Privacy Policy
Your privacy, seriously.
Last updated: June 9, 2026
1. Who we are
Brain Inbox is an independent iOS app that turns voice notes into structured tasks, ideas, and reminders. We operate the Brain Inbox app and the website thebraininbox.app. There is no company behind this yet — it is developed by Benjamin Giorgetti.
Privacy questions: privacy@thebraininbox.app
2. The core principle: your data stays on your device
Brain Inbox is local-first. Everything you capture — voice notes, tasks, ideas, reminders — is stored on your device using an encrypted on-device database. We do not run servers that store your personal data.
The only data that leaves your device is what is strictly required to process your voice note through AI (see Section 3).
3. What data leaves your device and why
When you record a voice note, two requests are made to external AI services:
| Data sent | Sent to | Purpose | Retained? |
|---|---|---|---|
| Audio file (.m4a) | OpenAI (Whisper API) | Transcription — converts speech to text | Not retained by OpenAI (API use, not training) |
| Text transcript | OpenAI (GPT-4o-mini API) | Extraction — identifies tasks, ideas, dates, people | Not retained by OpenAI (API use, not training) |
OpenAI processes this data on our behalf under a data processing agreement. Per OpenAI's API terms, data submitted via the API is not used to train their models. We send the minimum data necessary — no name, device ID, or account information is included in these requests.
4. Subscription and payments
Subscriptions and in-app purchases are handled exclusively by Apple's App Store. We do not see or store your payment information.
We use RevenueCat to manage subscription status. RevenueCat receives your Apple-assigned anonymous subscriber ID and your subscription state (active, expired, etc.). It does not receive your name, email, or payment details. See RevenueCat's Privacy Policy.
5. Google Calendar (optional)
If you choose to connect Google Calendar, Brain Inbox uses Google's OAuth 2.0 to request permission to create calendar events on your behalf. We request only the minimum scope required (calendar.events). We do not read, copy, or store your existing calendar data. You can disconnect Google Calendar at any time from the app's Settings screen.
6. What we do not collect
- We do not collect your name, email address, or any account information (the app has no accounts in its current version).
- We do not use advertising networks or track you across other apps or websites.
- We do not collect precise location data.
- We do not sell data to third parties.
- We do not use analytics SDKs. Usage events are stored locally on your device only.
7. Microphone permission
Brain Inbox requests microphone access solely to record voice notes. Audio is recorded locally and immediately sent to OpenAI for transcription. The original audio file is then deleted from our processing pipeline. You can revoke microphone permission at any time in iOS Settings → Privacy & Security → Microphone.
8. Data deletion
Because all data is stored on your device, you can delete everything at any time:
- In-app: Settings → Delete All Data — permanently removes all voice notes, tasks, ideas, and preferences from your device.
- Uninstall: Deleting the app removes all local data.
- Individual items: Swipe to delete on any item in the inbox.
There is no server-side account to delete because we do not store your data on our servers. For any questions, contact privacy@thebraininbox.app.
9. Children's privacy
Brain Inbox is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from children. If you believe a child has used the app and you have concerns, contact us immediately.
10. Your rights (GDPR, CCPA, and international users)
Because Brain Inbox does not maintain a server-side account or database with your personal data, most privacy rights are exercised directly on your device (see Section 8).
For any data processed by third-party services (OpenAI, RevenueCat) on our behalf, you can contact us at privacy@thebraininbox.app and we will coordinate accordingly. Applicable rights include: access, correction, erasure, restriction of processing, data portability, and the right to object.
California residents (CCPA): We do not sell personal information. You have the right to know what data is collected, to request deletion, and to non-discrimination for exercising these rights.
11. Security
On-device data is protected by iOS's built-in data protection (AES-256 encryption tied to your device passcode). Data in transit to OpenAI and RevenueCat uses HTTPS/TLS. No system is perfectly secure; we take commercially reasonable measures to protect your information.
12. Changes to this policy
If we make material changes — such as adding a new third-party service or changing how we process data — we will notify you via an in-app notice before the change takes effect. Continued use after the notification period constitutes acceptance.
13. Contact
For any privacy-related questions or requests:
privacy@thebraininbox.app