Privacy Policy

Updated September 30, 2026

This Privacy Policy applies to your use of the Brainy Girl Thinkific platform, located at brainygirlu.thinkific.com or any associated domain (the "Platform"). This includes your access to cohort programs, digital products, community spaces, and all other products and services delivered through Thinkific.

By accessing or using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. Brainy Girl may update this policy at any time. Significant changes will be communicated via email, Platform notification, or website banner. Continued use of the Platform after updates constitutes acceptance of the revised policy.

1. Who We Are

This Platform is operated by Brainy Girl ("we", "us", or "our"), owned and operated by Kim Garnett in British Columbia, Canada. Our Thinkific Platform is hosted and powered by Thinkific Labs Inc. For questions about this Privacy Policy, please contact us at [email protected].

2. Information We Collect

Account and Registration Information

When you create an account on the Platform, we collect:

Full name and email address;
Username and password (encrypted);
Profile information you choose to provide;
Time zone and language preference.

Purchase and Billing Information

When you purchase a cohort enrollment or digital product, we collect:

Billing name and address;
Payment method information (processed securely by Thinkific's payment partners, we do not store

full credit card details);

Purchase history and transaction records;
Subscription status and renewal dates.

Learning and Engagement Data

As you use the Platform, we collect:

Course and lesson completion data;
Quiz and assessment results;
Community posts, comments, and replies;
Login history and session duration;
Feature usage and engagement patterns.

Communications

We collect communications you send us through the Platform's support channels, community posts, and direct messages to our team.

Technical Data

We and our service providers may automatically collect:

IP address and general location;
Browser type and device information;
Referring URLs and navigation paths;
Cookie data (see Section 6).

3. How We Use Your Information

We use the information we collect to:

Create and manage your account;
Deliver and administer your cohort program enrollment and digital product access;
Process payments and manage subscriptions;
Send transactional emails related to your purchases and account;
Send marketing and content emails (you may opt out at any time);
Provide customer support;
Improve the Platform, our products, and our services;
Monitor and analyze usage patterns to enhance the learning experience;
Comply with applicable laws and regulations.

4. Payments and Merchant of Record

Purchases on this Platform are processed by Thinkific Payments, also called TCommerce. For those purchases Thinkific Labs Inc. acts as the merchant of record: Thinkific collects your payment, calculates and charges any applicable sales tax, and remits that tax on our behalf. Thinkific uses Stripe as its underlying payment processor.

When you buy from us on this Platform, your name, email address, billing address, payment card details and transaction details are processed by Thinkific and by Stripe. We never see or store your full card number.

You can review Thinkific's Privacy Policy at https://www.thinkific.com/privacy-policy/ and Stripe's Privacy Policy at https://stripe.com/en-ca/privacy.

5. Digital Products

Digital products (including downloadable resources, templates, toolkits, and frameworks) sold on the Platform are provided on a limited-time access basis as specified at the time of purchase. We retain records of your purchase history for billing and support purposes. Once access has been granted, purchases are final except as described in our refund policy.

6. Cookies

The Platform uses cookies and similar tracking technologies to:

Maintain your login session;
Remember your preferences and settings;
Track your course progress;
Analyze usage and improve the Platform.

Thinkific manages the Platform's core cookie infrastructure. You can review Thinkific's cookie practices at https://www.thinkific.com/privacy-policy/. You may control cookie settings through your browser; however, disabling certain cookies may affect your ability to use the Platform.

7. Third-Party Service Providers

We share data with the following trusted third parties to operate the Platform and deliver our services:

Thinkific Labs Inc. - Platform hosting, course delivery, payment processing as merchant of record,

and community management. Privacy Policy: https://www.thinkific.com/privacy-policy/

Stripe - Payment processing, as Thinkific's underlying payment processor. Privacy Policy:

https://stripe.com/en-ca/privacy

Kit (formerly ConvertKit) - Email marketing and communication. Privacy Policy:

https://kit.com/privacy

Google Analytics - Platform usage analysis. Privacy Policy:

https://www.google.com/policies/privacy/

Facebook Inc. - Advertising and audience targeting. Terms:

https://www.facebook.com/ads/manage/customaudiences/tos.php

Hotjar - Visitor behavior analysis. Privacy Policy:

https://www.hotjar.com/legal/policies/privacy/

Tally - Interactive forms and quizzes. Privacy Policy: https://tally.so/help/privacy-policy

We do not sell your personal information to third parties.

8. AI Systems

Brainy Girl integrates AI tools into portions of the Platform experience. When AI features are active, your data may be processed by:

OpenAI (GPT models): Data retention: 30 days. Privacy Policy: https://openai.com/privacy/
Claude AI (Anthropic): Data retention: 30 days. Privacy Policy:

https://www.anthropic.com/privacy

Perplexity AI: Data retention: Zero retention for API interactions; 7 days for uploaded files.

We will notify you when AI processing is active. AI-generated content is for informational purposes only and is not a substitute for professional advice.

Your data subject rights for AI processing include the right to access, correct, delete, and opt out of AI data processing, and the right to request human review of any automated decision that significantly affects you. Contact [email protected] to exercise these rights.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. If you wish to delete your account or request removal of your data, please contact [email protected].

10. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), secure payment processing through Thinkific's PCI-compliant infrastructure, and access controls. No method of transmission over the Internet is 100% secure; while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

11. Your Rights

Depending on your location, you may have the following rights:

Access - request a copy of the personal information we hold about you;
Correction - request correction of inaccurate or incomplete information;
Deletion - request deletion of your personal information, subject to legal retention requirements;
Portability - request your data in a portable format;
Opt-out - opt out of marketing communications at any time;
Complaint - lodge a complaint with a supervisory authority if you believe we have not handled your

data in accordance with applicable law.

To exercise any of these rights, please contact us at [email protected].

12. International Data Transfers

Brainy Girl is based in British Columbia, Canada. Our service providers are primarily located in the United States. By using the Platform, you consent to the transfer of your information to countries outside your country of residence, including Canada and the United States, which may have different data protection rules than those in your country. Information held outside Canada may be accessed by the courts, law enforcement and national security authorities of that country where their laws require it.

Our data processing practices comply with the General Data Protection Regulation (GDPR) for EU residents, the California Consumer Privacy Act (CCPA) for California residents, and applicable Canadian privacy legislation including PIPEDA.

13. Children's Privacy

The Platform is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will take steps to delete it.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Website: brainygirlu.com
Jurisdiction: British Columbia, Canada