Privacy Policy (English version)

Last updated: 13.11.2026. The Hebrew text above is the binding version; this English text is a complete translation of it.

This policy explains what information the Mental Brightness app ("the app") collects, why, who can see it, how long it is kept, and how to request to review, correct or delete it. The app itself operates in Hebrew only and is designed for athletes to report on their training under their coach's supervision.

1. Who we are

The app is operated by Nir Braitman, a licensed sole proprietor ("osek morshe" under Israeli law), Tel Aviv, Israel. For privacy questions and requests: nir@mentalbrightness.co.il.

2. How people sign in

• Athlete: there is no self-registration. The coach adds the athlete and receives a personal access code for them. The athlete enters the code to sign in. Athletes have no e-mail or password.
• Coach: a coach account is opened by the system administrator. Coaches sign in with e-mail and password.

3. What information is collected

We do not collect: location, contacts, audio recordings or microphone access, advertising ID, or payment details, and we do not use any third-party analytics or tracking tool. The app carries no advertising.

4. What the information is used for

• To run the app: signing in, storing reports and showing them to the athlete.
• To let the coach see the reports and trends of the athletes assigned to them.
• To manage accounts, coaches and clubs, and to provide support.
• To keep the system secure and prevent misuse.

We do not sell data, do not use it for advertising, and do not pass it to third parties for marketing purposes.

5. Who can see the information

• The athlete themself.
• The coach the athlete is actively assigned to. This is the only default: a club owner and club staff see no athlete data at all unless explicitly given a specific permission to do so.
• A person in the organization or club who was explicitly granted that permission.
• System administrators on behalf of the operator, for operation, support, security and responding to privacy requests.

An athlete removed by their coach is suspended from sign-in until reassigned, and no other coach can see their data before that.

6. Service providers and storage

Data is stored and processed using Supabase (database, authentication, file storage, server functions), on servers located in Frankfurt, Germany (EU). Supabase acts as our data processor and does not use the data for its own purposes. Traffic between the app and the server is encrypted (HTTPS). Access to the data on the server is restricted by permissions.

7. Children

Athletes may be minors. The athlete does not register themself and does not give any digital consent inside the app: the coach or club enters the athlete's details and opens the account for them. The coach and the club are required to make sure, before they give us those details, that the parent's or legal guardian's consent was obtained as required by law — but responsibility for making sure a minor's data is not collected or kept by us unlawfully is not theirs alone: we, as the app's operator, are responsible for that too. If we become aware, including through a request from a parent or guardian, that a minor's data was collected or kept without lawful consent, we will act to remove or suspend it without delay. A parent or guardian may contact us at any time, including without going through the coach, to review the minor's data, correct it, object to its use, or request its deletion, at the e-mail in section 1.

8. Retention and deletion

Data is kept while the account is active and as needed to operate the service.

A request to delete an account, to review data, or to correct it is submitted by e-mail to the address in section 1. Before acting on the request we ask for details that let us identify the account and confirm that the requester is the account holder, the parent or guardian of a minor athlete, or a coach requesting on behalf of an athlete assigned to them; a request without enough detail will not be processed until it is completed. An approved request is handled and carried out only by an authorized party on behalf of the operator, in line with access permissions and the law — never by the athlete or the coach themselves.

• Deleting an athlete account: once the request is approved, the data stored for that athlete is deleted from our systems and their access to the app is revoked.
• Deleting a coach account: deletes the coach's own account (their profile and access), but does not delete the data of the athletes who were assigned to them: the athletes' data stays exactly as it was (the athletes are temporarily suspended from access until assigned to another coach), because that data belongs to the athlete, not to the coach.
• We respond to a deletion, access or correction request within 30 days.

9. Your rights

Under the Privacy Protection Law, 5741-1981, you may request to review, correct or delete the data held about you. An athlete may also make the request through their coach. To make a request: nir@mentalbrightness.co.il. We will ask for enough detail to identify the account and verify that the requester is authorized.

10. Data security

We take reasonable measures to protect the data: encryption in transit, server-side access permissions, and separation between accounts. No system is completely immune, and if a security incident requiring disclosure occurs, we will act as required by law.

11. The app is not a medical tool

The app is designed for training documentation and coaching support. It is not medical or psychological diagnosis, treatment or advice, and does not replace them.

12. Changes to this policy

We will update this policy when the app or the law changes. The date at the top of the page shows the last update. A material change will be announced in the app or on the website.

13. Contact

nir@mentalbrightness.co.il