance when your target audience includes younger users: no in-app ad inventory, no AAID or IDFA-based ad use in this product (see Ads, marketing tracking, and sale of data above), and optional online features limited to Firebase as described—not open social networks or public feeds.
Optional Chess multiplayer syncs a game board between two people who use the same room code. Players may optionally send pre-selected emoji reactions (not free-text messaging). There is no friend list or public profile. Parents, guardians, and educators may wish to supervise sharing of room codes with trusted contacts.
We do not knowingly collect names, emails, phone numbers, or contact lists from anyone, including children, through the app. On-device data is limited to game progress, scores, and optional settings (for example ambient music). Where Firebase Anonymous Auth is used (Chess rooms, Arcade credits/unlocks), we do not ask for a child-specific profile; see the sections above for technical identifiers and gameplay fields on Google’s systems.
If you are a parent or guardian and believe a child has provided personal information to us in a way that concerns you, contact us via the Google Play listing or App Store page and we will take appropriate steps, which may include deleting relevant Firebase-held records where feasible.
Publishers listing the app on Google Play should keep App content (target audience, Data safety, ads/Families declarations) consistent with this policy; see Families policies.
The U.S. Children’s Online Privacy Protection Act (COPPA) and the FTC’s COPPA Rule address how operators must treat personal information collected online from children under 13. The FTC publishes plain-language guidance for businesses and parents, including:
What Brain Forge does not do through the app: We do not use the app to ask children for a screen name, email, phone number, postal address, or other direct contact information. We do not show third-party ads or use interest-based advertising as described in Ads, marketing tracking, and sale of data above.
What may be collected when optional online features are used: If a user (including a child whose parent or device owner allows use of the app) opens Chess multiplayer or Arcade features that sync online, the app may use Firebase Anonymous Auth and store persistent identifiers and gameplay-related fields (room state, credits, unlock ids) in Google Cloud / Firestore as described earlier. That processing supports the feature, not marketing to children or open social networking. On-device gameplay does not require those features.
Parents and guardians: You may request access, deletion, or cessation of further collection of child-associated information we or our service providers hold where COPPA and related law apply, by contacting us through the Google Play listing or App Store page (Developer contact). We will take commercially reasonable steps to respond, including deleting or anonymizing Firebase-held records we can reasonably identify from your request. We may need limited information to locate data tied to an anonymous session; we do not require more personal information than is reasonably necessary for on-device training games that do not use those online features.
Service providers: We use Google Firebase as described in this policy. Google’s own terms and notices apply to its processing; see Firebase Privacy Information. If you have questions about COPPA and third-party SDKs, the FTC discusses responsibilities when using others’ software in apps—see the resources linked above.
We may update this privacy policy to reflect app changes, legal requirements, or Google Play / App Store disclosure expectations. The Last updated date at the top will change when we do. For material changes, we may also provide an in-app notice (for example on About) where practical. Continued use of the app after the updated date may constitute your acceptance where allowed by law.
For privacy questions, data deletion requests, GDPR / EEA / UK / Swiss data-subject requests, parental or COPPA-related inquiries (including from U.S. parents or guardians), or policy clarifications, contact us through the Google Play listing or the App Store page for Brain Forge (Developer contact / support email). We respond to reasonable verifiable inquiries in line with applicable law (including the GDPR and UK GDPR where they apply, COPPA where it applies), Google Play and App Store policies, and the practices described in this policy.