Effective July 2, 2026
Account data (name, email, phone if provided), the content you put in or connect to your brain (documents, emails, SMS, calendar events, contacts, vault entries), billing data (handled by Stripe — we never see full card numbers), and operational logs (sign-ins, errors, feature usage) used to run and secure the Service.
To operate your brain: storing and indexing content, generating AI summaries/digests/chat responses with the AI providers configured for your plan (OpenAI, Anthropic, Groq), sending the notifications you configure, and processing payments. We do not sell personal data and do not use your content to train AI models.
Your brain is private to you and the members you explicitly invite. Our sub-processors: Vercel (hosting), Neon (database), Vercel Blob (file storage), Stripe (payments), Mailgun (email), Twilio (SMS, if enabled), Plaid (bank connections, if enabled), and the AI providers above — each receives only what is required for its function.
Two-factor authentication is mandatory on every account. Passwords are stored using strong, industry-standard hashing. Sensitive data — vault credentials, keys, and third-party connections — is encrypted at rest. All traffic is encrypted in transit, sessions are short-lived and revocable, and the credential vault requires fresh verification to open.
Content stays until you delete it or your account. Deleting your account from Settings permanently removes your data from production systems immediately; encrypted database backups age out on the backup provider's retention schedule. Operational logs are pruned automatically (30–90 days).
Export your entire brain as markdown at any time. Access, correct, or delete your data from within the app, or email us to exercise rights under GDPR/CCPA (access, portability, erasure, objection). We respond within 30 days.
We use only functional cookies: your session, and a short-lived vault-unlock token. No advertising or cross-site tracking cookies.
The Service is not directed to children under 16 and we do not knowingly collect their data.
Material changes are announced in-app or by email 14 days in advance. Privacy questions: contact the administrator. See also our Terms of Service.