Privacy Policy

Gamma is a cognitive readiness monitor that combines consumer EEG with optional wearable signals. This page describes what we collect, why, and how to control it.

What we collect

• Account information: email and a hashed password.
• EEG data: raw four-channel signal from a Muse 2 headset during sessions you start. Samples are streamed from your device to our server so the cognitive scoring algorithm can run server-side.
• Apple Health data: if you connect Apple Health, we ingest daily summaries (HRV, resting heart rate, sleep stages, SpO2, menstrual cycle days when relevant) for the days you use Gamma. We do not read your full Apple Health history.
• Self-reported context: optional pre-session inputs (caffeine, sleep hours, stress level, notes, last period start date if relevant) and post-session decision logs.
• Performance data: Stroop test reaction times and reading-task focus events generated during sessions.

How we use it

• Compute your cognitive readiness score and its trend over time.
• Build personal baselines so the score adapts to you.
• Train and evaluate the EEG-to-wearable correlation model. Aggregated, de-identified results may be published as research.

How it is stored

Data is stored in a managed PostgreSQL database hosted on Railway (US region). Connections use TLS. Your raw EEG, wearable, and self-reported data are scoped to your user ID and not shared with other users.

Data Retention

Personal data collected during the Gamma research study, including EEG, wearable, and behavioral data, is retained for the duration of the study and for as long as necessary to train and improve the Gamma cognitive capacity algorithm. Participants may request early deletion of their data at any time by contacting nisha@gammacog.com. Deletion requests will be honored unless retention is required for legitimate research purposes under GDPR Article 89.

Loaned Study Equipment

If you participate in a Gammacog OÜ study, we may loan you a Muse EEG headband for the duration of your cohort. We record the device assigned to you, its return status, and your signed loan acknowledgment (name, timestamp, device identifier). This is retained for the study duration plus 12 months and used solely to manage equipment loans and study operations. EEG data recorded during sessions is processed as described elsewhere in this policy.

Third parties

• Railway hosts the application and database.
• Resend sends transactional email (password reset, session summaries).
• Apple Health data stays on your device until you grant Gamma read access; we then receive only the daily summaries described above.

We do not sell your data. We do not run advertising. We do not share your individual data with anyone outside Gamma without your explicit consent.

Your Rights

Under GDPR you have the right to access your personal data, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. To exercise any of these rights, contact nisha@gammacog.com.

Contact

Questions, deletion requests, or data exports: nisha@gammacog.com.