Your data, handled gently.

beauty&brains is run by Rena Alikishizada, Quantiusstraße 30, 53115 Bonn, Germany. She is the controller of the personal data described here. Questions or requests: hello@beautybrains.eu.

This notice covers the website beautybrains.eu, the waitlist, and the beauty&brains app at app.beautybrains.eu.

When you join the waitlist we store:

• your email address and, if you give it, your first name;
• the topics you pick and your browser language;
• how you found us (for example a TikTok link) and the code of the friend who invited you;
• a one-way hashed version of your internet address, used only to stop spam sign-ups. We never store the address itself.

We use this to keep your place, run the invite programme and email you when beauty&brains opens, plus occasional updates. The legal basis is your consent (Art. 6(1)(a) GDPR), given with the tick box. You can withdraw it at any time. You must be 16 or older to join.

The app is private and invite-only while we test it. When you use it, we store:

• Your account: email address, first name, the subjects you choose, and when you finished the welcome tour.
• Your learning: your answers to questions, finished lessons, reading progress, and the things you save or like.
• Your plans: to-dos, calendar entries and study-timer sessions.
• Your journal: entries, moods and feelings. These are private: only you can read them. Not Rena, not other members.
• Notifications: if you turn them on, a technical address for your device so we can send them.

We use this to run the app for you (Art. 6(1)(b) GDPR). Journal entries can include things about your health or wellbeing. You choose to write them, and they are used for nothing except showing them back to you (Art. 9(2)(a) GDPR).

If you type words that suggest you may be in danger, the app shows helplines. That check happens on your phone only: nothing is sent, stored or seen by anyone.

We use a small number of trusted services, each under a data processing agreement:

• Supabase: database and sign-in, hosted in London, United Kingdom (covered by an EU adequacy decision).
• Vercel: hosting for the website and the app.
• Resend: sends our emails, including sign-in codes (EU region).
• Apple, Google and Mozilla push services: deliver notifications to your device, if you turn them on.
• Anthropic (Claude): writes lessons, questions, recipe methods and chapter quizzes. We send it no personal data, only subject names and book text.

Where a provider is based outside the EU, transfers are protected by the European Commission's standard contractual clauses or an adequacy decision. We never sell your data, and there is no advertising or tracking.

We only use what is strictly needed: a sign-in cookie that keeps you logged in, and small settings saved on your device (your waitlist code and your reading text size). There are no analytics or advertising cookies, so there is no cookie banner. Fonts are served from our own servers.

• Waitlist: until the app launches and up to 12 months after, or until you ask us to delete it.
• App account: for as long as you have an account. When it is deleted, everything in it is deleted with it.
• Sign-in codes expire after one hour.

You can ask to see, correct, export or delete your data, restrict or object to its use, and withdraw consent at any time, by writing to hello@beautybrains.eu. We reply within one month.

You can also complain to a data protection authority. Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

If we change how we use your data, we update this page and the date below, and tell members in the app.