This Policy explains how BrandFounder collects, uses, stores and protects information when you use the website, iOS app and related services.
BrandFounder is operated by Carter Manahan, trading as BrandFounder, a sole trader based in the United Kingdom, who is the controller of personal data processed for the BrandFounder website, iOS app and related services.
In this Policy, “BrandFounder”, “we”, “us” and “our” refer to the operator named above, trading as BrandFounder. “You” and “your” refer to the person using the services.
This Policy covers personal data collected through:
Apple, Google and other services you choose may also process information as independent controllers under their own notices. This Policy explains BrandFounder’s role and does not replace those notices.
This may include your email address, Firebase user ID, sign-in provider, account timestamps and related identifiers. If you use Google Sign-In, we may receive the name and email information made available by Google. If you use Sign in with Apple, we receive the Apple credential information made available for authentication; Apple may provide a relay email address instead of your personal address.
This includes brand names, audience and product descriptions, positioning, taglines, keywords, pricing inputs, promotion preferences, launch content, onboarding answers and other text or settings you enter. It also includes photos, logos, visual references and reference images you deliberately select for a request.
This may include generated logos, wordmarks, palettes, typography choices, brand and campaign visuals, generated copy, strategy, market and pricing outputs, launch plans, project records, exported assets and saved brands linked to your account.
We receive limited App Store purchase information needed to verify and deliver a Brand Pack, prevent duplicate charging, recover interrupted delivery and restore an eligible purchase. This may include transaction and original transaction identifiers, product identifier, purchase state, entitlement state and related metadata. We do not receive your full payment-card details.
If you contact us, we collect the message and any information or files you choose to include so we can respond and investigate the issue.
When you use the in-app support button, the email is pre-filled with details that help us find your account and purchase: your BrandFounder user ID and sign-in provider, app version, operating-system version, device model, region setting and, where relevant, the identifiers of a Brand Pack purchase and project that have not yet been delivered. You can read and edit these details before sending, and nothing is sent unless you send the email.
Firebase and our backend may process device and app information, app version, language, time zone, request and error details, installation or device identifiers, authentication state, App Check or device-integrity signals, rate-limit information and related security data needed to deliver requests, diagnose failures and protect the service. Integrity information is operational data and should not be assumed to be anonymous.
Firebase Analytics is off by default. If you turn on “Share usage analytics” in Settings, it may collect screens viewed, setup steps reached, actions taken (such as creating, exporting or sharing a brand), feature use, purchases, errors, app and device information, and a random identifier that Firebase creates for your installation. It is never linked to your account, email address or user ID, and never includes brand names, ideas, descriptions, prompts or anything you type. Advertising features and the device advertising identifier are turned off. You can turn it off again at any time to stop future collection.
BrandFounder uses Firebase Crashlytics to find and fix problems. If the app crashes, or an important step such as a purchase, brand generation, brand save or upgrade fails, a report may be collected. A report can include the technical details of the crash or error, device model, operating-system and app version, the app’s state at the time, the name of the step that failed, related purchase, project or brand identifiers and a Crashlytics installation identifier. Reports are not linked to your account or BrandFounder user ID.
Crash and error reports are designed to exclude brand names, descriptions, ideas, prompts, images and generated content. Crash reporting is off by default. It starts only if you turn on “Share crash reports” in Settings, and you can turn it off again at any time to stop future reports from that device.
“Share inputs to improve results” is a separate, off-by-default setting. If enabled, relevant creation inputs and associated generated-pack information may be stored separately to help evaluate and improve result quality. Turning the setting off stops future optional sharing; permanent account deletion removes shared-input records associated with your user ID from BrandFounder’s active systems.
Before the first AI request on a device, BrandFounder shows a just-in-time disclosure explaining what is sent and asks you to allow AI processing. If you allow it and request an AI feature, the text, settings, project context and selected reference images needed for that request may be sent securely through BrandFounder’s Firebase-based backend to the OpenAI API.
This processing may support brand summaries, positioning, vocabulary, market and pricing starting points, promotion guidance, launch planning, palettes, logos and other visuals. It is necessary to perform the AI generation you requested. It is separate from the optional “Share inputs to improve results” setting.
OpenAI states that API inputs and outputs are not used to train or improve its models by default unless the API customer explicitly opts in. OpenAI’s default abuse-monitoring logs may contain prompts, responses and related metadata and are generally retained for up to 30 days. OpenAI identifies limited exceptions, including longer retention where required by law or reasonably necessary to protect its services or third parties. BrandFounder does not claim Zero Data Retention. See OpenAI’s API data controls.
BrandFounder may separately store generated outputs and project records so they remain available in your account until you delete the relevant content or account, subject to the exceptions described below.
Apple processes in-app payments. BrandFounder processes only the purchase and entitlement information needed to confirm access, avoid duplicate charging, recover eligible interrupted deliveries and restore purchases. Apple handles the payment transaction and any payment data it collects under Apple’s own terms and privacy notice.
The public website is hosted on GitHub Pages. GitHub and its delivery infrastructure may process ordinary web-request and security information, such as an IP address, browser details, requested URL, timestamps and error or abuse signals, to deliver and protect the site.
The website does not include analytics, advertising pixels, fingerprinting, contact forms or non-essential cookies. Instrument Serif, GSAP and the site’s other visual assets are self-hosted, so viewing a page does not require a font or animation request to Google Fonts or jsDelivr.
If you use the theme control, the website stores the selected light or dark theme in your browser’s local storage under brandfounder-theme. This preference remains on your device until you change it, clear browser data or storage is unavailable. It is used only to remember the theme you selected and is not sent to BrandFounder.
We do not sell personal data. Depending on the feature you use, relevant information may be processed by:
We may also disclose information where reasonably necessary to comply with law or a binding request, protect rights and safety, investigate fraud or misuse, or enforce our Terms.
BrandFounder is operated from the United Kingdom, but Apple, Google/Firebase, OpenAI, GitHub and their infrastructure may process information in other countries. The location can depend on the provider, service and configuration in use.
Where UK law requires a transfer mechanism, we will rely on an applicable lawful safeguard made available for the relevant transfer, which may include UK adequacy regulations or approved contractual protections. We do not claim that one particular safeguard applies to every provider or transfer. Contact us if you would like more information about a relevant transfer.
Where no fixed period is stated, we consider whether the account remains active, whether the record is still needed for the purpose collected, the sensitivity of the data, security and dispute risks, provider controls and applicable legal duties.
Subject to applicable law and exemptions, you may have the right to:
BrandFounder does not make solely automated decisions that produce legal or similarly significant effects about you. To exercise a right, email support@brandfounder.ai. We may ask for proportionate information to verify your identity. Withdrawing consent does not affect processing that was lawful before withdrawal.
You can complain to the UK Information Commissioner’s Office. See the ICO’s data-protection complaint guidance.
BrandFounder includes permanent in-app account deletion. While you are authenticated, the deletion service removes BrandFounder data associated with your user ID from active first-party systems, including:
If Sign in with Apple is linked, the app asks you to confirm that identity so the Apple authorisation can be revoked where applicable. The app also clears local onboarding drafts, cached brand data, optional input-sharing and analytics preferences, and the AI-processing disclosure choice, and resets the device's analytics identifier.
Remote data is deleted before authentication so that a failure leaves the account available for a retry. The app reports success only after the remote operation completes. Contact support if you see an error or believe data remains.
Deletion does not control information Apple, Google or another independent provider must keep under its own responsibilities. Limited information may also remain where required by law, needed for a legal claim, or held temporarily in an isolated backup or provider system until routine expiry. Database backups expire automatically within 14 weeks, and crash and error reports within 90 days.
Firebase Analytics is off by default and starts only if you turn on “Share usage analytics”. You can turn it off again to stop future collection. The separate “Share inputs to improve results” setting is also off by default and is not required to use BrandFounder.
“Share crash reports” is also off by default. If you turn it on, crash and error reports help us find and fix crashes and failed purchases or generations. You can turn it off again in Settings at any time.
Turning off AI processing prevents new AI requests until you allow it again. It does not automatically delete projects or outputs already stored; use the in-app deletion controls where you want those removed.
We use reasonable technical and organisational measures designed to protect information, including authenticated access controls, encrypted network transmission, Firebase App Check and integrity controls where configured, server-side secret handling, rate limiting, regular database backups with point-in-time recovery, and managed cloud infrastructure.
No online service can guarantee absolute security. Please keep your sign-in method secure and contact us if you suspect unauthorised account access.
BrandFounder is not directed at children. We do not knowingly collect a child’s personal data where parental consent would be required. If you believe a child has provided information inappropriately, contact us so we can review it.
The app and website may link to Apple, the ICO and other third-party services. A third party controls its own site, terms and privacy practices. Review the relevant notice before providing information directly to that service.
We may update this Policy when the product, providers or legal requirements change. We will update the date above and provide appropriate notice where a change materially affects how personal data is used. We will request a new choice where the law requires it.
BrandFounder
4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB, United Kingdom
Email: support@brandfounder.ai
You can also read the BrandFounder Terms of Use.