Privacy Policy.
We collect what a booking needs — who you are, where to collect, how to reach you and how you pay — and nothing we cannot justify. We do not sell it, and we do not share it for advertising. You can ask us for a copy, and you can delete your account in the app. This site sets no cookies at all.
1 · Who we are
NoBrainer is the controller of the personal data described here: we decide why and how it is used. This policy covers the NoBrainer app and this website, in Lebanon and in Cyprus. Questions go to info@nobrainer.bot.
Our registered company name and address are not published here yet.
In Cyprus, the EU's General Data Protection Regulation (the GDPR) and Cyprus Law 125(I)/2018 apply to your data. In Lebanon, Law No. 81 of 2018 on Electronic Transactions and Personal Data applies. Where the two markets differ, we say so.
2 · What we collect
Your name, your phone number and, if you give it, your email. Your phone number is how you sign in, unless you use Google or Apple. The addresses you ask us to collect from and return to: an address is a label you choose, an optional map pin, and any directions you write. If you remove an address, we stop offering it, but keep it, switched off, until you delete your account.
Your bookings: what you booked and when, the name and address on each, the notes you add for the partner, the reason if you cancel, and any rating or comment you leave. Your repeat bookings, the promo codes you used and the partner you chose as your usual one.
Your payments: the amount, date, method and outcome of each payment and refund. In Cyprus, your card details go from the app straight to Stripe and never reach us; if you save a card, we keep Stripe's reference to it with its brand, last four digits and expiry date. In Lebanon you pay cash, so there is no card to record.
How you sign in: a record of each code we text you (the number, the time and whether it was used, never the code itself) and of the phones you're signed in on. If you sign in with Google or Apple, the account identifier they give us and whatever name or email you let them share. If you turn on Face ID sign-in, the public half of the passkey your phone makes; your face never leaves your phone.
Messages: if you allow notifications, the token your phone uses to receive them. A record of each notification and email we send you, with its text, the time and whether it was delivered.
From your phone, only with its permission: your location while you pick an address on the map (we save the pin you confirm, not where you are), and the camera if you tap Scan card in Stripe's card form (we never receive the picture). To show the right country's service, the app may read your mobile network's country on the phone, or our server may look up the country of your internet address; neither is stored.
If you join the waitlist, your email. If you write to us through the contact form, your name, phone number, email, the topic you picked and your message.
A record of what happens on accounts and bookings: what was done and when, and by which account.
If you work with NoBrainer as a partner, as a partner's crew member or on our team, we also hold your name, your work contact details, the number you sign in with and your role, and for a partner business, the details we need to pay it and to meet tax reporting rules.
Please don't put sensitive details, such as health information, in notes, directions or messages to us. The job doesn't need them.
3 · Why we hold it
To give you the service you asked for: your account and sign-in, your bookings, telling the partner where to go, taking or recording payment, paying the partner, sending you messages about your bookings, and answering you when you get in touch. Under the GDPR, this is necessary for our contract with you.
To keep accounts and meet our tax and legal duties: the records of payments, refunds and what partners are owed. This is our legal obligation.
To keep NoBrainer safe: limiting sign-in codes, stopping fraud and abuse, and keeping a record of what happens on accounts. This is our legitimate interest in a service that cannot be misused.
To send you offers and news by notification, while Offers and news is switched on under Account. This is our legitimate interest in telling customers about our own services, and you can switch it off at any time. Order updates and sign-in codes are not offers, and they still come. We don't send offers by text message or by email.
If you join the waitlist, we keep your email on the list. If you write to us, we use what you sent to answer you. This is our legitimate interest in answering people who contact us.
Notifications, location, the camera and Face ID are used only with your permission, which your phone asks for and which you can take back in its Settings.
To stop abuse of sign-in codes, we count requests by phone number and by internet address. Your IP address stays in our server's memory for a few minutes for that. We also keep a scrambled form of it, which cannot be turned back into the address without our secret key, for an hour to count the codes sent from it; after that hour, the next request for a code deletes it. We do not write the address itself to a log or to our database.
We don't make decisions about you based only on automated processing that have legal or similarly significant effects on you.
4 · Who else sees it
We do not sell your data and we do not share it for advertising. It reaches other companies only where the service cannot work without them.
The partner doing your job sees your name, your phone number, the address label you chose, the map pin if you dropped one, any directions you wrote and the notes you added for them. They need those to arrive. Before a partner accepts a job, they see only the area and the name on the booking. They stop seeing your number, address and notes at 04:00 the day after the job is finished, by the clock in Beirut or Nicosia, and they never see the address of a cancelled job. A crew member the partner gives the job to sees the same, for the same time. The partner also sees any rating and comment you leave, without your name next to it. They do not see your other bookings, your payment details or your account history.
Twilio sends your sign-in code by SMS, and receives the number and the text of that one message and nothing else. This applies to everyone who signs in, including our own staff and our partners.
Google is involved in four separate ways. If you sign in with Google, Google confirms the account is yours. If you drop a map pin, Google Maps serves that map. On Android, Google delivers our notifications to your phone and receives your device's notification token and the text of the notification. And this website loads its typefaces from Google Fonts, which means Google sees your IP address and browser when a page loads, whether or not you have an account.
Apple delivers notifications to your iPhone, and receives your device's notification token and the text of the notification. If you sign in with Apple, Apple confirms the account is yours and tells us only what you allow. If you delete an account that uses Sign in with Apple, we ask Apple to end that link.
In Cyprus, Stripe takes your card payment. The card form in the app is Stripe's, so your card details go to Stripe and not to us. We send Stripe the amount, the currency and our own reference numbers for the booking and, for a refund, the reason we give for it; we don't send your name or email. Stripe keeps its own records of the payment. In Lebanon you pay cash, so no card company is involved.
Amazon Web Services host the service and send our emails. Your data is stored in their Frankfurt region, inside the European Union.
If you choose to message us on WhatsApp, that conversation passes through WhatsApp, under its own terms. We don't use WhatsApp to send notifications or sign-in codes.
Inside NoBrainer, only people in our operations team can open a customer's account, to help with a problem.
If the law requires it, we give information to the authorities. We also share it, in confidence, with the accountants and lawyers who advise us.
Nobody else. We use no analytics, no advertising, no crash reporting and no tracking software of our own, in the app or on this site, and we do not log who visits this site or what they ask for.
5 · How long we keep it
We keep your account and your bookings while your account is open. When you delete your account, your name, phone number, email, addresses, saved cards and ways of signing in are removed straight away. Your past bookings stay, with no name, number, address or note on them, so we can settle with partners and answer questions about past jobs.
Invoices, payments, refunds and what a partner is owed are commercial records and we keep them for 10 years. They name the booking, not your home.
We record each sign-in attempt against the number it was for and keep that for 90 days. The delivery record of a message we sent you is kept for 12 months. Then both are deleted. If you delete your account, its sign-in attempts go straight away, and its delivery records stay with no number, email or text on them.
Once you're signed in on a phone, you stay signed in until 90 days after you last used the app, and for 180 days at most. Signing out ends it. The scrambled form of your IP address is deleted after its hour, as section 3 says.
A partner and their crew see your number, address and notes only for the job, until 04:00 the day after it is finished.
If you joined the waitlist or wrote to us and never signed up, we keep what you sent until you ask us to delete it: write to info@nobrainer.bot. If you have an account, deleting it also deletes any waitlist sign-up or contact request that carries your number.
Our servers' error logs are kept for 30 days. They record which page failed, never what you typed.
Deleted data can survive in our encrypted backups for up to 30 days before those expire.
6 · Your rights and choices
You can change your name, your email and your addresses in the app at any time, under Account, and you can remove an email you no longer want us to hold. Your phone number is how you sign in, so the app cannot change it; if your number changes, write to info@nobrainer.bot.
You can switch off offers and news under Account. You can turn notifications off in your phone's Settings, under NoBrainer. Everything else keeps working.
To delete your account, open the app, go to Account and tap Delete my account. If you can't open the app, write to info@nobrainer.bot and we will do it within 30 days. The Delete your account page says what goes and what stays.
Some things we cannot remove. Once a job is done, the record of that job and what was paid for it stays with us — we are required to keep commercial records, and a partner is owed against them. When you delete your account those records stop carrying your name, your number and your address.
To get a copy of what we hold about you, write to info@nobrainer.bot. We'll confirm it's you, then send you one file that any text editor can open.
In Cyprus, the GDPR gives you the right to see your data, to have it corrected, to have it deleted, to restrict or object to how we use it, to take it with you in a machine-readable form, and, where we rely on your consent, to withdraw it at any time. You can object at any time to our use of your data for offers. In Lebanon, Law No. 81 of 2018 gives you the right to know what we hold about you and to have it corrected or deleted.
To use any of these rights, write to info@nobrainer.bot. We'll confirm it's you and answer within a month. Section 12 says where you can complain.
7 · Cookies
This site sets no cookies at all. Not for tracking, not for advertising, not for measurement — and we run no analytics.
Your browser keeps two small settings on your own device: whether you chose light or dark, and whether you dismissed the notice at the top of the page. They never reach us, and clearing your browser data removes them.
One thing worth being straight about: our pages load their typefaces from Google Fonts, so Google sees your IP address and browser when a page loads. That is not a cookie and it does not identify you to us, but it is a request to another company and you should know about it.
8 · Changes to this policy
If we change how we handle your data we will update this page. If the change is significant — a new company receiving your data, or a new reason for holding it — we will tell you before it takes effect.
The version on this page is always the one that applies.
9 · Where your data is stored
We store your data with Amazon Web Services in their Frankfurt region, inside the European Union. If you're in Lebanon, that means your data is held outside Lebanon.
Twilio and Google are based in the United States and handle there the part of your data that section 4 says they receive. Those transfers out of the European Union are covered by the European Commission's standard contractual clauses in those companies' data processing terms. Apple and Stripe may also handle the data they receive outside the European Union, under the same kind of safeguard.
10 · Children
NoBrainer is not for anyone under 18, and you must be 18 or over to make an account. We do not knowingly collect data about children. If we learn that we have, we delete it.
11 · Security
Your data is encrypted while it travels and where it is stored. Sign-in codes are stored scrambled, never as the code itself, and card numbers never reach our servers. Only our operations team can open a customer's account, and every download or deletion of an account is written to our audit log.
No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
12 · Contact and complaints
Questions, requests and complaints about your data go to info@nobrainer.bot. We'll answer within a month.
If you're in Cyprus and unhappy with our answer, you can complain to the Commissioner for Personal Data Protection, the supervisory authority in Cyprus, at www.dataprotection.gov.cy or commissioner@dataprotection.gov.cy. You can also complain to the data protection authority of the EU country where you live or work.
If you're in Lebanon and unhappy with our answer, you can take it to the Lebanese courts.