Privacy

Your family's privacy

Last updated November 4, 2026

The short version

  • You, the parent, own the account. Kids never sign in, and we never ask for their email.
  • We keep only what Bento Brain needs: your email, a nickname and age group for each kid, and their progress.
  • No ads, no tracking, no analytics tools, and we never sell or share your information for marketing.
  • You can change or remove anything, and ask us to delete your whole account at any time.

Who we are

Bento Brain is made by a small family team in Canada. When this page says "we" or "us", it means the people who run Bento Brain. The person responsible for privacy is our founder, and you can reach us any time at hello@bentobrain.app.

What we collect

About you (the parent)

  • Your email address, so you can sign in with a one-time code. We don't use passwords.
  • A second grown-up's email, only if you add one (for example, the other parent), so they can sign in with their own code and share your kids. We don't email them. Either of you can remove it in Settings.
  • Messages you send us, if you email us.

If you subscribe or give a gift

  • Your subscription: which plan you have, where you bought it (our website, the App Store or Google Play), when it renews or ends, and your past payments. We never see or store your card number: payments are handled by Stripe on our website, and by Apple or Google in the apps.
  • Gifts: the giver's name and email, the parent's email they enter, their message and the delivery date. We use the parent's email only to send that one gift email, and the giver's email for the receipt and any question about the gift.

About your kids (entered by you)

  • A nickname (up to 16 characters). A first name or a nickname is plenty; please don't use a full name.
  • Their age group (6–8, 9–11 or 12–14) and the five activities you picked for them.
  • Their progress: which activities they finished each day, how many hints and tries they used, a short note like "Solved on the first try", and any puzzle they're partway through, so they can pick up where they left off on another device.

Technical information

  • Like every website, the services that run Bento Brain (listed below) keep short-lived logs of requests, such as IP address and browser type, to keep the service secure and working.
  • The app keeps a copy of your family's data and your sign-in on your device (in your browser's storage, or the Bento Brain app's storage on your phone), so it works offline and stays signed in.
  • Daily reminders (phone app): the app asks your permission before sending notifications. If you allow them, the app sends us your phone's push address (a random code from Apple or Google that lets us send a notification to that phone), the reminder time you picked and your time zone. Our server uses them to send the daily reminder, and to skip it once your kids have finished. The reminder only uses your kids' nicknames. Signing out on that phone, or deleting your account, removes it. You can change the time or turn reminders off in the app's Settings, or in your phone's settings.

What we don't collect

No kids' accounts or emails, birthdays, photos, voice, location or contacts. We don't use advertising or tracking cookies, and we don't use analytics tools.

How we use it

  • To sign you in and show each kid the right bento for their age group.
  • To save progress and streaks, and keep them in step across your devices.
  • To run your free trial and subscription: to know whether your family is covered, and to send a few account emails, such as a gift arriving or a reminder a couple of days before your free trial ends. These aren't marketing.
  • To answer your messages and help if something goes wrong.
  • To understand, in totals (for example, how many bentos were finished this week), what's working and what to improve. We look at families' details only when needed to help or to fix a problem.

We never sell your information, never show ads, and never share it with anyone for marketing.

Who helps us run Bento Brain

We use a few trusted service providers. They handle your information only to provide their service to us:

  • Supabase stores our database and handles sign-in. Its servers for Bento Brain are in Canada (Montreal), so your family's information (your account, your kids and their progress) is stored in Canada.
  • Vercel hosts the website and app (United States).
  • Resend sends our emails: sign-in codes, gift emails and trial reminders (United States).
  • Stripe processes payments on our website (gifts and subscriptions). Stripe receives your card details directly and gives us a confirmation, never your card number. Stripe is based in the United States and Ireland.
  • RevenueCat keeps track of subscriptions, wherever you bought them (our website, the App Store or Google Play), so your family is covered everywhere. It receives a random family ID, your plan and purchase history from the store, and nothing about your kids (United States).
  • Apple delivers the iPhone app through the App Store and handles purchases made in it. Apple's own privacy policy covers the App Store. Our testers also get early versions through Apple's TestFlight: if a tester sends feedback (or the app crashes), Apple passes us that report, which can include a screenshot, their comment and details about their device.
  • Google delivers the Android app through Google Play and handles purchases made in it. Google's own privacy policy covers Google Play.
  • Google Firebase delivers notifications to Android phones, and Apple delivers them to iPhones. They receive the phone's push address and the notification itself (for example "It's bento time for Maya and Leo"), nothing else about your family.
  • Google Fonts provides the app's fonts. When a page loads, your browser asks Google for them, so Google sees your IP address.

Vercel, Resend, Stripe, RevenueCat, Apple and Google are in the United States (or, for Stripe, also Ireland), so the information they handle (requests to the website, your email address when we send you an email, payments and subscriptions, and notifications to your phone) passes through the United States and may be accessed by authorities there under its laws. We also use AI (Claude, by Anthropic) to help us draft puzzles and facts; no information about your family is ever sent to it.

We would only share information otherwise if the law requires it.

Children

Bento Brain is made for parents to use with their kids. Children don't create accounts, and everything about a child comes from the parent who adds them. A parent can see, change or remove their kids' information at any time, and can ask us to delete all of it. If you think a child has given us information without a parent, email us and we'll delete it.

Your choices

  • See and change your kids' nicknames, age groups and activities in the app, under Family.
  • Remove a kid in Family; their progress is deleted with them.
  • Delete your account and everything in it, any time: in the app, under Family, then Settings, then Delete my account. It's deleted right away. If you're a family's second grown-up, only your own sign-in is deleted and the kids stay with the family. You can also email us from the address you sign in with, and we'll delete it within 30 days.
  • Get a copy of your family's information: just ask by email.
  • Subscriptions: deleting your account doesn't cancel a subscription by itself. Cancel it in Settings (website subscriptions) or in your phone's subscription settings (App Store or Google Play). We keep payment records as long as tax law requires, even after an account is deleted.

If you have a concern, please contact us first and we'll do our best to fix it. You can also contact the Office of the Privacy Commissioner of Canada.

How long we keep it, and how we protect it

We keep your information while your account is open. When you remove a kid or delete your account, it's deleted from our database right away and disappears from our backups within 30 days. Everything travels over encrypted connections, our database only lets each family see its own information, and only the two of us who run Bento Brain can access family data, to run and support the service.

Changes to this page

If we change how we handle your information, we'll update this page and the date at the top. For important changes, we'll email you before they take effect.

Questions

Email us at hello@bentobrain.app. A real parent will answer.