Privacy Policy

1. Who we are

Bravii ("Bravii", "we", "us" or "our") is a mobile application that helps children — especially neurodiverse children, including those with autism and ADHD — move through their daily routines using visual schedules, friendly voice read-aloud, visual timers, first-then cards, celebrations, calm-down tools, star charts and gentle wind-down and breathing activities. Bravii has a family side, where parents and guardians set up routines and view progress, and a practitioner side, where therapists and support workers can collaborate on goals with the family's consent.

Bravii is Australian-made and operates under Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what personal information we handle, why, and the choices and controls you have.

Bravii is designed to be created and operated by a parent, guardian or authorised practitioner — it is not intended to be set up by a child on their own. For account holders, "you" means the adult who owns the account.

2. Information we collect

We collect only what we need to run the app and support your family. This includes:

• Account information — the email address of the parent, guardian or practitioner who creates an account, and authentication details used to sign in.
• Child profiles — a first name, age and chosen avatar for each child. Surnames are not required, and we ask you not to add information that isn't needed for routines to work.
• Routines and tasks — the routines, steps and tasks you set up, including any titles, icons or notes you add.
• Task-completion logs — records of which steps were completed and when, so progress and celebrations can work.
• Goals — goals set by parents and/or practitioners, and progress against them.
• Practitioner notes — notes a linked practitioner records to support collaboration on a child's goals.
• Parent's private journal — journal entries a parent chooses to write. These are private to the parent's account.
• Gratitude entries and hard-day logs — optional reflective entries a parent may record.
• Basic technical and diagnostic data — information needed to keep the app secure and working, such as authentication tokens and app error information.

We do not use advertising trackers, we do not build advertising profiles, and we do not require surnames, home addresses or other sensitive identifiers for children.

3. How we use information

We use the information above to:

• Provide the core app — display routines, read steps aloud, run timers, celebrate completed steps and track star charts;
• Save your setup and sync it securely so it is available when you sign in;
• Show progress over time to parents and, where linked and consented, to practitioners;
• Generate supportive, AI-written parenting insights from a child's aggregated routine patterns (see section 6);
• Support goal collaboration and NDIS-style progress reporting between families and practitioners;
• Keep the service secure, prevent misuse, and diagnose and fix problems;
• Respond to your support and privacy requests; and
• Meet our legal obligations.

We do not sell, rent or trade your personal information, and we do not show ads.

4. Children's privacy

Bravii is built for children but designed to be set up and operated by a parent, guardian or authorised practitioner. We deliberately collect only minimal information about a child — a first name, age, avatar and their routine activity — and only so the app can guide the child through their day and show progress to the trusted adults in their life.

We never use children's data for behavioural advertising or ad profiling, and we never sell it. Parents control what is entered, can edit or delete a child's profile, and can delete all data at any time.

5. Third-party processors

We use a small number of trusted service providers who process data on our behalf, under contract and only to provide their service to us. We do not permit them to use your data for their own purposes.

• Firebase / Google Cloud — secure authentication, database and cloud functions that store and sync your app data and run our server-side logic.
• ElevenLabs — text-to-speech that generates the friendly voice used to read routine steps aloud.
• Anthropic (Claude) — AI that turns a child's aggregated routine patterns into supportive, plain-language parenting insights.

These providers may process and store data on infrastructure located outside Australia. We take reasonable steps to ensure they handle information consistently with this policy and applicable law. Calls to ElevenLabs and Anthropic are made from our secure server-side cloud functions, and our API keys are held server-side — they are never embedded in the app.

6. AI-generated insights

To help parents, Bravii can generate supportive written insights — for example, gentle observations about which parts of the day tend to go smoothly and which may need more support. These insights are produced by sending aggregated routine pattern information to Anthropic's Claude model through our secure server-side functions, and returning a short, encouraging summary to the parent.

Insights are intended as friendly suggestions for parents only. They are not medical, diagnostic or therapeutic advice (see our Terms of Service). Our AI processor operates under contract as a processor on our behalf and does not use your data to train general models for its own purposes.

7. Data security

We take the protection of your family's information seriously and use layered safeguards, including:

• Encryption in transit — data moving between the app and our servers is protected using industry-standard encryption (HTTPS/TLS).
• Access controls and security rules — database security rules restrict access so that accounts can only reach their own data, and practitioners can only reach a child they are validly linked to.
• Server-side secrets — sensitive API keys and integrations are kept on the server side within cloud functions, never shipped in the app bundle.
• Local-only PIN — the parent dashboard PIN never leaves your device.

No online service can be guaranteed to be perfectly secure, but we work continuously to protect your information and to respond quickly if an issue arises.

8. Data retention & how to delete data

We keep your information for as long as your account is active and you continue to use Bravii, so your routines and progress are there when you return. You are in control and can delete your data at any time:

• In the app — open Bravii, go to the Parent Dashboard, then Settings → Delete Account & Data, and confirm. This permanently and immediately removes your account and all associated data — children, routines, completions, goals, notes, journal, gratitude entries and hard-day logs.
• By email — you can email support@bravii.app to request deletion.

After deletion, residual copies may persist briefly in encrypted backups before being overwritten in the ordinary course, and we may retain limited records where the law requires.

9. Practitioner access & parental control

Practitioner access to a child's information is only ever granted by the parent. To link, a parent issues a single-use, expiring code from within the app; the practitioner enters that code to connect. A practitioner can then view relevant progress and collaborate on goals.

Parents remain in control at all times and can revoke practitioner access whenever they choose. Codes cannot be reused once redeemed and expire automatically if unused.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict the processing of your personal information, and to object or complain to a regulator. These rights include those under the Australian Privacy Act 1988 and the Australian Privacy Principles, and — for users in those regions — the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

• Access and correction — most of your information is visible and editable directly in the app; you can also contact us for help.
• Deletion — you can delete your account and all data at any time (see section 8).
• Complaints — you may contact us first at support@bravii.app; Australian users may also contact the Office of the Australian Information Commissioner (OAIC).

We do not sell personal information, so there is no "sale" to opt out of. We will not discriminate against you for exercising your privacy rights.

11. International users

Bravii is operated from Australia and uses service providers (see section 5) that may store or process data in other countries. By using Bravii, you understand that your information may be transferred to and processed in locations outside your own, including Australia, and we take reasonable steps to protect it wherever it is handled.

12. Changes to this policy

We may update this Privacy Policy from time to time — for example, to reflect new features or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of Bravii after an update means you accept the revised policy.

13. Contact us