How to Buy

Privacy Policy

Effective: October 21, 2019

Please also refer to our Terms of Service.

Introduction

 

Mission

Brain Power is a research-driven and mission-focused company. We aim to apply the newest in neuroscience research and leading-edge digital technology to alleviate the burdens, and empower the lives, of differently-abled people who have challenges related to their brains or minds. We are committed to research, and we are also committed to the privacy and security of your personal data.

 

Terminology

Brain Power: Herein, the term “Brain Power” (or “we”, “our”, “us”) refers to Brain Power, LLC, of Cambridge, Massachusetts, USA, as well as its Partners.

Partners: The Partners of Brain Power, LLC, as incorporated into the term Brain Power, include scientific research collaborators, universities, clinics, clinicians, business partners, affiliates, subsidiaries, agents, and subcontractors with whom Brain Power, LLC collaborates from time to time. We choose our Partners carefully and intentionally, in line with our Mission and with your interests in mind. Each Partner has a privacy policy, to our knowledge, and we trust them to act in accordance with it.

Platform: Brain Power maintains and develops a series of products and services (collectively, the “Platform”). The Platform can be described as sets of software and accompanying hardware, comprising apps for wearable devices, apps for mobile / portable devices, algorithms, web-based data portals, and/or data stores. The Platform includes products and services known, from time to time, as Empowered Brain, fastIEP, PowerENGAGE, Brain Power Academy, PowerPD, Face2Face, Emotion Charades, Transition Master, Happy Place, Fear Buster, Phobia Master, Paint My World, Interactome, The Brain Power Autism System, Empower Me, BodyMetrics, Bodyprint, Explore My World, Simplify My World, PRISMS, REGAIN, Brain Buddy, Brain Guard, Learning Eye, Fidgetology, Mind Power, Brain Cloud, Meducation, Augmental, and other related products and services that are trademarks of Brain Power (collectively, the “Platform”).

Site: Brain Power also operates world wide web sites including my.Brain-Power.com, www.Brain-Power.com, EmpoweredBrain.io, www.fastIEP.com, related sites, newsletters or mailings to those who visit these sites, and emails we may send directly to you regarding the Platform or information on these sites (collectively, the “Site”).

Agreement: This document (the “Agreement”) is a statement of our Privacy Policy governing the use of the Site and the Platform by you. The Agreement outlines types of information we collect from you, ways and reasons we analyze such information, and how it is shared within Brain Power and with third parties.

You: For the purposes of the Agreement, you (“you”, “the user”, “customer”) may be a natural person of any age. You may also be a group of natural persons of any age, such as a school, classroom, clinic, family, marital community, church, parents’ group, meetup group, support group, affiliation group, advocacy group, therapy group, employer, corporation, research community, university, government, NGO, veterans’ group, or other group or entity. If you are a group, then everything in this Agreement that applies to “you” applies to any one or several persons within you, individually and/or in aggregate.

Member: If you register on the Site or the Platform you thus become a “Member”.

Account: A member may have an “Account” on the Platform or Site. Having an Account allows a member to log in to the Platform or Site.

Data Profile: A person may have a “Data Profile” on the Platform or Site, into which relevant information is deposited about the person. A person may have a Data Profile without having an Account, and one Account may be associated with several Data Profiles. (As one illustrative example, a classroom teacher may have an Account and use multiple Data Profiles for the students of that classroom, to keep track of their progress and high scores on an educational game that is part of the Platform.)

Other Terms including Personal and General Data are defined below in their respective sections.

 

Primary goal of this Agreement

In this Agreement, we strive to outline some of the rules, benefits, and risks associated with your use of the Site and Platform, including those related to privacy.

 

 

Complying with this Agreement

By accessing or using the Site or the Platform, you agree to the policies stated in this Agreement.

If you are a Member, then in addition to the policies that are applicable to all users of the Site or Platform, the policies that apply only to Members shall apply to you.

If you are a group of natural persons or other entity, you agree to obtain consent to the policies in the Agreement by persons in your group who may be impacted by your use of the Site or Platform.

Brain Power researchers may use the Site or Platform, and the data these collect, to create collective knowledge about education, brain development, behavior, wellbeing, technology, assessments, or interventions. We fundamentally believe that success in achieving these goals depends on a shared belief between Brain Power and you that real-world data will help us all develop useful strategies to improve the independence and livelihood of all differently-abled people.

If you do not accept the terms of this Agreement, you may not use the Site or the Platform.

 

 

Brain Power has signed the Massachusetts Student Data Privacy Agreement

The Massachusetts Student Data Privacy Agreement (“DPA” ) of 2018 is rigorous and in-depth agreement related to companies who provide software or digital services to schools in Massachusetts. We believe that the DPA strictly requires a high standard of protection of student data privacy, rigorous policies on  student data after completion of the purposes for which they were collected, ownership of student data, and more.

The DPA has been adopted by many school districts in Massachusetts, and Brain Power believes that signing the DPA puts us firmly at the leading edge of student data privacy in Massachusetts and across the United States. 

You may request a copy of our signed DPA Agreement at any time using the contact information provided at the bottom of this Agreement. 

 

GDPR law

The General Data Protection Rule (GDPR) of 2016 applies to processing of personal data of residents of the European Union.

If you reside in the European Union you may not use the Site or the Platform.

If you begin residing in the European Union at some point after beginning to use the Site or Platform, you must stop using the Site or Platform. It is your responsibility to be aware of your residency and to comply with this Agreement in full.

 

 

COPPA law

The Child Online Privacy Protection Act (COPPA) of 1998 is a U.S. Federal law (15 U.S.C. 6501-6505). Our understanding is that COPPA is aimed to protect children under the age of 13 from risks associated with directly using internet sites or online services that may retain and publicly post their personal information without their consent. At Brain Power, we take privacy and protection seriously, and are committed to guarding the digital health of children. 

If you are under the age of 13, you may not have an Account on our Site or Platform. By using our Site or Platform directly or submitting your personally identifiable information, you certify that you are not under 13.

If you are under the age of 13, you may not log in to the Platform or Site directly, but you may have a Data Profile created for you. The Data Profile for you must be created by a Member over 13 who uses an Account and who complies with all terms of this Agreement as well as our Terms of Service. 

The following is an illustrative example of the difference in policy between Accounts and Data Profiles:

A classroom teacher may use an Account to log in to the Platform and create a Data Profile related to a student. The Data Profile may for instance record information about the progress that the student has made in detecting other people’s emotions in school, as measured by an educational game that is part of the Platform.

If the student is under 13, she or he may not log in to the Platform and may not have an Account. The student’s Data Profile may be accessed by a teacher associated with that student. The teacher may then prepare reports or summaries of the data, e.g. for the student and/or parents. In this way, the Data Profile on the Platform serves as a digital notebook for the teacher, similar to but more advanced than a paper notebook that a teacher may use to keep track of the in-class activities and preferences of the student. An act to give others those digital notes/data, or information derived from them, is done by choice and with consent of the teacher through the Account, and is subject to the terms of this Agreement.

This is one illustrative example of many, provided here to explain the relevant difference between Accounts and Data Profiles. 

 

Information that may directly identify you (Personal Data)

This section relates to Personally Identifying Information (PII) and other data that may directly identify you (“Personal Data”), as well as our mechanisms designed to collect Personal Data. We generally collect Personal Data when you supply information, for instance when registering to become a Member of our Site or Platform or when onboarding classrooms if you are a school district. Personal Data may include:

  • Account Info, e.g. name, email address, postal address, phone number, and sometimes social security number or EIN
  • Payment Info, e.g. credit card number, billing & shipping address, bank wire info
  • Password, e.g. stored securely as part of initial registration, or in the Account information of a Member
  • Date of Birth
  • Private Messages

 

 

Information that may not directly identify you (General Data)

This section relates to information that may not personally identify you (“General Data”), and to our mechanisms for collecting General Data. Examples of General Data include:

Information that you supply directly:

  • General biographical information, e.g. gender, age, city, and general notes
  • Clinical information that you supply, e.g. whether a person has autism; history of treatment, symptoms, genetics, clinical assessments, IEP goals, etc
  • Images, e.g. photographs, video, audio, and other recordings (supplied by you)
  • Individual and aggregated survey responses
  • Information shared via free-text fields, e.g. on a support forum, signup forms for our mailing list or research studies, job applications, treatment evaluations, social media feeds, surveys, annotations, etc. (Note: Because processing of information supplied by you in such fields may be automatic, it will be treated as General Data even if there is a chance that it may identify you.)
  • Connections to other people on the Site or Platform, e.g. fellow Members, invited members of an education or care team, mentors, feeds, subscriptions.

Information that we derive from your usage of the Site or Platform (while you use them or while in the background):

  • Progress on our education games, e.g. game scores, game elements interacted with, achievements, levels, high scores, etc.
  • Usage Information, e.g. dates, times, location, device or browser ID, features or pages used, touchscreen taps and swipes, etc.
  • Images, e.g. photographs, video, audio, and other recordings (collected during usage)
  • Sensor information, e.g. device data from accelerometers, gyroscopes, magnetometers, radar, sonar, and other sensors
  • Physiological measures, e.g. heart rate variability, breathing dynamics, blinkrate, etc., for instance to help adjust the games if players seem stressed
  • Tracking data: In some cases, we collect information through cookies, pixel tags, email tracking, and similar methods that use unique identifiers

Independently of the Site or Platform we may directly communicate with you and you may elect to share information with us. For instance you may speak to or email us about yourself or another person or you may share a document such as an IEP report or student behavior characteristics. We consider such communications to be outside of the Site or Platform. Also, we consider such communications as carrying with them your direct consent by virtue of your intentionally taking the action of communicating with us. We treat such information in its entirety as General Data. As explained elsewhere herein, we treat all data with respect and care. 

  

 

We use digital best-practices to protect your data

Bain Power uses advanced, modern data privacy methods in order to secure your data. Your information is kept encrypted when being transmitted from the mobile or wearable devices used by our Platform to our secure data stores in the cloud. Your information is also kept encrypted when transmitted from our web-based Account interfaces to our secure data stores in the cloud.

While no method of electronic storage or transmission over the Internet is 100% secure, and thus we cannot guarantee the absolute security of your data, we take great precaution to assure data security. Our secure data stores in the cloud use only those cloud-based services that are certified as “HIPAA-eligible”, meaning that they are inherently secure and dependable to the level required by the HIPAA law that governs official medical records. Brain Power does not conform to the HIPAA law per se (see the HIPAA section), yet we take your data privacy very seriously and thus use the types of services that many HIPAA-covered medical providers use to guard their data. 

 

 

Why and how we use General Data

In addition to serving the individual needs of our Members, Brain Power is interested in better understanding the end-user experience and improving our services, for everyone. We also are focused on contributing to the literature on evidence-based practice. Additionally, we are deeply committed to fundamental science, for instance toward understanding the general workings of the human brain and mind. These are the contexts in which we use General Data.

For example, we may address research questions such as, “Do certain applications work better for some groups of individuals versus others?” or “Which method of feedback or reward best reduces your signs of anxiety such as quickened heart rate, shallow breathing, and utterances that relate to stress?” or  “How stressful is eye contact for certain groups of people; and can predictable, engaging games help reduce the stress to a comfortable level?” or “What are the data-driven subtypes of autism?” or “Can we predict when someone will have a meltdown or anxiety attack?” or “What is your child’s or your student’s risk of self-harm?” or “What patterns embedded in years of data can predict life outcomes after decades such as success in long-term employment or romantic partnership?”.  (These are illustrative examples of research questions we intend to address. We do not yet have answers to them nor are we making any claims such as medical claims about them. Yet we hope to be able to someday.)

Brain Power may use General Data for scientific research in order to address such short-term and long-term questions as the examples above. Because our research questions include ones about patterns of subgroups of people relative to larger groups of people (e.g., finding data-driven subtypes of autism), the value of one set of data is unlocked only when we can process many, many people’s data. Because our research questions include ones that require long-term analysis (e.g., so we can eventually use data from grade-school to offer you predictions about the likelihood that your child or student will gain steady employment in adulthood), the predictive power of the data can only be fully unlocked after many years. Therefore, in order to fulfill the above purposes, Brain Power must and will maintain data from all users from time to time, and as long as possible within the law.

Brain Power may provide General Data, in individual and aggregate format, to Partners for use in scientific research and research on the preferences and behaviors of consumers. When providing this information to Partners, Brain Power provides General Data, not data collected as Personal Data, except as noted in the section about Personal Data. When providing this information to Partners, Brain Power will assure that each Partner has a privacy policy, and is made aware of our privacy policy as articulated by this Agreement from time to time.

Brain Power may also periodically ask Members to complete short surveys about their experiences (including questions about products and services). Survey responses may be analyzed, combined with other General Data, and shared with and/or provided to Partners. Member participation in these surveys is not required, and refusal to do so will not impact a Member’s access to the Site or the Platform.

 

 

Why and how we use Personal Data

As with General Data, Brain Power aims to use Personal Data in support of our mission to empower people who have brain and mind challenges. Therefore our primary objectives for the data are refinement of the Platform and Site, and generating new knowledge about the mind and brain. Personal Data will not be automatically shared with, sold to, or displayed for other Members or Partners. In particular, Personal Data will not be sold to Partners or other third parties for use in marketing or advertising.

Personal Data will be retained for as long as is required to fulfill the purposes set forth herein. We will comply with written requests that are lawfully made to remove your data, to the extent specified by law and to the extent possible to remove from our servers and research data pools.

Illustrative instances where Personal Data may be used include, but are not limited to, the following:

  • If we have your permission, your email address may be used to send you notifications, including research-study invitations, newsletters, and direct notifications. You may change this setting by clicking the unsubscribe link at the bottom of emails sent to large groups, or in some cases by changing settings in your Account if you are registered as a Member.
  • For critical updates such as account password changes, and for information we deem important to send to your attention, you may be contacted regardless of account settings. We are committed to being respectful of your time with such notifications. 
  • If you explicitly opt in for this, we may share your Personal Data with a Partner (for instance, co-registration with a non-profit organization, or cross-registration for a cutting-edge clinical research study at a local university).
  • If you agree to participate in a media interview (as arranged by Brain Power), Brain Power will share your contact information (e.g. name, email, telephone) with the reporter for the purpose of scheduling and conducting an interview.
  • We may share Personal Data if we believe that disclosure is reasonably necessary to comply with a law or an official request from law enforcement.
  • We may share Personal Data if obligated to do so in connection with the sale, merger, bankruptcy, sale of assets, or reorganization of Brain Power.
  • We may share Personal Data with Partners who are contractually engaged in providing us routine professional services, or who are collaborating on useful research we believe to be well-intentioned, if they have a privacy policy in place at that time that states that they will safeguard PII such as they will receive from us.
  • Personal data may be used to guide our own scientific research and our development of new products and services that may assist you or others similar to you, although the Personal Data will not be distributed as part of those products and services.
  • Personal data may be used by us to contact you from time to time.
  • Where Brain Power is required by mandatory law to retain your Personal Data longer or where your Personal Data are required for Brain Power to assert or defend against legal claims, Brain Power will retain your Personal Data until the end of the relevant retention period or until the claims in question have been settled.

 

 

External publication of data

Brain Power was founded by a scientific researcher with a doctoral degree (PhD) in neuroscience. We continue to perform scientific research alongside product development in order to produce evidence-based products to serve our customers, and to produce general knowledge that can serve all people. 

In order to produce this type of evidence and general knowledge, we follow the best practices of the professional research community, for instance publishing our results in peer-reviewed research journals for the community to inspect.  You can learn more at www.Brain-Power.com/Research.

Your data will not be published in peer-reviewed research journals unless you have explicitly gone through an informed-consent process for one of our approved research studies. 

The research that we publish in peer-reviewed journals is conducted under strict ethical and regulatory guidelines and supervision of an internationally compliant and accredited supervisory body known as an Institutional Review Board (IRB). Brain Power research controlled by an IRB is continuously reviewed and controlled by a strict application review process and subsequent audits. Control includes all aspects of the research, study design, recruitment procedures for human participants, informed consent of human participants, data privacy and security, record-keeping, reporting, and publication. Our research data and records are kept permanently, under data retention and protection procedures that are stipulated under IRB and related regulations, and are audited every year by full-time and certified staff members of the IRB organization during on-site audit visits. In these ways, data destined for publication in peer-reviewed journals are acquired and kept under strict, international ethical regulations.

Brain Power does not conduct any animal research.

 

 

FERPA: Not student education data; Not used for marketing

Brain Power does not use the data we collect from schools for marketing to students or to their parents. We do not sell the data to third parties in order for them to use for marketing to students or to their parents. 

Our understanding is that the FERPA rule relates to many specific categories of information mostly centered around student education data. 

The following are some categories of student data that our Platform and Site do NOT collect (unless a Member inputs them into freeform text fields):

  • Standardized test scores
  • Grades
  • Other academic scores and assessments
  • Approval to graduate
  • Bus assignment
  • Other transport data
  • Attendance
  • Disciplinary records
  • Course enrollment data
  • Class and elective enrollment
  • Extracurricular activities
  • Sports activities
  • Teacher identity (except teachers using the Platform)
  • Income status indicators
  • Living situations
  • Discounted or free lunch status
  • Religious affiliation
  • Political affiliation
  • Criminal records
  • Family composition
  • Text messages
  • ELL status
  • Student ID number
  • Classwork
  • Homework

Again, the above is a list of illustrative categories of information that our Site and Platform do NOT collect. 

 

 

California privacy rights including DNT

If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your Personal Information by Brain Power to a third party, for the third party’s direct marketing purposes. Brain Power does not make such disclosures, and therefore we believe that we are exempt from these reporting requirements.

Your browser may offer you a “Do Not Track” (DNT) option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities, over time and across different websites. Brain Power currently does not respond to DNT browser signals or mechanisms.

 

 

Not a HIPAA-covered entity. No PHI.

Brain Power is not a healthcare provider. We do not maintain a doctor-patient relationship with our Members or other users, and we do not claim to cure, treat, or diagnose diseases. Also, we are not a clearinghouse for medical data from other healthcare providers, nor are we a health insurance provider. It is our understanding that these are the legal tests to determine whether an entity is covered by the HIPAA privacy law, and therefore it is our understanding that Brain Power does not fall under the jurisdiction of the HIPAA law and is not a “HIPAA-covered entity”.

In this contexts, information that we collect is not considered PHI (Protected Health Information) since PHI refers not to the type of information but to whether it is held by an entity covered by the HIPAA law.

(To help understand this: Your friends may know that you have a diagnosis, or you may share that information in a Meetup, but neither Meetup, Inc. nor your friends are placed under Federal control suddenly because they have that information. In contrast, your doctor who generated that diagnosis is.) 

Regardless of HIPAA or PHI restrictions, we are respectful and cautious with your data.

 

 

Other privacy matters

Brain Power cannot guarantee the identity of any Member with whom you may interact in the course of using the Site or Platform, or who may have access to your General Data by using the Site or Platform. Additionally, we cannot guarantee the authenticity of any data that other Members may provide about themselves.

Brain Power will cooperate with police to the extent required by law. However, if data contained within the volume of data we collect happen to indicate or suggest the commission of a crime, we cannot guarantee that the crime will be investigated by the police or by us.

 

 

Risks and benefits

While our goals including empowering people with neural challenges, and helping better understand how people’s brains and minds develop and flourish, there are no guaranteed benefits to using this Site or Platform. However, mindfully keeping track of personal achievements, well-being, treatments, and symptoms has long been shown to be generally helpful in improving overall health. To understand more specific outcomes related to using our Platform, please see our Research page and assess the outcomes according to your own expertise. 

We are not aware of significant risks to your providing data via the Site or Platform. There is a possibility that you may feel uncomfortable sharing information. In using the Site or Platform, you are free to skip any non-required questions or data fields that make you feel uncomfortable. You are also free to stop using the Site or Platform at any time. 

 

 

Updates to this Agreement

We reserve the right to modify this Agreement at any time by posting an amended version of the Agreement on this website. We encourage you to review this site periodically for any updates. We indicate the effective date of this Agreement at the top of the Agreement. (Small edits to amend typographical errors or sentence flow will not necessarily generate a new version and effective date.) 

 

 

You have no obligation to use our Site or Platform

Using the Site or Platform is elective and optional, as is becoming a Member.

If you are not comfortable with our Privacy Policy, Terms of Service, or other policies at any time, you are free to decline to use our Site and Platform, and/or to withdraw from Membership. We would of course be interested to hear from you if you care to share your reasons since we are committed to adding value and improving how we empower people, but you have no obligation to communicate with us in this way.

 

 

Questions about the Privacy Policy

If you have questions, comments, or requests related to our Privacy Policy or your data, please contact us:

Email:   privacy @ brain-power . com     (remove spaces)

Postal Mail:

Brain Power, LLC
Attn: Privacy Issues
245 Main Street, 2nd Floor
Cambridge, MA 02142

 

Thank you, and as always, Stay Empowered!