Privacy Policy

Brotherhood+ is a wellness, growth, and support platform built for men of color and the people who support them. This Privacy Policy explains what we collect, why we collect it, how we use and protect it, and the choices you have.

This policy applies to brotherhoodplus.com, our web and mobile apps, and any related services (together, the 'Service').

We collect only what makes the Service useful.

We use your information to:

• Operate and improve the Service (Coach, Journal, Learn, Progress, Lounge, Directory, Community).
• Personalize the experience — e.g. show the right growth plan or check-in prompt.
• Send transactional emails (account verification, password reset, security alerts). We do NOT send marketing emails without your opt-in.
• Detect and prevent abuse, fraud, and account takeover.
• Comply with legal obligations and enforce our Terms of Service.

We do NOT sell your personal information. We do NOT share Journal entries, coach conversations, or assessment results with advertisers or data brokers.

We share limited information with the following processors, each under a data-processing agreement:

• Anthropic and other language-model providers — to generate AI Coach and Journal reflections. Prompts are transmitted; providers do not retain them for training on our account.
• MongoDB Atlas / cloud infrastructure — hosting and storage.

We do not authorize any of these providers to use your data for their own advertising or product development.

We keep account data as long as your account is active. When you delete your account (Profile → Delete account), we remove your personal data within 30 days, except where we are legally required to keep records (e.g. billing records for tax purposes) or where doing so is necessary to resolve disputes and enforce our agreements.

You can export your data at any time from Profile → Export data.

Passwords are hashed with bcrypt. Sessions live in httpOnly + Secure cookies with SameSite protection and rotating refresh tokens. Optional two-factor authentication (TOTP) with single-use backup codes is available in Profile → Security. We rate-limit sign-in, sign-up, and password-reset endpoints, and detect brute-force attempts.

No system is perfectly secure. In the unlikely event of a breach affecting your account, we will notify you as required by applicable law.

Depending on where you live, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (except where retention is legally required).
• Export a copy of your data in a portable format.
• Object to certain processing.
• Withdraw consent for optional processing.

To exercise these rights, use the tools in Profile → Privacy, or email support@brotherhoodplus.com.

California residents: Brotherhood+ does not sell personal information. You have additional rights under the California Consumer Privacy Act (CCPA) which are honored via the same tools above.

Brotherhood+ is intended for adults 18 years or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact support@brotherhoodplus.com and we will delete it.

Brotherhood+ is operated from the United States. If you access the Service from outside the U.S., you consent to the transfer, processing, and storage of your information in the United States.

We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the top and, for material changes, notify you by email or an in-app notice before the change takes effect.

For privacy questions, data requests, or concerns:

• Email: support@brotherhoodplus.com