Privacy Policy

Last updated: October 23, 2026

What you keep in Brightsay stays on your phone.

This policy is short because there isn't much to explain: Brightsay has no account, no login, and no servers of its own, and it does not send your journal, moods, or recordings anywhere.

1. Who we are

Brightsay is published by CLICAPP LICENCIAMENTO DE SOFTWARES LTDA ("we", "us"), a company based in Brazil, and is offered in the United States, Canada, the United Kingdom, and Australia. For any privacy question or request, write to contato@clicapp.com.br.

2. What stays on your device

Everything you create or enter in Brightsay is stored only on your phone:

• Your first name (optional), the goals you choose, and your reminder times
• Your daily check-ins (mood and what you need today)
• Your journal entries, evening reflections, intention, and the affirmations you write
• Voice recordings you make of your affirmations
• Favorites, collections, streak history, and app settings

Journal entries and reflections are encrypted on your device with a key kept in Android's secure keystore. An optional PIN can lock the app. We never receive any of this information. Android's automatic cloud backup is turned off for Brightsay, so this data is not copied to your Google Drive.

3. What leaves your device

• Purchases. Subscriptions are processed by Google Play. Google handles your payment details under its own privacy policy; we receive a purchase confirmation and anonymous sales reports, never your card number.
• Google Play services. Libraries from Google that handle billing and in-app reviews may send technical information to Google so those features work, under Google's privacy policy.
• Google Play crash and performance reports. If you have chosen to share usage and diagnostics with Google on your phone, Google Play may report app crashes and performance to us in aggregate, under Google's privacy policy. Brightsay itself has no analytics or crash-reporting tools.
• Purchase details. When you buy Brightsay Plus, Google shares order details with us, such as the order number, the product, the price, your country, and the date. We use them only to handle refunds, support requests, and accounting.
• Read aloud. Brightsay reads affirmations with your phone's text-to-speech engine (for example, Google's). Most voices work offline, but some engines offer online voices that send the text being read, including affirmations you wrote, to the engine's provider under its own privacy policy. You can choose an offline voice in the app's voice settings or in your phone's text-to-speech settings.
• Emails you send us. If you write to us, we receive your email address and whatever you include in your message, and use them only to reply to you.

We do not sell or share personal information, we do not show ads, and we do not use advertising identifiers.

Where we handle your information. We are based in Brazil, so the purchase details and emails described above are handled by us in Brazil, and our email provider may store them in other countries. Wherever they are handled, we protect them as this policy describes, and Brazil's data protection law (LGPD) also applies. If you are in the UK, we rely on the following legal bases: performing our contract with you (support and refunds), complying with legal obligations (tax and accounting records), and our legitimate interest in answering your messages.

4. Sharing an image

When you share an affirmation as an image, Brightsay creates the image on your device and hands it to the app you choose (for example, Messages or Instagram). What happens next is governed by that app.

5. Backups

In Settings → Your data, you can export a backup file and import it later, for example on a new phone. The backup includes your first name and goals, journal entries, reflections, intention, the affirmations you write, favorites, collections, the affirmations you marked "Not for me", reminders, settings, program progress, and streak history. Voice recordings, daily check-ins, and your PIN are not included.

The backup file is created on your phone and saved wherever you choose. Your journal is in plain text inside it so it can be read on another phone, so keep it somewhere private. We never receive a copy. When you import a backup, its contents replace what is in the app and are encrypted again with your new phone's key.

6. Retention and deletion

Because your data lives on your device, you control it. You can delete everything at any time in Settings → Data & reset → Reset Brightsay, or by uninstalling the app. You can export a backup or a readable copy of your journal at any time; those files are yours, and Brightsay does not keep a copy. Purchase records and any crash and performance reports are kept by Google under Google's own retention rules. We keep the order details Google shares with us for as long as tax and accounting laws require, and delete email conversations 12 months after the last message unless the law requires us to keep them longer.

7. Children

Brightsay is intended for adults 18 and over. It is not directed to children under 13, and we do not knowingly collect personal information from children.

8. Your privacy rights

Depending on where you live, privacy laws give you rights over personal information a company holds about you:

• United States: depending on your state, the right to access, correct, delete, or obtain a copy of your information, and to opt out of its sale or sharing.
• United Kingdom: under the UK GDPR, the right to access, correct, erase, restrict, or port your information, and to object to its use. You can also complain to the Information Commissioner's Office (ico.org.uk).
• Canada: under PIPEDA, the right to access and correct your information. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
• Australia: under the Privacy Act 1988, the right to access and correct your information. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Apart from purchase details and any emails you send us, we do not hold personal information about you, so most requests are fulfilled directly in the app (export, import, or reset). For anything else, contact contato@clicapp.com.br and we will respond within 30 days.

9. Security

We use on-device encryption for your most personal entries, and nothing you write, record, or check in with ever reaches our systems. No method of storage is perfectly secure; keeping your phone locked adds an important layer of protection.

10. Changes to this policy

If we change how Brightsay handles data, we will update this page and the date above before the change takes effect.

11. Contact

CLICAPP LICENCIAMENTO DE SOFTWARES LTDA — contato@clicapp.com.br