The Borrow My Brain Privacy Policy for GDPR compliance