Privacy policy#

This policy describes what BrainAccess Mobile (the Android app for BrainAccess EEG headsets) does with data. It applies to the app only. The brainaccess.ai website has its own privacy policy.

Who is responsible#

Neurotechnology UAB, company code 120441850, Laisvės pr. 125A, Vilnius, Lithuania — brainaccess@neurotechnology.com. Questions about personal data can also go to our Data Protection Officer through the contact form.

In short#

  • The app has no user accounts, no advertising, no analytics service and no third-party trackers.

  • EEG and everything derived from it stays on your phone. It never reaches Neurotechnology.

  • The only request the app makes to us is an update check (below). It carries the app version and the connected headset’s model and serial so the server can answer for your device — nothing else.

  • Data leaves the phone only when you share a file or switch on LSL streaming to your own local network.

Data that stays on your device#

Data

Where

Backup

Live EEG, accelerometer, gyroscope, impedance, battery and contact readings from the headset

Memory, while a session is open

—

Recordings and snapshots (CSV, BDF, PNG)

Android/data/com.neurotec.brainaccessmobile2/files/Documents/BrainAccess/

Excluded from Android cloud backup and phone-to-phone transfer

Settings: display and filter preferences, theme, marker presets, recording format, LSL choice, per-headset configuration, up to four remembered headsets (Bluetooth address and name)

Private app storage

Included in Android backup, like any app’s settings

Uninstalling the app deletes all of the above. Files you exported through the share sheet are outside the app and outside our control.

Update check#

When the app starts, and again when a headset connects, the app requests the manifest bainfo.json from www.brainaccess.ai. That manifest lists the current firmware for each headset model and is what the Firmware screen and the update badges are built from; firmware images are downloaded from the same host when you start an update.

The request carries:

Parameter

Value

Why

source

mobile_app

Which product is asking

os

android

Which platform

version

the app version, e.g. 1.0.0

So the server can answer for this app version

device_sn

the connected headset’s model and serial, e.g. MAXI 001 — only on the request made when a headset connects

So the server can answer for this headset (its model and, in future, its specific firmware)

Like every web request, it also exposes your phone’s IP address to the web server. Requests to www.brainaccess.ai pass through Cloudflare, our content delivery and security provider, which processes them under its own terms as a service provider to us.

What the app never sends: EEG or any other headset data, recordings, your phone’s identifiers (IMEI, advertising ID, MAC address), the headset’s Bluetooth address, your location, or anything you type.

The parameters and IP address are kept only in web-server logs, which are deleted automatically after 30 days. We do not build profiles from them, combine them with other data, or share them. Legal basis: our legitimate interest in knowing which app versions and headset models are in use so that firmware and app updates can be provided for them (GDPR Art. 6(1)(f)).

Streaming to your local network (LSL)#

The LSL outlet is off by default. When you switch it on (viewer → More → Output → LSL outlet), the app publishes the streaming headset’s raw EEG, motion (accelerometer, gyroscope) and electrode-contact values to any LSL client on the network your phone is connected to. On a shared or untrusted network this is a live broadcast of that data. The choice is remembered; nothing is sent to the internet and nothing is stored by the app for this purpose. See Streaming to a computer (LSL).

Sharing files#

Share in the recordings browser hands the file to the app you pick through Android’s share sheet. From that point the receiving app’s policy applies.

Permissions#

Permission

Android version

Why

What the app does not do

Nearby devices (Bluetooth scan and connect)

12 and newer

Find and connect headsets

—

Location (precise) and location services on

11 and older

Android requires it to deliver Bluetooth scan results

The app never reads, stores or transmits your location

Notifications

13 and newer

The ongoing-session notification with Marker and Stop

—

Internet

all

Update check and firmware downloads; LSL sockets

No other network use

Wi‑Fi multicast state

all

Lets LSL clients on your network discover the outlet

Only while the outlet is on

Foreground service (connected device)

all

Keeps streaming and recording alive with the screen off

—

Children#

The app and BrainAccess headsets are not designed for or directed at children. We do not knowingly process personal data of anyone under 16.

Your rights#

Under the GDPR you may ask what personal data we hold about you and request correction or deletion, object to processing based on legitimate interest, and lodge a complaint with a supervisory authority. Write to brainaccess@neurotechnology.com; we answer within one month. Note that the update-check logs contain no name or account, so a request would have to identify you by headset serial and time.

Changes#

We update this page when the app’s behaviour changes. The version of the manual you are reading corresponds to the app version in its header; the stable address of this policy is https://www.brainaccess.ai/documentation/mobile-app-docs/privacy/.

Last updated: September 2026.

See also#