Privacy Policy

Plain-language summary

BrainSpark does not require learner accounts or named learner profiles in the current service. We do not intentionally ask learners for names, email addresses, phone numbers, school names, home addresses, or precise GPS location as part of the normal quiz experience. Limited technical, regional, analytics, security, and service-provider information is still processed to operate, protect, measure, and improve BrainSpark.

1. Who we are

BrainSpark is an AI-assisted educational service operated by QuintelX LLC (“BrainSpark,” “we,” “us,” or “our”). This Privacy Policy describes the current BrainSpark service available to families in the United States and India.

2. Current product design

BrainSpark does not currently require a learner account or maintain a persistent server-side learner profile. Some learning preferences, progress counters, and difficulty-feedback information are stored locally in the browser. Generated questions and related quality-review information are stored in BrainSpark's question bank but are not intentionally linked to a named learner.

3. Information we process

Information a user selects or submits

• Age band, learning region, topic, subtopic, and difficulty choices.
• Recent question text used to reduce repetition.
• A fixed-choice report reason when a question is reported, such as Confusing, Wrong answer, Bad options, Inaccurate fact, or Other. The normal report interface does not request free-text reporting.

Information stored on the device

BrainSpark uses browser local storage to preserve information such as learning-region preference, recent question history, topic-mastery counters, and difficulty-feedback counters. This information remains on that browser or device until it is cleared, overwritten, or otherwise removed by the browser or user. It is not an identity-linked cloud learner profile.

Technical and usage information

• Internet Protocol (IP) address, used temporarily as the identifier for rate limiting and service protection. In the current application configuration, the related Upstash Redis rate-limit key was observed to expire automatically after about two minutes.
• Country-level region information supplied through Vercel request infrastructure, used to help select the U.S. or India learning experience and for internal region analytics. BrainSpark does not request precise GPS location.
• Hosting, request, browser/device, diagnostic, security, and aggregate usage information processed by infrastructure and analytics providers.

BrainSpark uses limited technical identifiers, such as IP address, only to support the internal operations of the service, such as rate limiting, security, and keeping the service running. BrainSpark does not use these identifiers to contact a specific individual, to build profiles, or for behavioral or targeted advertising. The rate-limit record described above expires automatically after about two minutes. BrainSpark does not store IP addresses in its question database, does not link them to question records or on-device progress, and uses no advertising or cross-site tracking services.

Generated educational content and quality records

BrainSpark stores generated questions, answer choices, correct answers, explanations, topic and difficulty metadata, validation results or status, question reports, and timestamps. These records support the educational content library, semantic similarity and duplicate detection, quality review, and improvement. They are not intentionally tied to a named learner profile.

4. How we use information

• Provide the appropriate U.S. or India learning experience.
• Generate, display, review, report, correct, and improve educational questions.
• Reduce repetition and identify similar or duplicate questions.
• Remember certain progress information and settings on the user's device.
• Prevent abuse, enforce rate limits, protect the service, troubleshoot, and maintain reliability.
• Measure aggregate usage and improve BrainSpark.
• Comply with law, enforce our Terms, and protect users, BrainSpark, and others.

5. AI and embedding processing

BrainSpark sends educational prompts and relevant question context to Anthropic's commercial API for question generation, rewrites, and certain post-generation quality reviews. The information sent may include selected learning region, age band, topic, subtopic, difficulty, recent question text, and generated educational content. BrainSpark does not intentionally include a learner's name, email address, account identifier, device identifier, or IP address in the generation prompt.

According to Anthropic's current commercial-data policies, commercial API inputs and outputs are not used to train Anthropic models by default. Anthropic's applicable terms, retention practices, safety exceptions, and account settings govern provider-side handling.

BrainSpark also uses Voyage AI to create vector embeddings of generated question text for semantic similarity and duplicate detection. The text sent for embedding does not intentionally include a learner's name, email address, account identifier, device identifier, or IP address. BrainSpark has opted out of Voyage AI's use of submitted content for model training. Voyage AI's applicable terms and retention practices govern provider-side handling.

Questions may be displayed before automated post-generation review is complete. AI-generated educational content may contain errors.

6. Service providers and disclosures

BrainSpark currently uses the following service providers:

• Vercel: hosting, serverless execution, country-level request signals, runtime/request logging, and Web Analytics.
• Anthropic: AI question generation, rewrites, and certain post-generation quality review.
• Voyage AI: vector embeddings for semantic similarity and duplicate detection.
• Supabase: storage of generated questions, validation metadata, report information, and related question-bank data.
• Upstash Redis: temporary IP-based rate limiting.

These providers may process limited information on our behalf or as otherwise described in their applicable terms and policies. BrainSpark may also disclose information when required by law, to protect safety or rights, or in connection with a corporate transaction subject to appropriate protections. BrainSpark does not sell learner profiles and currently does not use student information for targeted advertising.

7. Retention and deletion

• Browser-local state remains until it is cleared, overwritten, or otherwise removed on the device.
• The application-side Upstash rate-limit key has an observed lifetime of approximately two minutes.
• IP addresses in Vercel's request logs are kept for about one hour under BrainSpark's current hosting plan, then deleted. Vercel Web Analytics uses no cookies and discards its request-based visitor identifier after 24 hours; BrainSpark sees only aggregate counts.
• BrainSpark keeps IP-based records only as long as needed to prevent abuse and keep the service working, and does not store IP addresses in its question database.
• Generated questions and associated validation and report metadata are currently retained on a long-term basis as part of BrainSpark's educational content library. BrainSpark does not currently operate a routine deletion schedule for those records. Questions may be corrected, retired, or deleted after reports or quality review.
• Service providers may keep their own records, such as security or backup records and AI API data (which does not include learners' IP addresses), according to their settings, contracts, and policies, including applicable safety or legal exceptions.

8. Children and parents

BrainSpark is intended for learners ages 6-16, including children. The current service is designed to minimize the amount of personal information requested from learners and does not require a child account. Parents and guardians should supervise use where appropriate and instruct children not to submit personal or sensitive information.

BrainSpark does not let children post or share information publicly. There are no public profiles, comments, chat, messaging, or leaderboards tied to a person.

BrainSpark's privacy-conscious design does not eliminate all technical processing by web infrastructure and service providers, and it does not by itself determine whether a particular privacy law applies.

9. United States — children's privacy

U.S. children's privacy laws, including the Children's Online Privacy Protection Act and its implementing Rule, may apply to certain child-directed online services that collect personal information from children under 13. Depending on the circumstances, covered operators may have notice, parental consent, access, deletion, security, minimization, and retention obligations.

A parent or guardian can ask to review or delete information connected to their child's use of BrainSpark, and can refuse further collection or use at any time by having the child stop using BrainSpark and clearing BrainSpark's site data in the browser. To make a request, email support@quintelx.ai. Because BrainSpark keeps IP-based records only briefly and does not maintain named learner accounts, there may be no stored information to review, and BrainSpark may be unable to associate a question-bank record with a particular child.

10. India — privacy and children's data

India's Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 establish requirements for digital personal data, including provisions concerning children, with provisions becoming effective according to their applicable commencement schedule. Where applicable, individuals or parents and guardians may have rights relating to access, correction, erasure, grievance handling, nominating another person to exercise these rights, or other matters.

Questions, requests, and grievances about how BrainSpark handles personal data can be sent to support@quintelx.ai. BrainSpark will respond within a reasonable period not exceeding 90 days and may request information reasonably necessary to authenticate and process a request. Because there are no accounts, it helps to include the approximate date and time of use, the country, and the question text or topic, if relevant. If a grievance is not resolved, individuals in India may be able to complain to the Data Protection Board of India.

11. Security

BrainSpark uses administrative, technical, and organizational measures intended to protect the limited information it processes. No system can be guaranteed to be completely secure. Application secrets used by the reviewed server-side routes are stored in server-side environment variables and are not intentionally exposed to browser code. Access to the BrainSpark Supabase project is currently limited to the owner, and the reviewed database operations are performed server-side.

12. Your choices and privacy requests

• Clear BrainSpark site data through browser settings to remove device-local preferences and progress information.
• Use the in-product report control to flag a question.
• Contact BrainSpark to ask a privacy question or request access, correction, or deletion where applicable. BrainSpark may retain information where permitted or required by law and may be unable to identify records that are not linked to a person.

13. Changes to this Privacy Policy

BrainSpark may update this Privacy Policy as the service, vendors, or applicable law changes. The revised policy will be posted with an updated effective date, and additional notice will be provided where appropriate.

14. Contact

Privacy contact: support@quintelx.ai
Operator: QuintelX LLC
Website: brainspark.study
Business mailing address: 3513 Stroll Rd, Plano, TX 75025
Telephone: 469-216-1534