Privacy Policy

1. Information We Collect

When you use myThalamus, we collect information you provide directly (name, email, payment information) and information generated through your use of the platform (game scores, streak data, quiz responses, session timestamps).

We do not collect health records, medical diagnoses, or information from your healthcare providers. The cognitive training data we collect reflects your interaction with our games and tools, not clinical assessments.

2. How We Use Your Information

We use your information to: provide and improve our services; track your progress and streaks; personalize your training experience; process payments through Stripe; send you product updates and educational content (with your consent); and generate aggregate, anonymized insights about how our platform is used.

3. Family Dashboard & Shared Data

If you use the Family Dashboard feature, you can choose to share your activity data (streaks, game scores, session frequency) with linked family members. This sharing is initiated by you through an invite code system. You can revoke access at any time. Family members can only see activity summaries — they cannot access your account, change your settings, or view your Digital Clone responses.

4. Digital Clone Data

If you use the Digital Clone feature (Premium tier), your daily question responses are stored securely and used exclusively to build your personal memory profile. This data is never shared with family members, other users, or third parties. You can request deletion of all Digital Clone data at any time.

5. Payment Processing

All payment processing is handled by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We retain only your Stripe customer ID and subscription status for account management purposes.

6. Data Security

We use industry-standard encryption (TLS/SSL) for data in transit and encrypted storage for data at rest. Access to user data is restricted to authorized personnel only. We conduct regular security reviews of our infrastructure.

7. Your Rights

You have the right to: access your personal data; correct inaccurate data; request deletion of your data; export your data in a portable format; withdraw consent for marketing communications; and opt out of non-essential data collection. To exercise any of these rights, contact us at [email protected].

8. Cookies & Analytics

We use essential cookies for authentication and session management. We use privacy-respecting analytics to understand how our platform is used. We do not sell your data to advertisers or use invasive tracking technologies.

9. Contact

For privacy-related questions or requests, contact us at [email protected]. We will respond within 30 days.