Privacy Policy

Last updated: December 2025

1. Information We Collect

We collect the following types of information:

Account Information:

• Email address
• Display name (optional)
• Profile photo (if using Google Sign-In)

Content:

• Notes and their contents
• Attachments (images, PDFs)
• Voice recordings (for transcription)
• Tasks and tags

Usage Data:

• App usage patterns (anonymized)
• Device information
• Crash reports

2. How We Use Your Information

We use your information to:

• Provide and improve the Brainstream service
• Generate AI-powered features (summaries, briefs, suggestions)
• Sync your data across devices
• Send important service notifications
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. AI Processing

When you use AI features, your content is processed by our AI systems:

• Brain queries search across your notes using AI
• Summaries and briefs are generated from your content
• Suggestions are based on your note patterns

We do not use your personal content to train general AI models. Your notes remain private to you.

4. Data Storage and Security

Your data is stored securely using:

• Firebase Cloud Firestore (encrypted at rest with AES-256)
• Firebase Cloud Storage (for attachments, encrypted at rest)
• Industry-standard encryption in transit (TLS 1.2+)
• Access controls and authentication

We retain your data for as long as your account is active.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers (Firebase, OpenAI) to operate the service
• Law enforcement when required by law
• Successors in case of a merger or acquisition

Third-party services have their own privacy policies.

6. Your Rights

You have the right to:

• Access your personal data
• Export your notes and data
• Delete your account and all associated data
• Opt out of non-essential data collection
• Withdraw consent at any time

7. Data Retention

We retain your data:

• While your account is active
• For a reasonable period after account deletion (for backup recovery)
• As required by law

You can request complete deletion by contacting support or using the data deletion request form.

8. Children's Privacy

Brainstream is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

9. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the App or via email.