Bram Privacy Policy

Bram is provided by Lunar Moth Studios, LLC (“Lunar Moth Studios,” “we,” “us,” or “our”).

This Privacy Policy explains how information is collected, used, processed, disclosed, and stored when you use the Bram mobile application (“Bram” or the “App”).

This policy applies specifically to Bram. Other Lunar Moth Studios websites, products, and services may have separate privacy policies.

By using Bram, you acknowledge that you have read and understand this Privacy Policy. If you do not agree, do not use Bram.

1. What Bram Does

Bram is a personal confidence-practice application. It helps users describe real-life situations, receive a small suggested action, prepare words they might use, and record whether they tried or completed the action.

Bram is not therapy, medical care, diagnosis, crisis intervention, or a substitute for professional mental-health support.

2. Information Stored on Your Device

Bram stores most of your personal experience locally on your device.

Locally stored information may include:

• Your preferred name.

• Your onboarding choices.

• Confidence areas you want to practice.

• Activities or situations you do not want Bram to suggest.

• Categories you pause.

• Text you write to Bram.

• Bram’s responses.

• Suggested actions and scripts.

• Whether you accepted, changed, tried, completed, declined, or reported an action.

• Proof stars and progress history.

• Saved daily pages.

• Learned preferences about coaching tone and helpful support.

• Reminder preferences.

• Limited application settings.

• A locally cached subscription-access status.

Lunar Moth Studios does not operate a remote account or remote memory database containing your complete Bram pages, proof history, or learned profile.

Your locally stored information generally remains on your device until you delete it, delete the App, or the device operating system removes it.

3. Information Processed for AI Responses

When you ask Bram for a response, the App sends the text and context reasonably needed to produce that response through Firebase AI Logic to Google’s Gemini models using Vertex AI.

The information sent may include:

• The message you entered.

• Relevant recent conversation context.

• Relevant confidence paths or boundaries.

• Recent attempts or outcomes.

• Limited learned preferences needed to personalize the response.

• Instructions that control Bram’s behavior, safety rules, and response format.

Google processes this information to generate Bram’s response. Bram then stores the response locally on your device.

Bram does not intentionally send your full local history with every request. It sends the context selected by the App as relevant to the requested response.

Google Cloud states that customer data is not used to train or fine-tune its AI models without prior permission or instruction. Google may temporarily process or retain prompts and outputs for service operation, security, abuse prevention, caching, or other purposes described in its terms and documentation. Vertex AI data governance

Only provide information you are comfortable having processed by Google to generate a response.

Do not provide:

• Passwords, authentication codes, or security credentials.

• Payment-card or bank-account information.

• Social Security numbers or government identifiers.

• Medical records or protected health information.

• Precise home addresses.

• Confidential employer or client information.

• Private information about another person that you do not have permission to share.

• Information intended for emergency or crisis response.

4. Subscription and Purchase Information

Bram uses Apple’s App Store and RevenueCat to offer and manage subscriptions.

Apple processes the actual purchase and payment. Lunar Moth Studios does not receive or store your complete payment-card number.

RevenueCat may process:

• An automatically generated anonymous App User ID.

• App Store receipt and transaction information.

• Subscription product and entitlement status.

• Trial eligibility and status.

• Purchase, renewal, expiration, cancellation, billing issue, and restoration events.

• The App version, platform, locale, currency, and related technical information.

• The date the anonymous subscription profile was first seen.

Bram does not require you to create a Lunar Moth Studios account. RevenueCat generates an anonymous identifier to manage subscription access. RevenueCat anonymous identifiers

RevenueCat’s Support ID may appear in Bram’s subscription settings. If you contact us about a subscription problem, you may choose to share this identifier so we can locate the relevant anonymous subscription record.

Apple’s handling of your Apple Account and transaction information is governed by Apple’s privacy policy and terms.

5. Analytics and Product-Interaction Information

Release versions of Bram use Firebase Analytics to understand whether the App is functioning and how major product flows perform.

Analytics information may include:

• An app-instance or device identifier.

• App version and build number.

• Operating system and device type.

• Platform.

• App launches.

• Onboarding steps viewed.

• Paywall views.

• Subscription-flow events.

• Whether a purchase started, failed, was canceled, or became active.

• Whether a coaching reply completed.

• Whether an action was accepted, changed, tried, completed, skipped, declined, or reported.

• Whether a proof was recorded.

• Usage-limit events.

• AI-provider availability, timeout, or response-validation events.

Bram’s analytics events are designed not to include:

• Your written entries.

• Your prompts.

• Bram’s response text.

• Suggested action text.

• Scripts.

• Proof text.

• Names of people you mention.

• Free-form personal information.

Firebase and network providers may automatically receive technical information such as an IP address, timestamps, device information, and app identifiers when providing their services.

6. Crash and Diagnostic Information

Bram uses Firebase Crashlytics to identify crashes and technical failures.

Crash and diagnostic information may include:

• Crash reports.

• Stack traces.

• App state at the time of a crash.

• Device model.

• Operating-system version.

• App version and build.

• Technical identifiers.

• Timestamps and diagnostic logs.

We use this information to diagnose problems, improve stability, and protect the App.

We do not intentionally place your Bram entries, prompts, actions, or proof text into crash reports.

7. Security and Configuration Services

Bram uses additional Firebase services to operate securely and reliably.

These may include:

• Firebase App Check with Apple App Attest, to confirm that requests come from an authentic instance of Bram.

• Firebase Remote Config, to safely update limited operational settings such as the AI model configuration.

• Firebase infrastructure required to route AI requests and operate analytics and diagnostics.

These services may process technical identifiers, app-integrity information, device information, IP addresses, timestamps, and configuration-request information.

8. Notifications

Bram may offer optional local notifications for:

• Daily check-ins.

• Action follow-ups.

• Subscription-trial reminders.

Bram requests notification permission only when you choose to enable reminders.

Reminder settings and schedules are stored on your device. Bram does not include your private writing or the text of your suggested action in notification content.

You can disable notifications in Bram or in your device settings.

9. Support Communications

If you contact us, we may collect:

• Your email address.

• The content of your message.

• Attachments you provide.

• Your optional RevenueCat Support ID.

• Information needed to investigate and respond to your request.

We retain support communications as reasonably necessary to respond, maintain business records, prevent abuse, and comply with legal obligations.

10. How We Use Information

We use information to:

• Provide Bram’s coaching and confidence-practice features.

• Generate personalized AI responses.

• Store and display your local progress.

• Respect your boundaries and paused categories.

• Verify subscription access.

• Process and restore App Store purchases.

• Provide support.

• Maintain App security and prevent misuse.

• Diagnose crashes and technical failures.

• Understand product performance using content-free analytics.

• Improve Bram’s usability, reliability, and safety.

• Comply with legal obligations.

• Enforce our Terms of Use.

• Protect users, Lunar Moth Studios, service providers, and the public.

11. How We Disclose Information

We disclose information only as reasonably necessary for the purposes described in this policy.

Service providers include:

• Apple: App distribution, subscription billing, purchase restoration, device services, App Attest, and notifications.

• Google and Firebase: AI response generation, analytics, crash reporting, remote configuration, security, and App Check.

• RevenueCat: Subscription verification, anonymous subscription identifiers, purchase history, entitlement management, and customer support.

• Email and support providers: Communications you initiate with us.

• Professional advisers: Legal, accounting, security, insurance, or compliance support when reasonably necessary.

We may also disclose information:

• To comply with law, legal process, or a valid government request.

• To investigate fraud, misuse, security problems, or violations of our terms.

• To protect the rights, safety, property, or security of users, Lunar Moth Studios, service providers, or others.

• In connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of some or all of our business, subject to appropriate protections.

12. No Sale, Advertising, or Cross-App Tracking

Lunar Moth Studios does not sell your personal information.

Bram does not:

• Display third-party advertising.

• Use the Apple advertising identifier for advertising.

• track you across unrelated companies’ apps or websites for targeted advertising.

• Sell or share your information for cross-context behavioral advertising.

• Access your contacts.

• Track your physical location.

• Post information publicly.

• Send messages to other people on your behalf.

Bram does use product analytics and anonymous subscription information as described in this policy.

13. Data Retention

Different information is retained for different periods:

• Local Bram data remains on your device until you delete it, delete the App, or the operating system removes it.

• Google may retain analytics, diagnostic, security, AI-processing, and configuration information according to Lunar Moth Studios’ provider settings, Google’s terms, and applicable law.

• RevenueCat retains anonymous subscription and purchase information as needed to provide subscription services, prevent fraud, maintain transaction history, and comply with legal obligations.

• Apple retains App Store transaction information under Apple’s policies.

• Support communications are retained as reasonably necessary for support, security, dispute resolution, and legal compliance.

We may retain information longer when required by law, necessary to protect legal rights, needed to prevent fraud or abuse, or stored in systems where immediate deletion is not reasonably possible.

14. Your Controls and Deletion Options

Inside Bram, you can:

• Clear learned preferences.

• Delete all Bram-managed data stored on your device.

• Disable reminders.

• Restore purchases.

• Manage or cancel your subscription through Apple.

The deletion control is located under:

Profile icon > Gear icon > Privacy, data & safety > Delete all Bram data

Deleting Bram’s local data does not:

• Cancel an Apple subscription.

• Delete Apple’s purchase records.

• Automatically erase information already processed by Google.

• Automatically erase analytics or crash reports already collected.

• Automatically delete RevenueCat’s subscription records.

To request access, correction, or deletion of information controlled by Lunar Moth Studios, email mike@lunarmothstudios.com.

Because Bram does not require an account, we may need your optional RevenueCat Support ID or other information to identify records associated with your installation. We may be unable to identify data that cannot reasonably be connected to you.

15. Privacy Rights

Depending on where you live, you may have the right to:

• Request access to personal information.

• Request correction of inaccurate information.

• Request deletion.

• Obtain a portable copy of certain information.

• Object to or restrict certain processing.

• Withdraw consent where processing depends on consent.

• Appeal a denied privacy request where applicable.

• Lodge a complaint with a privacy or data-protection authority.

• Receive equal service without discrimination for exercising privacy rights.

These rights may be subject to legal exceptions and identity-verification requirements.

To exercise a privacy right, email mike@lunarmothstudios.com with the subject line “Bram Privacy Request.”

16. European and UK Users

Where the GDPR or UK GDPR applies, Lunar Moth Studios acts as the controller of personal data collected through Bram, except where a provider independently acts as a controller.

Our legal bases may include:

• Performance of a contract, including providing requested Bram features.

• Legitimate interests, including security, fraud prevention, diagnostics, support, and product improvement.

• Consent, where required.

• Compliance with legal obligations.

• Protection of vital interests in limited safety-related circumstances.

Information may be processed in the United States and other countries where our service providers operate. Where required, we rely on legally recognized transfer safeguards.

You may contact your local data-protection authority if you believe your rights have been violated.

17. California and Other U.S. State Privacy Rights

Residents of certain U.S. states may have rights to know, access, correct, delete, and obtain a copy of personal information.

Lunar Moth Studios does not sell personal information or share it for cross-context behavioral advertising.

We do not use sensitive personal information to infer characteristics about you for advertising.

We will not discriminate against you for exercising an applicable privacy right.

18. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

These safeguards include:

• Local device storage for Bram’s personal history.

• Apple App Attest through Firebase App Check.

• Restricted categories of analytics events.

• Avoiding free-form user content in analytics.

• Vendor access controls.

• Encrypted network transmission provided by the operating system and service providers.

No transmission, storage system, AI service, or software application is completely secure. We cannot guarantee absolute security.

You are responsible for securing your device, device passcode, Apple Account, and any information you enter into Bram.

19. Age Requirement and Children

Bram is intended only for people who are at least 18 years old.

Bram is not directed to children, and we do not knowingly collect personal information from anyone under 18.

If you believe a person under 18 has used Bram or provided personal information, contact us at mike@lunarmothstudios.com.

20. Health and Sensitive Information

Bram may be used to discuss confidence, nervousness, relationships, or difficult social situations. Information you enter could reveal sensitive details about you.

Bram is not designed to receive medical records, protected health information, or information submitted on behalf of a healthcare provider.

Bram is not a HIPAA-covered medical service and should not be used as a medical-record system.

21. Third-Party Links

Bram may link to third-party services such as Apple subscription management, privacy policies, terms, or emergency-support resources.

We are not responsible for the privacy, security, availability, or content of third-party websites or services.

22. Changes to This Policy

We may update this Privacy Policy as Bram changes or legal requirements evolve.

We will post the updated policy with a revised “Last Updated” date. If a change materially affects how we process information, we will provide additional notice when required by law.

23. Contact Us

For privacy questions or requests:

Lunar Moth Studios, LLC
Email: mike@lunarmothstudios.com