Legal
Privacy
What personal data Brainee processes, why, and for how long.
Effective from 1 November 2026
Este documento solo se mantiene en checo e inglés. Una traducción jurídica es trabajo de un abogado, no de una máquina, así que estás leyendo la versión inglesa.
The data controller is Filip Zemánek, Company ID (IČO) 14207893, registered office Prakšice, Czech Republic. For data protection matters write to soukromi@brainee.eu.
Brainee works with what you plan and with a recording of your voice. Those are sensitive things, so this document is specific: exactly what we collect, where we send it and when we delete it.
1. What data we process
| Data | Where it comes from | Why |
|---|---|---|
| E-mail, name | From you at registration | Account, sign-in, communication |
| Tasks, notes, categories | You create them in the app | The service itself |
| Voice recording | Created when you dictate | Transcription into text |
| Transcript | Created from the recording | Creating tasks, bug reports |
| Metadata about working with tasks | Created by using the app | Energy curve, weekly review |
| Subscription data | From the store or payment gateway | Managing the subscription, accounting |
| Technical device data | Created by using the app | Operation, security, bug reports |
We do not read the content of your notes. In the admin tool we see only the title, the label and the time of the last edit; the text itself is not available to us.
2. Our legal bases
- Performance of a contract — account, tasks, planning, subscription. Without this data the service cannot be provided.
- Legitimate interest — operational security, defence against abuse, reporting and fixing bugs, improving the accuracy of suggestions.
- Legal obligation — accounting and tax records are kept for the period the law requires.
- Consent — optional notifications and analytics. Consent can be withdrawn in settings at any time without affecting the lawfulness of earlier processing.
4. Artificial intelligence and model training
We send the recording to a transcription service and send the resulting text for analysis. Our suppliers are contractually prohibited from using the content to train their own or public models.
To improve our own suggestions we use metadata about what you did with a suggestion — whether you accepted, edited or discarded it. We do not use the content of your notes for this.
5. How long we keep data
| What | How long |
|---|---|
| Voice recording | At most 24 hours after processing |
| Transcript | 30 days |
| Tasks, notes, settings | For as long as the account exists |
| Data after account deletion | Erased within 30 days |
| Accounting records | 10 years, required by law |
| Records of admin access to data | 2 years |
6. How we protect data
- Data is stored in the European Union and encrypted in transit and at rest.
- Staff access is limited by role and every access to another person's data is written to an audit log that cannot be altered afterwards.
- Keys to third-party services live only on the server, never in the mobile app.
- If a breach occurred that posed a risk to your rights, we would report it to the supervisory authority within 72 hours and to you without undue delay.
7. Your rights
Under the GDPR you have the right:
- to access your data and obtain a copy of it,
- to have inaccurate data corrected,
- to erasure (the “right to be forgotten”),
- to restriction of processing,
- to portability in a machine-readable format,
- to object to processing based on legitimate interest,
- to withdraw consent where processing is based on consent.
Data export and permanent account deletion are available directly in the app's settings and are handled automatically. Other requests are answered within 30 days at soukromi@brainee.eu.
If you disagree with how we handle your data, you may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in your country.
8. Automated decision-making
The app lays out your day automatically, but this is not a decision with legal effect or similarly significant impact. You can reject or adjust every suggestion and nothing is settled by it.
9. Children
We do not provide the service to anyone under 16 and we do not knowingly process their data. If you find that a child has given us such data, write to us and we will delete it.
10. Changes to this document
We may update this document. A material change will be announced by e-mail and in the app at least 30 days in advance. Earlier versions are available on request.