NEUROFLIGHT PRIVACY POLICY

Effective Date: June 7, 2026

Welcome to Neuroflight. Neuroflight, Inc. ("Neuroflight," "we," "us," or "our") operates the website located at neuroflight.ai and provides cognitive training software, including our "Bird Watch" game, distributed via software and designated care-facility tablets (collectively, the "Services").

Neuroflight is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

Please note: Neuroflight is a standalone cognitive training and wellness tool. We do not bill health insurance, and we are not a HIPAA-covered entity or Business Associate. Our data collection is governed by applicable consumer privacy laws and state-level consumer health data regulations.

1. Information We Collect

We collect information that you provide directly to us, as well as data generated automatically through your interaction with our cognitive software.

A. Account and Administrative Information

  • For Facility Administrators: We collect full name, business email address, billing address, organization name, and facility name.

  • For Direct-to-Consumer (D2C) Users: When available, we collect full name, email address, and billing address.

B. Cognitive Performance and Wellness Data

To provide our cognitive tracking services, our software captures and tracks user performance metrics per gaming session:

  • Interaction Data: Response accuracy and speed of response per individual interaction.

  • Derived Cognitive Metrics: We process raw interaction data to derive specialized cognitive metrics, including d-prime scores and memory metrics.

  • User Survey Results: We collect subjective, user-inputted daily indicators including mood, sleep patterns, and general daily outlook.

C. Payment Data

All payment processing is handled strictly through secure, PCI-DSS compliant third-party payment processors (e.g., Stripe). Neuroflight does not store, process, or have access to full credit card numbers or financial account credentials on our servers.

D. No Technical Tracking/Third-Party Cookies

Neuroflight values your digital privacy. We do not use third-party tracking pixels, marketing cookies, or tracking suites (such as Google Analytics or Meta Pixels) to monitor your behavioral habits across the web.

2. How We Use Your Information

We use the collected data strictly for the following operational and product purposes:

  • To Provide the Services: Generating cognitive performance profiles, managing facility and user accounts, and processing billing.

  • Time-Series Tracking: Providing designated facility administrators with secure access to a time-series progress view of their specific patients' or residents' cognitive trends.

  • Predictive Analytics & Machine Learning: We retain cognitive and wellness metrics long-term to develop predictive analytics and improve our software's capabilities. Any data used to train our machine learning classifiers or internal models is strictly de-identified and aggregated so that it can no longer be linked to an identifiable individual.

3. Data Sharing and Disclosure

Neuroflight does not sell your personal data, cognitive metrics, or wellness logs to any third parties. Furthermore, we do not share your health-adjacent data with academic institutions, marketing partners, or external researchers without your explicit, separate opt-in consent.

Data is shared only under the following strict conditions:

  • Authorized Personnel: Your designated facility administrator can view your specific time-series data. Neuroflight internal technical staff may access data strictly to troubleshoot system performance.

  • Legal Obligations: We may disclose data if required by law, subpoena, or valid regulatory request.

4. Data Security and Retention

We implement industry-standard administrative, technical, and physical security measures designed to safeguard your cognitive and personal data from unauthorized access, disclosure, or alteration.

  • Retention: Because tracking cognitive aging and improvement requires multi-year historical baselines, we retain cognitive performance scores and wellness logs long-term. This data continues to fuel personalized predictive analytics for your account until a formal deletion request is made.

5. Your Rights and Data Control

Regardless of location, Neuroflight believes all users should have control over their data.

  • Access and Correction: You or your authorized facility administrator may review or correct your account information at any time.

  • Data Deletion: You have the right to request that your account, cognitive scores, and wellness logs be completely and permanently purged from our active systems.

To exercise your data rights or request account deletion, please email us directly at:  privacy@neuroflight.ai

6. International Users & Future Expansion

Currently, Neuroflight operates and offers its Services strictly within the United States. If you utilize our Services from outside the United States, please be aware that your data will be transferred to, stored, and processed in the U.S. As Neuroflight expands to global consumer markets, this policy will be amended to incorporate specific provisions required by international frameworks (such as GDPR in Europe and PIPEDA in Canada).

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically.