1. Who we are
BrandFounder is a software product operated by an independent sole operator based in the United Kingdom.
It is designed to help users turn an idea into a usable brand system inside the app.
Depending on the features you use, that can include brand positioning, messaging, visual direction,
logo and palette exploration, pricing guidance, promotion planning, launch planning, and related
generated outputs.
In this Policy, “BrandFounder”, “we”, “us”, and “our” refer to the operator of the BrandFounder website
and app. “You” and “your” refer to the user of our services.
If you have questions about this Policy or about how your data is handled, you can contact us at
support@brandfounder.ai.
2. Scope of this Policy
This Policy applies to personal data collected through:
- the BrandFounder website;
- the BrandFounder iOS app;
- support communications; and
- related product flows and account features operated under BrandFounder.
This Policy does not replace the privacy policies of third-party services that operate independently,
including Apple, Firebase, and OpenAI. Those services may also process information under their own terms
and policies.
3. The information we collect
3.1 Information you provide directly
-
Account information. This may include your email address, sign-in provider details,
user ID, and related account identifiers.
-
Brand and project content. This includes information you enter into the app, such as
brand names, audience descriptions, product descriptions, summaries, taglines, keywords, pricing inputs,
promotion preferences, launch content, and related project data.
-
Generated and stored assets. This may include generated logos, palette variants,
generated outputs, brand assets, project outputs, and related stored content linked to your account.
-
Optional shared inputs. The app includes an optional setting that allows you to share
certain creation inputs to help improve results. If you choose to enable that option, the relevant inputs
may be stored separately for that purpose.
-
Support communications. If you contact us, we collect the content of your message
and any information you provide with it.
3.2 Information collected automatically
-
Device and app information. This may include device type, operating system version,
app version, language, and time zone.
-
Usage information. We use Firebase Analytics to understand how the app is used,
including screens viewed, actions taken, and feature usage.
-
Crash and diagnostics information. We use crash and diagnostics tooling, including
Firebase Crashlytics when enabled, to detect failures and improve app stability.
-
Website usage information. If analytics is enabled on the website, limited website
usage information may also be collected.
3.3 Information from third parties
-
Apple. If you make an in-app purchase through Apple, Apple processes the payment.
We do not receive your full card or payment details. We may receive limited purchase and entitlement
information needed to verify access and restore purchases.
-
Firebase. We use Firebase services for functions including authentication, database
storage, file storage, analytics, and diagnostics.
-
OpenAI. When you use AI-powered features, the inputs and context needed to generate
the requested output are sent through our backend to OpenAI.
4. How we use your information
We use personal data to operate BrandFounder and provide the features you use.
- to create and manage your account;
- to authenticate users and keep accounts linked to the correct user ID;
- to store, sync and display your brands, projects, generated outputs, and related assets;
- to generate AI-powered outputs you request inside the app;
- to support editing, saving, and retrieving brand and project content across sessions;
- to verify purchases, entitlements, and access to paid features;
- to recover or restore paid project access where applicable;
- to understand product usage through analytics;
- to identify crashes, errors, abuse, fraud, or misuse;
- to improve reliability, performance, and product quality; and
- to respond to support requests and comply with legal obligations.
5. AI processing
BrandFounder includes AI-assisted features. When you use those features, the text, settings, and project
context you provide are sent through our backend to OpenAI so the requested output can be generated.
Examples may include generating or refining brand summaries, positioning, vocabulary, pricing suggestions,
promotion playbooks, launch planning, onboarding descriptions, palette suggestions, market edge analysis,
and related brand outputs.
Generated outputs may also be stored in our backend systems so they can be associated with your account,
saved to your projects, and accessed later.
You should avoid entering sensitive personal information into prompts, notes, or project fields unless it
is genuinely necessary. BrandFounder is designed for brand-building and business planning, not for storing
special-category personal data or other highly sensitive personal information.
6. Payments, purchases and entitlement verification
Payments for in-app purchases are processed by Apple through the App Store. Apple is responsible for the
payment transaction itself.
We do not directly collect or store your full payment card details. To determine whether an account has
access to paid features, we process limited purchase and entitlement information made available through
Apple’s purchase systems and related server-side verification flows.
This may include transaction identifiers, original transaction identifiers, product identifiers, purchase
state, entitlement state, and related metadata needed to confirm access, prevent abuse, restore purchases,
and deliver paid outputs.
7. Where your data is stored
BrandFounder uses third-party infrastructure providers to operate the service. Based on the current product,
this includes Firebase services for authentication, database storage, file storage, analytics, and
diagnostics, and OpenAI for AI generation.
In practice, this means your account data, project data, generated outputs, and related stored assets may
be stored in cloud systems used to run the app and make your content available across sessions and devices.
8. Legal bases for processing
If you are in the UK or EEA, we generally rely on the following legal bases:
-
Contract. Where processing is necessary to provide the app and the features you ask us
to provide, including account creation, project storage, AI generation, and purchase-related access.
-
Legitimate interests. Where processing is necessary to operate, secure, maintain,
debug, improve, and support the product, including analytics, diagnostics, abuse prevention, and service reliability.
-
Consent. Where you choose optional features or settings that rely on consent, including
optional input-sharing settings where applicable.
-
Legal obligation. Where processing is required to comply with applicable law.
9. How we share your information
We do not sell your personal data. We share it only where needed to run the service or where required by law.
9.1 Service providers
We may share relevant data with service providers used to operate BrandFounder, including:
- Firebase services for authentication, database storage, file storage, analytics, and diagnostics;
- OpenAI for AI generation and output processing;
- Apple for in-app purchase and entitlement handling; and
- support or infrastructure providers where needed to operate the service.
9.2 Legal and safety disclosures
We may disclose information if we reasonably believe it is necessary to:
- comply with law, court orders, or lawful requests;
- protect our rights, systems, property, users, or the public;
- investigate fraud, abuse, misuse, or security incidents; or
- enforce our terms and protect the integrity of the service.
10. International transfers
BrandFounder is operated from the United Kingdom, but some of the service providers used to run the app
may process data outside the United Kingdom or European Economic Area.
Where that happens, we aim to rely on providers and safeguards that support lawful international transfers
under applicable data protection law.
11. Data retention
We keep data for as long as it is reasonably needed for the purposes described in this Policy, including
to operate accounts, store brands and projects, provide support, verify entitlements, investigate abuse,
enforce agreements, and comply with legal obligations.
-
Account, brand, and project data may be retained while your account remains active
and while that data remains stored in the app backend.
-
Generated outputs and stored assets may be retained while associated with your account
or projects.
-
Support messages may be retained for support history and recordkeeping.
-
Analytics and diagnostics data may be retained according to the settings and retention
practices of the service providers used for those functions.
-
Purchase-related records may be retained where needed for entitlement verification,
fraud prevention, accounting, or legal compliance.
12. Your rights
Depending on where you live, you may have rights over your personal data, including the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data in certain circumstances;
- object to certain processing;
- request restriction of certain processing;
- request portability of certain data; and
- withdraw consent where processing relies on consent.
To exercise these rights, contact us at
support@brandfounder.ai.
We may need to verify your identity before acting on a request.
If you are in the UK and believe your data has been handled improperly, you may also complain to the
Information Commissioner’s Office (ICO).
13. Account deletion and brand data
BrandFounder currently includes an in-app deletion option in the account and privacy settings.
Based on the current implementation, when you use the in-app deletion flow while signed in, BrandFounder
attempts to delete your user account data stored by us, including your user record, saved brands, saved projects,
and related stored brand assets associated with your account. It also clears locally stored drafts and cached data
from the device as part of that flow.
Deletion of your authentication account is also attempted as part of the same process. In some cases, deletion of
the authentication account may require recent re-authentication or may fail if the underlying authentication provider
requires additional verification.
We cannot guarantee that deletion will be immediate in every case, or that all residual technical records,
entitlement records, analytics, diagnostics, or legally required records will be removed instantly.
If you believe data linked to your account remains after using the in-app deletion flow, contact
support@brandfounder.ai.
14. Analytics, diagnostics and crash reporting
BrandFounder uses Firebase Analytics and may use Firebase Crashlytics and related diagnostics tooling
to understand app usage, detect failures, and improve product stability and performance.
Depending on the service and configuration, analytics or diagnostics information may be associated with
your account, device, or user ID.
If the app provides settings to control analytics, crash reporting, or related sharing preferences,
those settings apply according to the current behaviour of the app at the time of use.
15. Security
We use reasonable technical and organisational safeguards designed to protect your information, including
authenticated access controls, secured data transmission, server-side secret handling, and managed cloud
infrastructure.
No system is completely secure, and we cannot guarantee absolute security. We do, however, take reasonable
steps to reduce risk and protect the service.
16. Children’s privacy
BrandFounder is not directed at children. We do not knowingly collect personal data from children where
doing so would require parental consent under applicable law. If you believe a child has provided personal
data inappropriately, contact us and we will review the issue.
17. Third-party services and links
The app and website may refer to or link to third-party services, including Apple, Firebase, OpenAI,
and external websites. Those services operate under their own terms and privacy policies, and we are not
responsible for their independent practices.
18. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes to the product, providers,
or legal requirements. When we do, we will update the “Last updated” date above.
Where appropriate, we may also provide additional notice inside the app, on the website, or by email.
19. Contact us
If you have questions about this Privacy Policy or about how your information is handled, contact:
For Apple users, in-app purchases are also subject to Apple’s platform terms and App Store rules.