Last updated: 23 April 2026
Who we are
BrushUp ("we", "us") provides this website and learning application (the "Service"). This policy explains how we collect, use, and share information when you use the Service.
Information we collect
We may collect: account and profile details you provide (such as name and email); login and authentication metadata; usage data (such as pages viewed, progress, and device or browser type); and communications you send to us. If you contact support, we keep those messages as needed to help you.
Google OAuth sign-in
BrushUp supports sign-in with Google OAuth. When you choose Google login, we receive basic account details (such as your email and display name) from Google so we can authenticate your account and keep your access secure. We do not receive your Google password.
How we use information
We use information to provide and improve the Service, authenticate users, personalise learning content where applicable, analyse aggregate usage, keep the Service secure, comply with law, and communicate with you about the Service or your account.
Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on appropriate bases such as: performance of a contract (providing the Service you sign up for); legitimate interests (security, analytics, product improvement) balanced against your rights; consent where we ask for it; and legal obligation where the law requires processing.
Sharing and processors
We may share information with service providers who help us run the Service (for example hosting, authentication, analytics, or email), subject to confidentiality and data-processing terms. We may disclose information if required by law or to protect rights, safety, or security.
Retention
We keep information only as long as needed for the purposes above, including legal, accounting, or reporting requirements. Retention periods depend on the type of data and how you use the Service.
Security
We implement appropriate technical and organisational measures designed to protect your information. No method of transmission or storage is completely secure; we encourage strong passwords and careful sharing of account access.
International transfers
If we transfer personal data outside the UK or EEA, we do so using safeguards permitted by applicable law, such as standard contractual clauses or adequacy decisions, where required.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to data portability, to object to certain processing, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below.
Children
The Service is not directed at children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children below that age. If you believe we have, please contact us so we can delete it.
Cookies and similar technologies
We may use cookies or similar technologies for essential operation of the Service, preferences, and analytics. You can control some cookies through your browser settings.
Changes
We may update this policy from time to time. We will post the updated version on this page and adjust the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.
Contact
For privacy questions or requests, contact us through the support or contact options provided in the app or on our website.