Your family's data, in plain English

Bravii helps your child work through their day, and helps you share what is actually happening at home with the practitioner supporting them. To do that it stores a small, specific set of things. This page explains all of it without hiding behind legal language — the formal version is the Privacy Policy.

1. What Bravii keeps

• Your account — an email address and a password. That's the whole account. No name, no phone number, no address, no date of birth, no card number (Apple and Google will handle billing; Bravii never sees a card).
• Your child's profile — the first name or nickname you type in, their age and an avatar. A nickname is completely fine. Bravii never asks for a surname, a school, a Medicare or NDIS number, or a diagnosis.
• Their routine — the tasks you set up, the days they run and the order they run in.
• What got done — which tasks were ticked off, and on which day. This is what the progress charts and star charts are built from.
• Hard days — a day you have tapped as a tough one, so the charts don't read a rough Tuesday as a failure.
• Goals, home programs and exercises — what you or a linked practitioner have set, and whether you approved it.
• Your private journal — a short note you can write at the end of a day.
• Pictures — the illustrations Bravii generates for exercise steps, plus any photo, file or link a practitioner adds to a step.
• A notification token — an anonymous code your phone gives us so we can send a push when your practitioner sends something new. It isn't tied to your phone number.

Every one of these exists because a screen in the app draws it. There is no "collected in case it's useful later" category.

2. What your practitioner can and cannot see

This is the part parents ask about most, so here it is precisely.

A practitioner gets access to one child, and only after you generate a seven-character connection code in the app and hand it to them. Nothing happens automatically. There is no directory of families to browse, no way to search for your child, and no request-access flow. The parent always goes first, and the parent can cut the link at any time.

They can see, for the child you linked

• That child's first name or nickname, age and avatar as you entered them
• The daily routine and schedule
• Which tasks were completed, and on which days
• The progress charts and streaks built from that
• Days you marked as hard days
• Goals — theirs and yours — and practitioner notes on that child
• Home programs and exercises, and whether you approved them
• Gratitude moments logged against that child in the app
• Your email address, so they know which family they are linked to

They cannot see

• Your journal. Your private end-of-day notes are stored where only your own login can reach them. That is enforced by the server, not just hidden in the app.
• Your saved task library — the personal task templates you build up. Same protection.
• Any other child, including your other children. The link is per-child, not per-family. Link a practitioner to one child and your other children are invisible to them.
• Any other family. Not a name, not a count, nothing.
• Your login. They cannot see or reset your password and cannot sign in as you.
• Your billing or subscription details.

3. How we protect it

Everything travels encrypted. All communication between the app and Bravii's servers uses HTTPS/TLS — the same transport encryption a bank's app uses. Bravii runs on Google Cloud, which encrypts stored data at rest.

The rules live on the server, not in the app. This is the important one. Bravii's access rules — only this parent can read this family's data; only a currently-linked, approved practitioner can read this child's progress; nobody but the parent can read the journal — are enforced by Google's servers on every single request. They are not a check inside the app that a determined person could switch off. Someone who modified the Bravii app on their own phone would still be refused by the server.

API keys never touch your phone. Bravii uses a couple of outside services — a voice service that reads tasks aloud, and an AI service that draws exercise step pictures and writes the parent insight summary. The keys for those services stay on Bravii's servers and are never included in the app you download, so there is nothing in the app bundle to pull out and misuse, and nothing on your device for a stolen phone to give up.

Children never sign in. There are no child accounts. One adult holds the login, and a PIN screen guards the grown-up dashboard so a child using the device can't wander into settings.

4. Pictures and photos

Bravii shows a picture for each step of an exercise, because a picture beats a paragraph for most kids. There are two ways one gets there.

Illustrations Bravii draws. Most step pictures are generic, cartoon-style illustrations generated on request from the practitioner's written description of the step — a drawn child stepping over a chalk line, that sort of thing. They are not photographs, they do not resemble your child, and they contain no identifying information.

Pictures a practitioner brings. On the practitioner side of the app, a practitioner can add their own picture to a step — from their photo library, from a file (PDF, PNG, JPG, HEIC and similar), or by pasting a link. Bravii converts whatever they add into a small, tidy JPEG for that step. If it is a PDF, the first page becomes the picture and the original file is deleted straight afterwards. Adding your own pictures is a practitioner-side tool; parents review and approve what arrives, and don't upload photos themselves.

Where they live. Step pictures are stored on Bravii's servers on Google Cloud, never on a photo-sharing service, and are never posted anywhere public by Bravii. The picture folder is closed to the app entirely — no signed-in user can browse or list a child's pictures. Each picture is reachable only through a long, unguessable link, and those links are held on records that only your family and a currently-linked practitioner can read.

5. Where AI is involved

In two narrow places, both handled on Bravii's servers rather than on your phone.

• Exercise step pictures are generated from the text description of the step the practitioner typed. Nothing about your child is sent — just the description of the movement or activity.
• The parent insight paragraph is generated from a summary of the past month: which tasks tend to go well and which are hardest, the best and hardest days of the week, the average completion rate, the current streak, the number of sessions, and your child's first name and age. It does not send your journal, your email address, your gratitude entries or your practitioner's notes.

Bravii does not use your family's data to train AI models. Insights are written in plain, encouraging language for parents — they are friendly suggestions, not clinical, diagnostic or therapeutic advice.

6. What Bravii doesn't do

• No advertising. There is no ad network in Bravii. A child using the app will never be shown an ad.
• No selling or sharing your data. No data-broker relationships, no affiliate arrangements. Your family's data is not a product.
• No third-party trackers or analytics. Worth stating clearly: the app contains no Google Analytics, no Facebook SDK, no Firebase Analytics, no Mixpanel, Amplitude, Segment, Sentry or Hotjar. Bravii genuinely does not know how many people opened which screen. Every chart in the app is built from your own family's data.
• No location tracking. Bravii never asks for and never records where you are.
• No contacts, and no recording. Bravii doesn't read your contacts and doesn't record audio.
• No sign-in with Facebook or Google. Just an email address and a password, so no social network learns that you use Bravii.

7. Deleting everything

There is a Delete Account button in the app: Parent Dashboard → Settings → Delete Account & Data. You do not have to email anyone, and nobody has to approve it.

It removes your account, your children's profiles, every routine and schedule, every completion, every goal, every practitioner note, your journal, your gratitude entries and hard-day logs, your saved task library, the connection codes you issued, your practitioner links — and it tells any linked practitioner's app that the child is gone. It also deletes the step pictures stored for your children, including anything that was uploaded. Finally it removes your login itself.

8. Questions from clinicians

9. What we don't claim

Being straight about the limits matters as much as the reassurances.

• Bravii has not been independently audited or certified against any security or privacy standard, and we don't claim it has been.
• Bravii is not a medical device or a clinical record system, and nothing in it is medical, diagnostic or therapeutic advice. See our Terms of Service.
• We are not invisible to your data. A named Bravii administrator holds the technical access any app operator holds, used only for support and safety. We won't pretend otherwise.
• No online service can be guaranteed perfectly secure. We work continuously to protect your information and to respond quickly if something goes wrong.

10. Ask us anything