Privacy Policy for Braingames
Last updated: 21 July 2026
Data Controller
The controller responsible for the processing of personal data in connection with the Braingames mobile application is:
RealityForge GbR
Biberacherweg 3
12247 Berlin
Germany
Represented by its partners:
Evgeni Melan
Patrick Bethke
Email: realityforgeeu@gmail.com
Website: https://www.realityforge.eu
Scope of This Privacy Policy
This Privacy Policy applies to the Android application "Braingames" with the package name:
eu.realityforge.braingames
Braingames is a brain-training application containing memory, mathematics and pattern-recognition exercises.
The App does not require users to create a personal account or provide their name, email address, telephone number or other direct contact information.
The App uses Google Firebase, Google Analytics for Firebase, Google AdMob and the Google User Messaging Platform for certain optional online, analytics and advertising functions.
Data Stored Locally on the Device
Braingames stores information locally in the private application storage of the user's device.
This may include:
• scores from individual training sessions;
• daily score totals and averages;
• lifetime score totals and highscores;
• the number of completed training sessions;
• the most recent training result;
• achievements and achievement progress;
• daily, weekly and lesson-plan streaks;
• completed tutorials and onboarding status;
• lesson-plan frequency and selected reminder time;
• available lesson charges;
• sound, music and effects settings;
• privacy and consent choices;
• locally cached score comparisons;
• technical synchronization information used to prevent repeated score uploads.
This information is used to provide the App's gameplay, progress, statistics, achievement, reminder and settings functions.
Local App data normally remains on the device until the App's data is cleared through the Android settings or the App is uninstalled.
Android backup of the App's private data is disabled.
Where local storage is technically necessary to provide a function requested by the user, the storage is carried out in accordance with Section 25(2) TDDDG. Where personal data is involved, the legal basis is Article 6(1)(b) GDPR.
Anonymous Firebase Authentication
If the user permits the relevant optional data processing through the privacy choices presented in the App, Braingames uses Firebase Authentication, a service provided by Google.
Firebase Authentication creates an anonymous account and assigns a randomly generated Firebase user ID to the App installation.
The App does not associate this account with a name, email address, telephone number, password or social-media account.
Firebase may automatically process technical information required to create, maintain and protect the anonymous account, including:
• the anonymous Firebase user ID;
• the IP address;
• user-agent information;
• device and operating-system information;
• Firebase SDK information;
• the Firebase Android App ID;
• security and diagnostic information.
The anonymous Firebase user ID is a pseudonymous identifier. It can distinguish one App installation from another, but it does not directly reveal the user's identity.
The legal basis for this processing is the user's consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Online Score Storage and Comparison
If the user permits the relevant optional processing, Braingames uses Cloud Firestore, a database service provided by Google.
For each training category, the App may upload one current score summary associated with the anonymous Firebase user ID.
The uploaded score summary may contain:
• the training category;
• the current App version and version code;
• the score-calculation version;
• the database schema version;
• the date associated with the current daily score;
• the daily score total;
• the number of sessions completed on that day;
• the cumulative daily average score;
• the lifetime score total;
• the lifetime highscore;
• the total number of completed sessions;
• a server-generated update timestamp.
The App currently uses the training categories Memory, Math and Pattern Recognition.
A newer score summary replaces the previous score summary for the relevant training category. The App does not create public player profiles or publish individual score histories.
The App may perform aggregate database queries to estimate how a score compares with other compatible scores. The App receives a percentile estimate and the size of the comparison group.
Other users do not receive the user's Firebase user ID or individual score document.
The legal basis for the upload and comparison of score information is the user's consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Google Analytics for Firebase
Braingames uses Google Analytics for Firebase to understand how the App is used and to improve its gameplay, usability, balancing and reliability.
Analytics collection is disabled by default in the App configuration. It is enabled only where the user's privacy choice permits analytics processing.
When Analytics is enabled, the App may transmit information about:
• screens or sections viewed;
• buttons pressed;
• training sessions started, completed or abandoned;
• the selected training category;
• daily or individual training mode;
• scores and reached difficulty levels;
• the number of correct and incorrect answers;
• the duration of a lesson or training session;
• completion of daily training;
• available lesson charges;
• advertisement requests, loading, display, impressions, clicks and failures;
• the App version and score-calculation version.
Google Analytics for Firebase may also automatically process technical information such as:
• an App-instance or installation identifier;
• the IP address;
• an approximate geographic region derived from the IP address;
• device type and operating system;
• App version;
• language and regional settings;
• session and App-lifecycle information;
• diagnostic and SDK information.
Braingames does not intentionally transmit names, email addresses, telephone numbers or the contents of personal communications to Google Analytics.
Collection of the Android advertising ID for Firebase Analytics and Analytics advertising-personalisation signals are disabled in the App's own configuration. This does not prevent the separate Google Mobile Ads SDK from processing advertising or device identifiers as described below.
The legal basis for Analytics processing is the user's consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Users may change or withdraw their privacy choices through the App under:
Settings > Privacy Choices
Advertising Through Google AdMob
Braingames is financed through advertising and uses Google AdMob and the Google Mobile Ads SDK.
The App may display an interstitial advertisement when no lesson charges remain. After an advertisement has been displayed, additional lesson charges may be granted.
The Google Mobile Ads SDK may automatically process or share information including:
• the IP address;
• an approximate geographic region derived from the IP address;
• App launches, taps and other App interactions;
• advertisement impressions and clicks;
• diagnostic and performance information;
• device and account identifiers;
• the Android advertising ID, where available and permitted;
• the App Set ID or similar App-related identifiers;
• information used to detect fraud, invalid traffic and abuse.
This information may be used for:
• delivering advertisements;
• selecting personalised or non-personalised advertisements;
• measuring advertisement performance;
• analytics and reporting;
• detecting fraud and invalid traffic;
• maintaining the security of advertising services;
• complying with legal obligations.
The type of advertising shown depends on the user's region, available consent choices and Google's advertising configuration.
Where consent is required, the legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Certain processing necessary for security, fraud prevention or compliance with legal obligations may be based on Article 6(1)(c) or Article 6(1)(f) GDPR. Our legitimate interest is the prevention of abuse and the financing of the free availability of the App.
Google User Messaging Platform
Braingames uses the Google User Messaging Platform to obtain and manage privacy and advertising choices where required.
The User Messaging Platform may process technical information to determine whether a privacy message must be displayed. This may include:
• the IP address and approximate region;
• App and device information;
• previous consent choices;
• advertising and consent configuration;
• standardised consent strings.
Consent information may be stored locally in the App's private preferences and made available to Google services and participating advertising providers.
Users can reopen the privacy interface at any time under:
Settings > Privacy Choices
Changing or withdrawing a privacy choice affects future processing. It does not automatically delete information transmitted before the choice was changed.
Local Notifications and Training Reminders
Users may voluntarily create a lesson plan and select a reminder time.
For this purpose, the App stores locally:
• the selected weekly training frequency;
• the selected reminder hour;
• technical scheduling information;
• information used to vary reminder messages.
On Android versions that require it, the App requests permission to display notifications.
Reminders are scheduled locally using Android's alarm and notification functions. The schedule may be restored after the device is restarted or after the system time or time zone changes.
The App does not use Firebase Cloud Messaging to deliver these reminders. The lesson plan and reminder time are not intentionally uploaded to RealityForge or Firebase.
The legal basis is Article 6(1)(b) GDPR and Section 25(2) TDDDG.
Notification permission can be withdrawn through the Android system settings.
Android Permissions
Depending on the Android version, Braingames may use the following permissions:
• internet access for Firebase, consent management and advertising;
• access to network-state information;
• permission to display notifications;
• permission to restore locally scheduled reminders after the device has restarted.
The App does not request access to:
• precise device location;
• contacts;
• camera;
• microphone;
• telephone calls;
• SMS messages;
• calendar entries;
• photos;
• videos;
• the user's general file storage.
Google services may nevertheless derive an approximate geographic region from the device's IP address.
Contact by Email
If you contact us by email, we process the information contained in your message. This may include:
• your name;
• your email address;
• the contents of your message;
• attached files;
• the date and time of communication;
• other information voluntarily provided by you.
We process this information to respond to your enquiry and manage further communication.
Where your enquiry concerns a contract or steps requested before entering into a contract, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of enquiries addressed to our business.
Our email account is provided through Gmail, a service of Google. Google may therefore process technical and communication data when emails are transmitted and stored.
Service Providers and Recipients
Personal or pseudonymous data may be processed by:
• Google Ireland Limited;
• Google LLC;
• Google Firebase and Google Cloud service providers;
• Google AdMob;
• advertising providers participating in Google's advertising and consent systems;
• technical service providers used by Google;
• public authorities where disclosure is required by law.
Google may act as a processor on behalf of RealityForge for certain Firebase services.
For certain Analytics, advertising, security and service-operation purposes, Google may process information under its own responsibility and under legal bases determined by Google.
Further information is available in Google's Privacy Policy:
https://policies.google.com/privacy
Information about Firebase privacy and data processing is available at:
https://firebase.google.com/support/privacy
Information about Google's advertising services is available at:
https://policies.google.com/technologies/ads
International Data Transfers
Google operates infrastructure in different countries. Personal data may therefore be processed outside the European Economic Area, including in the United States.
Firebase Authentication is operated using infrastructure located in the United States. Cloud Firestore, Analytics and advertising data may also be processed in the United States or other countries.
Where data is transferred to a country without an adequacy decision by the European Commission, the relevant provider may rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Transfers to eligible organisations in the United States may also be based on the EU-US Data Privacy Framework.
Data Retention
Local App data remains on the device until the App's data is cleared or the App is uninstalled.
Cloud Firestore stores one current score summary for each anonymous user ID and training category. A newer summary replaces the previous summary for that training category.
Cloud score summaries and the associated anonymous Firebase account are retained until:
• they are deleted following a valid deletion request;
• the relevant Firebase project or feature is discontinued;
• deletion is required for technical, security or legal reasons.
Google Analytics data is retained in accordance with the retention settings configured for the relevant Google Analytics property.
Data processed independently by Google AdMob and participating advertising providers is retained in accordance with their own retention policies, security requirements and legal obligations.
Information received through email enquiries is retained for as long as necessary to process the enquiry and any resulting relationship. It may be retained for a longer period where this is required by statutory retention obligations or necessary for the establishment, exercise or defence of legal claims.
Withdrawal of Consent and Privacy Controls
Users can:
• reopen the privacy interface under Settings > Privacy Choices;
• change or withdraw optional Analytics and advertising choices;
• disable notifications through the Android system settings;
• reset or delete the Android advertising ID through Android's privacy settings, where supported;
• clear the App's locally stored data;
• uninstall the App.
Withdrawal of consent affects future processing. It does not affect the lawfulness of processing carried out before consent was withdrawn.
Withdrawal does not automatically delete information that was previously transmitted to Firebase, Google Analytics or advertising providers.
Your Rights
Subject to the requirements of the GDPR, you have the right to:
• obtain information about the processing of your personal data;
• access your personal data under Article 15 GDPR;
• request rectification under Article 16 GDPR;
• request erasure under Article 17 GDPR;
• request restriction of processing under Article 18 GDPR;
• receive data in a portable format under Article 20 GDPR;
• object to processing under Article 21 GDPR;
• withdraw consent at any time under Article 7(3) GDPR;
• lodge a complaint with a data protection supervisory authority.
Where processing is based on Article 6(1)(f) GDPR, you may object to that processing for reasons arising from your particular situation.
You may exercise your rights by contacting:
realityforgeeu@gmail.com
Because the App does not request a name or email address, information stored in Firebase cannot normally be located using personal contact information alone.
To process a request relating to an anonymous Firebase account or cloud score record, we may need additional technical information that connects the request to the relevant App installation. We will provide further instructions where necessary.
Where Google acts as an independent controller, you may also exercise your rights directly against Google.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
Children
Braingames is intended for users aged 13 and older and is not specifically directed at children under the age of 13.
The App does not knowingly request names, email addresses, telephone numbers or other direct contact information from children.
If we become aware that personal data relating to a child has been processed without the consent or authorisation required by applicable law, we will take reasonable steps to delete that information.
No Medical Purpose
Braingames is a recreational brain-training application.
The App is not a medical device and is not intended to diagnose, prevent, monitor or treat any illness, cognitive impairment or medical condition.
Scores and training results are used only for gameplay, progress tracking, achievements and optional anonymous score comparison.
Changes to This Privacy Policy
We may update this Privacy Policy where the App, its functions, the services used or the applicable legal requirements change.
The date shown at the beginning of this Privacy Policy indicates when it was last updated.