Privacy Policy

Updated April 26, 2026

This Privacy Policy applies to your use of the Brainy Girl Thinkific platform, located at brainygirlu.thinkific.com or any associated domain (the "Platform"). This includes your access to The Collective membership, cohort programs, digital products, community spaces, and all other products and services delivered through Thinkific.

By accessing or using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. Brainy Girl may update this policy at any time. Significant changes will be communicated via email, Platform notification, or website banner. Continued use of the Platform after updates constitutes acceptance of the revised policy.

1. Who We Are

This Platform is operated by Brainy Girl ("we", "us", or "our"), owned and operated by Kim Garnett in British Columbia, Canada. Our Thinkific Platform is hosted and powered by Thinkific Labs Inc. For questions about this Privacy Policy, please contact us at [email protected].

2. Information We Collect

Account and Registration Information

When you create an account on the Platform, we collect:

• Full name and email address;
• Username and password (encrypted);
• Profile information you choose to provide;
• Time zone and language preference.

Purchase and Billing Information

When you purchase a membership, cohort enrollment, or digital product, we collect:

• Billing name and address;
• Payment method information (processed securely by Thinkific's payment partners — we do not store full credit card details);
• Purchase history and transaction records;
• Subscription status and renewal dates.

Learning and Engagement Data

As you use the Platform, we collect:

• Course and lesson completion data;
• Quiz and assessment results;
• Community posts, comments, and replies;
• Login history and session duration;
• Feature usage and engagement patterns.

Communications

We collect communications you send us through the Platform's support channels, community posts, and direct messages to our team.

Technical Data

We and our service providers may automatically collect:

• IP address and general location;
• Browser type and device information;
• Referring URLs and navigation paths;
• Cookie data (see Section 6).

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account;
• Deliver and administer your membership access, cohort program enrollment, and digital product access;
• Process payments and manage subscriptions;
• Send transactional emails related to your purchases, account, and membership;
• Send marketing and content emails (you may opt out at any time);
• Provide customer support;
• Improve the Platform, our products, and our services;
• Monitor and analyze usage patterns to enhance the learning experience;
• Comply with applicable laws and regulations.

4. Membership Access and Data

The Collective is a recurring membership program. When you are an active member:

• Your account has access to all membership content, community spaces, and cohort programs included in your membership tier;
• We retain your account data, progress records, and purchase history for as long as your account exists;
• If your membership lapses or is cancelled, your access to membership-only content will continue through the end of your current billing period, after which it will be revoked;
• Your account and historical data remain accessible to you for non-membership content you have separately purchased.

5. Digital Products

Digital products (including downloadable resources, templates, toolkits, and frameworks) sold on the Platform are provided on a limited-time access basis as specified at the time of purchase. We retain records of your purchase history for billing and support purposes. Once access has been granted, purchases are final except as described in our refund policy.

6. Cookies

The Platform uses cookies and similar tracking technologies to:

• Maintain your login session;
• Remember your preferences and settings;
• Track your course and membership progress;
• Analyze usage and improve the Platform.

Thinkific manages the Platform's core cookie infrastructure. You can review Thinkific's cookie practices at https://www.thinkific.com/privacy-policy/. You may control cookie settings through your browser; however, disabling certain cookies may affect your ability to use the Platform.

7. Third-Party Service Providers

We share data with the following trusted third parties to operate the Platform and deliver our services:

• Thinkific Labs Inc. — Platform hosting, course delivery, payment processing, and community management. Privacy Policy: https://www.thinkific.com/privacy-policy/
• Kit (formerly ConvertKit) — Email marketing and membership communication. Privacy Policy: https://kit.com/privacy
• Google Analytics — Platform usage analysis. Privacy Policy: https://www.google.com/policies/privacy/
• Facebook Inc. — Advertising and audience targeting. Terms: https://www.facebook.com/ads/manage/customaudiences/tos.php
• Hotjar — Visitor behavior analysis. Privacy Policy: https://www.hotjar.com/legal/policies/privacy/
• Tally — Interactive forms and quizzes. Privacy Policy: https://tally.so/help/privacy-policy

We do not sell your personal information to third parties.

8. AI Systems

Brainy Girl integrates AI tools into portions of the Platform experience. When AI features are active, your data may be processed by:

• OpenAI (GPT models): Data retention: 30 days. Privacy Policy: https://openai.com/privacy/
• Claude AI (Anthropic): Data retention: 30 days. Privacy Policy: https://www.anthropic.com/privacy
• Perplexity AI: Data retention: Zero retention for API interactions; 7 days for uploaded files. Privacy Policy: https://www.perplexity.ai/hub/legal/privacy-policy

We will notify you when AI processing is active. AI-generated content is for informational purposes only and is not a substitute for professional advice.

Your data subject rights for AI processing include the right to access, correct, delete, and opt out of AI data processing, and the right to request human review of any automated decision that significantly affects you. Contact [email protected] to exercise these rights.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. If you wish to delete your account or request removal of your data, please contact [email protected].

10. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), secure payment processing through Thinkific's PCI-compliant infrastructure, and access controls. No method of transmission over the Internet is 100% secure; while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

11. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal information we hold about you;
• Correction — request correction of inaccurate or incomplete information;
• Deletion — request deletion of your personal information, subject to legal retention requirements;
• Portability — request your data in a portable format;
• Opt-out — opt out of marketing communications at any time;
• Complaint — lodge a complaint with a supervisory authority if you believe we have not handled your data in accordance with applicable law.

To exercise any of these rights, please contact us at [email protected].

12. International Data Transfers

Brainy Girl is based in British Columbia, Canada. Our service providers are primarily located in the United States. By using the Platform, you consent to the transfer of your information to countries outside your country of residence, including Canada and the United States, which may have different data protection rules than those in your country.

Our data processing practices comply with the General Data Protection Regulation (GDPR) for EU residents, the California Consumer Privacy Act (CCPA) for California residents, and applicable Canadian privacy legislation including PIPEDA.

13. Children's Privacy

The Platform is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will take steps to delete it.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: brainygirlu.com
• Jurisdiction: British Columbia, Canada