Privacy Policy

Brush AI mobile application

Last updated: July 2, 2026

1. Who we are

This Privacy Policy explains how Indise LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use the Brush AI mobile application and related services (together, the “Service”). It should be read together with our Terms of Use & End User License Agreement.

Indise LLC is the data controller for personal data processed through the Service. You can reach us at support@brush.win.

2. Information we collect

Information you provide

• Account information. Email address, username or display name, password (stored in hashed form), and date of birth (used to verify you meet the minimum age requirement).
• Profile content. Optional profile details you choose to add, such as an avatar or display name shown on leaderboards.
• Communications. Messages you send us, for example support requests or feedback.

Information created when you use Brush

• Game activity. Your predictions, virtual points balance, streaks, badges, leaderboard participation and rankings, referrals, and in-app interactions such as which prediction cards you view, swipe, or skip.
• Subscription status. Whether you have an active Brush Pro subscription, the product purchased, and renewal state. Payments are processed by Apple; we never receive your card number or full payment details.
• Device & technical data. Device model, operating system version, app version, language, time zone, IP address, approximate location derived from your IP address (country/region level), device identifiers, push notification token, and diagnostic data such as crash logs and performance metrics.

Information from third parties

• App Store. Purchase and subscription events confirmed by Apple (via our subscription management provider) so we can unlock Brush Pro features.
• Attribution partners. Install and campaign attribution data telling us which channel brought you to Brush (see Section 6).

Market data shown in the app (odds, outcomes, sports fixtures, and news) comes from third-party sources such as Polymarket and sports data providers. It is about public events, not about you.

3. How we use your information

• Provide the Service. Create and manage your account, record predictions, calculate points, streaks, badges, and leaderboard positions, and resolve markets.
• Personalize your experience. Build your prediction deck and recommendations based on your activity, such as the teams, tournaments, and market types you engage with.
• Generate AI insights. Produce AI-generated market insights for Brush Pro. Insights are generated from market and sports data — we do not send your name, email, or other account identifiers to AI model providers.
• Manage subscriptions. Verify purchases, unlock premium features, and handle renewals and cancellations.
• Communicate with you. Send service emails (such as verification codes and password resets), push notifications about your predictions, streaks, badges, and leaderboards, and respond to support requests.
• Keep Brush fair and safe. Detect and prevent cheating, abuse, fraud, multiple accounts, and violations of our Terms.
• Improve the Service. Analyze usage, measure feature performance, diagnose crashes and errors, and develop new features.
• Comply with law. Meet legal obligations and enforce our legal rights.

4. Legal bases for processing

Where laws such as the EU/UK GDPR apply, we process your personal data on these legal bases: performance of a contract (running your account and the game under our Terms), legitimate interests (improving and securing the Service, preventing abuse, understanding how the app is used), consent (where required, for example for certain notifications or tracking — which you can withdraw at any time), and legal obligation (where processing is required by law).

5. How we share information

We do not sell your personal data. We share it only with:

• Service providers that process data on our behalf under contract, including cloud hosting and database providers (Microsoft Azure), push notification delivery (Google Firebase), transactional email delivery, subscription management (RevenueCat), analytics and crash reporting, and mobile attribution (Adjust).
• Apple, which processes App Store payments under its own terms and privacy policy.
• Other users, to a limited extent: your display name, avatar, and game statistics may be visible on leaderboards and profiles. Your email, date of birth, and other private details are never shown to other users.
• Authorities or other parties when required by law, for example to comply with a legal process, enforce our Terms, or protect the rights, safety, or property of Indise LLC, our users, or others.
• A successor entity in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your data.

6. Analytics & attribution

We use analytics tools to understand how Brush is used — for example which screens are viewed, which features are popular, and where the app crashes. We also use a mobile measurement partner (Adjust) to attribute app installs to marketing campaigns. These tools receive device and event data described in Section 2; they are configured for measurement, not for building advertising profiles about you.

On iOS, tracking across other companies’ apps and websites occurs only if you grant permission through Apple’s App Tracking Transparency prompt. You can change this at any time in your device Settings.

7. Push notifications & email

With your permission, we send push notifications about things like market resolutions, streak reminders, badges, and leaderboard activity. You can turn notifications off at any time in the app settings or in your device Settings.

We send transactional emails (such as sign-up verification and password reset codes) from noreply@brush.win. These are necessary to operate your account. Any marketing emails, if introduced, will include an unsubscribe link.

8. Data retention

We keep your personal data for as long as your account is active. When you delete your account, your personal data is deleted or irreversibly anonymized, except where we must retain limited records to comply with legal obligations, resolve disputes, or prevent abuse. Aggregated or anonymized data that no longer identifies you may be retained for analytics.

9. Your rights & choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• delete your data (see Section 10);
• object to or restrict certain processing, and withdraw consent where processing is based on consent;
• data portability, receiving your data in a structured, machine-readable format; and
• complain to your local data protection authority.

To exercise any of these rights, contact us at support@brush.win. We will respond within the timeframe required by applicable law and may ask you to verify your identity first. We do not discriminate against you for exercising your privacy rights.

10. Account & data deletion

You can delete your account and associated personal data at any time:

• in the app, from your profile settings; or
• online at app.brush.win/delete-account.html.

Deletion removes your account information, game activity, and profile. Subscriptions are managed by Apple — deleting your account does not automatically cancel an active Brush Pro subscription, so also cancel it in your device’s Settings > Apple ID > Subscriptions.

11. Security

We protect your data with technical and organizational measures, including encryption in transit (TLS), encrypted storage of secrets and credentials, hashed passwords, and access controls limiting who can reach production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work to protect your information and will notify you and the relevant authorities of a data breach where the law requires it.

12. International data transfers

Our infrastructure is hosted in the European Union (Microsoft Azure, West Europe), and some service providers may process data in the United States or other countries. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or the recipient’s participation in recognized data transfer frameworks.

13. Children

Brush is intended for users who are at least 18 years old (or the age of majority in their jurisdiction, whichever is greater). We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from an underage user, we will delete the account and associated data. If you believe an underage person is using Brush, contact us at support@brush.win.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, notify you in the app or by email. Your continued use of Brush after changes take effect means the updated policy applies to you.

15. Contact us

Questions or requests about this Privacy Policy or your personal data? Contact Indise LLC at support@brush.win.