Privacy Policy

OSNeuro ("we," "us," or "our") operates the OSNeuro X Cognitive Intelligence Platform, including the mobile and web applications, Brain Score™, NeuroTwin™, NeuroGPT™, and Predictive Intelligence™ modules (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the practices described here.

This page is maintained by OSNeuro to answer common privacy questions about the Service. It is not a substitute for medical advice, and OSNeuro is a wellness product — not a medical device.

• Account data: name, email, password hash, authentication provider identifiers.
• Profile data: demographics, goals, and preferences you provide.
• Health & cognitive data (see next section).
• Device & log data: device model, OS, IP address, crash logs, timestamps.
• Consent records: version, timestamp, IP, and device that accepted each policy.

With your explicit consent we may process:

• Heart rate, HRV, resting heart rate, respiration.
• Sleep stages, duration, and efficiency.
• Activity, steps, energy expenditure, workouts.
• EEG band powers and session metadata from consumer headsets.
• OSNeuro cognitive assessment, training, and game results (attention, memory, executive function scores).
• Self-reported mood, PHQ-9, GAD-7 and similar screeners.

We integrate with Apple HealthKit, Google Health Connect, Fitbit, Oura, Garmin, Muse, and similar providers. Data received from these providers is used only to compute Brain Score™, NeuroTwin™, NeuroGPT™ coaching, and Predictive Intelligence™. We do not sell, advertise on, or share this data with third parties for their own purposes. You can revoke a connection at any time in Settings → Devices, and you can revoke Apple HealthKit or Health Connect access from your operating system settings.

• Provide, maintain, and improve the Service.
• Compute your Brain Score™, NeuroTwin™, and personalized recommendations.
• Send transactional messages (security alerts, sync failures, consent updates).
• Detect abuse, prevent fraud, and secure the Service.
• Comply with legal obligations.

OSNeuro uses AI models to derive insights from your data. Prompts sent to AI providers are stripped of direct identifiers where feasible. We do not permit third-party AI providers to train their public models on your identified health data.

• Brain Score™ — a composite index computed on our servers from your fused biomarkers.
• NeuroTwin™ — a longitudinal digital twin that models your baseline and trajectory.
• NeuroGPT™ — a coaching assistant that reasons over your recent metrics to generate briefs.

We share personal data only with:

• Processors that operate the Service under contract (hosting, database, email).
• You, on your request (data export, sharing with a clinician you designate).
• Authorities, when required by law or to protect life.

We do not sell your personal data or share it for cross-context behavioral advertising.

Core subprocessors include our cloud database and authentication provider, our AI gateway, and the device vendors listed above. A current list is available on request at privacy@osneuro.com.

We encrypt data in transit (TLS 1.2+) and at rest. Access to production systems is restricted, logged, and multi-factor authenticated. Row-level security scopes every record to its owner. No system is perfectly secure — please report suspected vulnerabilities to security@osneuro.com.

We keep account data while your account is active. Raw biomarker samples are retained for 24 months by default; aggregated Brain Score™ history is retained for the life of the account. You can trigger export or deletion at any time from the Privacy Center.

Subject to your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, LGPD, and similar), you have the right to access, correct, port, restrict, or delete your personal data, and to object to certain processing. Exercise these rights in the Privacy Center or by emailing privacy@osneuro.com.

We rely on your explicit consent to process health and cognitive data. You can withdraw consent at any time; withdrawal does not affect processing carried out before withdrawal.

OSNeuro is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, contact privacy@osneuro.com.

We use strictly necessary cookies for authentication and session management, and privacy-preserving analytics to understand aggregate usage. See our Cookie Policy.

We may transfer data to countries outside your own. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

OSNeuro Privacy Team — privacy@osneuro.com. For security reports, use security@osneuro.com.

We will notify you of material changes by email or in-app notice at least 30 days before they take effect, and record your acceptance of the new version.