Privacy Policy

Effective: March 27, 2026. Last revised: March 27, 2026.

Introduction

rebrain.gg (“rebrain.gg”, “we”, “us”) is operated by Odd Solutions Ltd, a company limited by shares registered in England and Wales. This privacy policy explains how we collect, use, and share information about you when you use our website and services at rebrain.gg (the “Services”) or when you otherwise interact with us.

We want you to understand what data we hold and how we use it. If you have questions, please contact us using the details at the end of this policy.

TL;DR

• We are a learning platform. You can upload sources, generate and answer questions, discuss answers with our AI assistant (“ggAI”), and participate in communities.
• We collect information you give us (e.g. email, username, content you create) and technical data (e.g. IP address, browser) when you use the Services.
• We use third-party services to run rebrain.gg (e.g. email delivery, AI for question generation and evaluation). Those providers process data on our instructions or under their own policies; we are not responsible for their practices.
• Some of your activity is public (e.g. username, questions you answer, submissions, comments) to other users of the Services.
• We do not sell your personal data.
• We may display advertising on the Services. If we do, we or our ad partners may use cookies and usage data to deliver and measure ads; see “Advertising” below.
• You have rights (e.g. access, correction, deletion) under UK and EEA law. Contact us to exercise them.
• Use of the Services is at your own risk. We disclaim responsibility for user content, third-party services, and your use of the Services to the fullest extent permitted by law.

Who is responsible for your data?

Odd Solutions Ltd is the data controller for the personal data we collect in connection with the Services. Our contact details are in the “Contact us” section below.

What information we collect

Information you provide to us

• Account information. When you sign up (e.g. by magic link or Google), we collect and store your email address. If you set a username, we store that (it is public). We store an encrypted password only if you set one; we may store tokens for magic-link sign-in and, if you use “Sign in with Google”, an identifier and profile data (e.g. name, profile image) from Google.
• Content you create. We store: sources you upload (title, URL, and content, e.g. markdown); questions generated from those sources; your answers (“submissions”) and our evaluation of them; comments you post on questions or on submissions; messages you exchange with our AI assistant (ggAI); community posts and comments you write; and any feedback you send us. This data is used to provide the Services and may be visible to other users as described under “Public content” below.
• Preferences and settings. We store your choices (e.g. display preferences, notification settings, community memberships) so we can personalise the Services.

Information we collect automatically

When you use the Services we may collect:

• Log and device data: IP address, browser type, operating system, referring URL, and similar technical information.
• Usage information: pages you visit, actions you take (e.g. submitting answers, joining communities), and when you do so.
• Cookies and similar technologies: We may use cookies and similar technologies to keep you signed in, remember preferences, operate the Services, and—if we serve advertising—to deliver and measure ads. You can control cookies through your browser settings.

Information from third parties

If you sign in with Google, we receive from Google the information you allow (e.g. email, name, profile picture) in accordance with Google’s policies. We do not control what Google collects or shares.

How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Services (e.g. hosting your content, generating questions, evaluating answers, powering ggAI).
• Authenticate you and manage your account.
• Send you transactional emails (e.g. magic links, password reset) and, if you have agreed, other communications.
• Notify you (e.g. when someone comments on a question you answered or reacts to your submission) in accordance with your settings.
• Enforce our terms and policies, protect the safety of the Services, and comply with law.
• Respond to your requests and support.
• Deliver and measure advertising on the Services, if we display ads.

We use AI services (e.g. OpenAI) to generate questions from your sources, to evaluate your answers, and to power ggAI. When we do so, we send relevant text (e.g. source content, question text, your submission, chat history) to those providers. Their use of that data is governed by their own terms and privacy policies; we do not control them.

We process your personal data for the purposes described above on the basis of: (i) performance of our contract with you (to provide the Services), (ii) our legitimate interests (e.g. security, improving the Services, enforcing our terms), and (iii) your consent where we ask for it (e.g. optional communications or, where required, for certain cookies or advertising). You can withdraw consent where it applies without affecting the lawfulness of processing before withdrawal.

How we share your information

• With your consent or at your direction. For example, when you post content that is visible to other users.
• With service providers. We use vendors to host the Services, send email (e.g. Resend), provide AI capabilities (e.g. OpenAI), and—if we serve ads—to deliver and measure advertising. They process data on our behalf or under their own terms. We do not sell your data to these or any other third parties.
• To comply with law. We may disclose information if required by law, court order, or governmental request, or to protect our rights and safety.
• In connection with a transfer. If we merge, sell, or transfer part of our business, we may share information with the relevant parties; we will notify you of any change of control where required.

Public content

Much of the Services is designed to be shared. Your username (if set), profile, submissions (answers to questions), comments on questions and submissions, community posts and comments, and the fact that you joined communities may be visible to other users. Questions and sources linked to communities may also be visible. Do not post information you wish to keep private. We are not responsible for how other users or third parties use content you make public.

How we protect your information

We use technical and organisational measures (e.g. encryption in transit, access controls, secure hosting) to help protect your data against loss, misuse, and unauthorised access. No system is completely secure; you use the Services at your own risk. We are not liable for breaches that occur despite our reasonable efforts or that are caused by factors outside our control.

Retention

We keep your information for as long as needed to provide the Services, enforce our terms, and comply with law. When you delete your account, we will delete or anonymise your personal data in line with our procedures, except where we must retain it for legal or legitimate business reasons. Some content (e.g. posts, comments) may remain visible if it was shared publicly, until we remove it in the normal course of operations.

Your rights (UK and EEA)

If you are in the United Kingdom or the European Economic Area, you have rights under applicable data protection law, including:

• Access: You can ask for a copy of the personal data we hold about you.
• Rectification: You can ask us to correct inaccurate data.
• Erasure: You can ask us to delete your data, subject to exceptions (e.g. legal obligation).
• Restriction and object: You can ask us to restrict processing or object to certain processing where the law allows.
• Portability: Where applicable, you can ask for your data in a structured, machine-readable format.
• Withdraw consent: Where we rely on consent, you can withdraw it at any time.
• Complain: You have the right to lodge a complaint with a supervisory authority (e.g. the ICO in the UK).

To exercise any of these rights, contact us using the details below. We will respond within the time required by law. We may need to verify your identity.

Advertising

We may display advertising on the Services. If we do, we or our advertising partners may use cookies, device identifiers, and usage data to show you ads and to measure their effectiveness. Ad partners may have their own privacy policies and may collect data on their own behalf. We are not responsible for the content, tracking, or practices of any advertiser or ad network. Your use of the Services constitutes acceptance that we may serve ads and that ad-related data may be processed as described.

Third-party services

We use third-party services (including but not limited to email delivery, hosting, AI/LLM providers, and potentially advertising partners). Those services have their own privacy policies and terms. We do not control how they collect, use, or share data. We are not responsible for the privacy practices or content of any third party. Your use of the Services may involve your data being processed by these third parties; by using the Services you accept that risk.

International transfers

We and our service providers may process and store data in the United Kingdom, the European Economic Area, the United States, or other countries. Where we transfer data outside the UK or EEA, we rely on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms. By using the Services you consent to such transfers where applicable.

Children

The Services are not directed at children under 13 (or the applicable age in your country). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

Changes to this policy

We may change this privacy policy from time to time. We will post the updated policy on this page and update the “Last revised” date. If changes are material, we may notify you by email or through the Services where appropriate. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.

Contact us

For questions about this privacy policy or our data practices, or to exercise your rights:

Odd Solutions Ltd
(Data controller for rebrain.gg)
United Kingdom

You can reach us via the feedback form on rebrain.gg, or by post to the registered office address of Odd Solutions Ltd as shown on the public register at Companies House.

Disclaimer and limitation of liability

To the fullest extent permitted by applicable law:

• We provide the Services “as is”. We disclaim all warranties (express or implied) in relation to the Services. We have no liability to you in respect of the Services or this policy except as expressly set out in the cap and carve-outs below.
• We are not responsible for any user-generated content, for the actions of users or third parties, for the availability, accuracy, or conduct of any third-party service (including AI providers and advertisers), or for any advertising content or ad-related tracking. You use the Services and any third-party services at your own risk.
• We shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profit, or goodwill, arising from your use of or inability to use the Services (including any use of or reliance on ads or ad partners), even if we have been advised of the possibility of such damages.
• Our total liability in respect of any claim arising out of or in connection with the Services or this policy shall not exceed the amount (if any) you have paid to us in the twelve (12) months preceding the claim, or one hundred pounds (£100), whichever is greater.

Nothing in this policy excludes or limits our liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded or limited by law.