Brainy Privacy Policy
Brainy is a voice assistant that remembers things for you: reminders, notes, codes, birthdays and meetings. This page explains exactly what the app touches, where it goes and what never leaves your phone. There is no account, no sign-up, no advertising and no analytics SDK in Brainy.
The short version
- Everything Brainy remembers is stored encrypted on your phone. It is not uploaded to us and not synced anywhere.
- When you talk to Brainy, take a photo for it to read, or ask it to write up a meeting, that audio, image or recording is sent to Google's Gemini API to be understood, and the answer comes back. We do not keep it.
- Calendar, contacts, camera and microphone are only used when you turn them on, and only for the feature you turned on.
- You can delete everything at any time from Settings, or by deleting the app.
What Brainy processes, and why
Your voice. When you tap or hold the orb, microphone audio is streamed to Google's Gemini API through Brainy's own server so Brainy can understand and answer you. Brainy's server never stores the audio, the transcript or the reply; it only records that a request happened and how long it took. Google processes the data under the Gemini API terms.
What you ask it to remember. Reminders, notes, passwords or codes you dictate, and the text of what was said in a conversation, are saved in an encrypted file on your phone. The encryption key lives in your phone's Keychain. Nothing is sent to us.
Calendar. If you connect your calendar, Brainy reads upcoming events from the calendars on your phone to remind you about meetings and to tell you what your day looks like. If you also sign in with Google, Brainy reads events from your Google Calendar and, only when you ask it to, creates, moves or cancels a meeting on your behalf. The Google sign-in token is stored in your phone's Keychain and is never sent to our server. Brainy asks only for the Google Calendar scope. Brainy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contacts. If you connect contacts, Brainy reads names and birthdays so it can offer to remind you about the people you choose. Only the people you tick are kept, and only their name and birthday. Contact names are also used, on your phone, to find an email address when you ask Brainy to invite someone to a meeting.
Camera. When you point the camera at something, the picture is sent to Google's Gemini API to read what is on it, for example a wifi sticker or a receipt. The photo itself is not saved by Brainy and is not kept by our server.
Meeting notes. If you ask Brainy to take notes while you talk, the recording is sent to Google's Gemini API to be transcribed and summarised. Everyone in the room should know they are being recorded; Brainy shows a notice for this. The recording is discarded after the write-up unless you keep it.
Song recognition. When Brainy hears music, a short audio fingerprint is sent to Apple's ShazamKit service to name the song. Apple's privacy policy applies.
Device check. To stop abuse of our server, the app asks Apple's DeviceCheck service for a token that proves it runs on a genuine Apple device. This token contains no information about you.
Feedback. If you send feedback from Settings, the message you type is delivered to our team chat. Send only what you want us to read.
Notifications. Reminders are scheduled locally on your phone. Brainy does not use push notifications from a server.
What we do not do
- We do not sell, share or rent your data.
- We do not use advertising or tracking SDKs, and we do not build advertising profiles.
- We do not keep copies of your voice, photos, memories, calendar or contacts on our server.
- We do not use your data to train AI models. Google's handling of API traffic is governed by its own terms linked above.
Where data lives
Your memories, settings and connection tokens stay on your device, protected by iOS encryption and the Keychain. Brainy's server runs on Vercel and only relays requests to Google; it keeps counts and timings in its logs, not content. Google's Gemini API processes requests in Google's data centres.
Deleting your data
Settings → Forget everything removes every memory. Disconnecting Google in Settings removes the Google tokens from your phone. Deleting the app removes all of it. Because nothing is stored on our server, there is nothing further to delete on our side. To revoke Brainy's access to your Google account at any time, visit myaccount.google.com/permissions.
Children
Brainy is not directed at children under 13 and we do not knowingly process their data.
Changes
If this policy changes, the new version will appear at this address with a new effective date.
Contact
Bondo Studio Pte. Ltd.
sebastian@bondocreative.com