Legal center
Privacy Policy
1. In short
- brainplane runs on your Mac. Your topics, files, prompts, agent sessions and receipts are stored on your Mac. If you pair a phone, a second Mac or a server, sealed copies of cards and session updates pass through our relay, which cannot read them.
- The website counts visits with Google Analytics only if you accept it in the cookie banner. Before you choose, and if you refuse, nothing loads from Google. The app has no analytics.
- We receive only what we need to run the waitlist, your account, your trial and licence, payments and support: mainly your email address and licence data.
- Your AI agents (Claude Code, Codex, Grok and others) and optional voice transcription by OpenAI run on your own accounts with those vendors. They are your vendors, under your contracts with them.
- We do not sell your data and we do not use it for advertising.
2. Who is responsible
ABJ Consulting FZ-LLC, FAMC4131, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates, licence 47023167 issued by the Ras Al Khaimah Economic Zone Authority (RAKEZ), is the controller of the personal data described here. Contact for any privacy question: hello@brainplane.app.
3. What we collect, why, on which legal basis, and for how long
The legal bases below are those of the EU and UK GDPR (article 6). Where another law applies to you, we process the same data for the same purposes under that law.
| Where | Data | Why | Legal basis | How long |
|---|---|---|---|---|
| Website, every visit | IP address, browser type, page requested, time. Processed by our host Vercel to deliver the page and protect the site | To show the site and keep it secure | Legitimate interest: running a secure site | Only as long as Vercel's service needs them, under its retention rules for our plan. We keep no visitor log of our own |
| Website, audience measurement, only if you accept it | The pages you view (address without its query string), the site that sent you (its address only), clicks on the Download button and, through Google's enhanced measurement, how far you scroll, clicks on links to other sites and form interactions. Also your device type and browser, and an approximate location that Google derives from your IP address, and a random identifier in the _ga cookies. Processed for us by Google Analytics 4. Google signals, ad personalization and data sharing are off | To count visits and downloads and see which pages and sources bring them | Consent, given in the cookie banner. You can change or withdraw it at any time with Cookie settings in the footer of any page | Google Analytics is set to keep user-level and event-level data for 14 months. Its standard aggregated reports can remain longer, and the user retention period may restart after new activity. The cookies last 13 months |
| Waitlist form | Email address, the form you used, the date, and whether you confirmed it | To invite you to early access and tell you when brainplane launches. When we send a confirmation link, we write to you only after you click it | Consent | Unconfirmed addresses: deleted after 30 days. Others: until you ask us to remove them, and at most 12 months after launch |
| Waitlist and sign-in, abuse checks | IP address, held in server memory for up to 10 minutes. For sign-in and activation, a keyed hash of the IP address or email, kept up to 24 hours. Never stored with your account | To stop spam and repeated tries | Legitimate interest: keeping the service safe | Up to 10 minutes in memory, hashes up to 24 hours |
| Account and sign-in | Email address, a 6-digit sign-in code (stored as a keyed hash, deleted after 24 hours), sign-in sessions | To let you sign in to My account and to the app | Contract | While you have an account. Sessions end after 30 days without use |
| Trial and licence | Email address, licence key (encrypted), plan and its state, dates, and per Mac: a device hash (a one-way hash computed on your Mac, which does not reveal its serial number), the app version, the last time it checked in and the Mac name you choose | To give you the trial, check your licence and limit it to 3 Macs | Contract | While you have a trial or plan, then 3 years |
| Purchase | From Stripe: your email, country, plan, amounts, tax, invoice and transaction ids and status. We never see your full card details | To deliver your plan, handle refunds and keep accounting records | Contract and legal obligation | Accounting records: 7 years, as UAE tax law requires. Other data: as for your licence |
| Service emails | Email address | Sign-in codes, trial reminders, licence keys, receipts, renewal reminders, notice of changes to terms or prices, security notices | Contract and legal obligation | As for your licence |
| Email delivery log | For each email we send: its type, the provider's message id, a keyed hash of your address, whether it was delivered, delayed, bounced or marked as spam, and whether it was opened (a 1-pixel image) or a link in it was clicked (our own counter, never on a link that carries a code or a token). Never the content of the email | To know that a code, a key or a renewal notice reached you, and to fix delivery problems | Legitimate interest: making sure service emails arrive | 12 months |
| Paired devices | Device ids, the names you give them, public keys, pairing records, push subscriptions, encrypted messages and their routing data | To pair your devices, deliver messages between them, refuse replays and send a generic alert | Contract | Messages: see section 4. Push subscriptions: 90 days, or until you unpair. Records of a second Mac or a server: 30 days after its last contact |
| Support | Your email and what you write to us | To answer you | Legitimate interest or contract | 3 years after the last message, unless a legal claim needs longer |
Where the data comes from: from you, except purchase data, which Stripe sends us when you buy, and the licence check data, which the app sends.
What happens if you do not give it: the waitlist is optional. Without an email address we cannot send a trial, a licence key or a sign-in code.
We make no automated decision that has legal or similar effects on you. With your consent, Google Analytics links website events to a browser identifier to measure visits.
4. What stays on your Mac
brainplane stores its data in its own folder in ~/Library/Application Support on your Mac: topics, decisions, Inbox cards, receipts, settings and the event log. It reads the folders you point it to. We have no access to any of this. Messages to a device you pair travel sealed through the relay (see the table below), and we cannot read them.
The brainplane background service listens only on your Mac (127.0.0.1 and a local socket). Its own code opens no connection to the internet. The agents and installers it starts at your request connect to their own vendors, as listed below and in section 5.
The brainplane app contains no analytics, tracking or crash reporting.
When the app connects to the internet, it is for these reasons only:
| When | To whom | What is sent |
|---|---|---|
| Sign-in, trial start, activation and licence checks, at launch and about once a day when online | brainplane.app (our server, hosted by Vercel) | Your email when you sign in, your licence key or session, the device hash, the app version and the Mac name you choose. No topic, file, prompt or agent data |
| Update checks | brainplane.app | The app version, in a normal download request |
| You press Install or Update for an agent | That agent vendor's official download host | A normal download request from your Mac (your IP address) |
| You press Check for updates in the skills library | The public repository that hosts the skills (for example GitHub) | A normal download request from your Mac |
| You speak to brainplane with the built-in OpenAI engine turned on | OpenAI, on your own API key | The audio clip (up to 2 minutes). brainplane drops the audio after the reply. Daily cap 30 minutes |
| You pair a phone, a second Mac or a server, and while it stays paired | brainplane's relay (run on Vercel, stored on Neon) | End-to-end encrypted cards, answers, requests and session updates. The relay sees device ids and, for each message, its sender, recipient, counter, time and size. It cannot read the content. A message is removed once the device confirms it, and at the latest after 10 minutes for a phone and 7 days for a Mac or a server |
| You click a link to an outside page | That site, in your browser | What your browser sends |
5. Your AI agents and voice: your own vendors
brainplane starts and coordinates agents that you installed and signed in to yourself, such as Claude Code (Anthropic), Codex (OpenAI) and Grok (xAI). When an agent works on a task, it sends your prompts and the files it reads to its vendor, under your account and that vendor's terms and privacy policy.
To prepare a request card, brainplane may send your request and selected topic details to the agent you chose for this, on your own account, when its quick local check cannot place the request. You can turn this off. A handoff starts only when you press Run. That data flows between your Mac and your vendor. It does not pass through us, and those vendors are not our processors.
The same applies to optional voice input. With the built-in OpenAI engine, audio goes from your Mac straight to OpenAI on your own API key. Your OpenAI key stays in the macOS Keychain on your Mac. brainplane never sends it to us. With a dictation app such as superwhisper, that app handles the audio and brainplane never hears it. With Apple speech, recognition runs on your Mac.
brainplane never reads your agent passwords, tokens or browser cookies. To link sessions and build a resume command, it reads the Codex session index, the first metadata line of recent Codex session files and Grok session summaries. It does not read their messages.
6. Who we share data with
We use these service providers. The full list with countries is in our subprocessors list.
| Provider | Role |
|---|---|
| Vercel Inc. | Hosts the website, the account and licence service, the waitlist storage and the relay for paired devices (Paris region) |
| Neon, through Vercel | Database for accounts, licences and Macs, and storage of the relay for paired devices (Frankfurt region) |
| Apple, Google, Mozilla or Microsoft, depending on your phone's browser | Delivers the generic alert to a paired phone. It receives the push request and an encrypted alert that holds no card text |
| Resend, Inc. | Sends sign-in codes, licence keys, trial reminders and receipts |
| Gandi SAS | Domain names and forwarding of email sent to our brainplane.app addresses |
| Google LLC | The mailbox where email sent to hello@brainplane.app arrives |
| Google Ireland Limited and Google LLC | Google Analytics 4, only for visitors who accept it in the cookie banner |
Stripe processes your payment as our payment provider. For some purposes, such as fraud prevention and its own legal duties, Stripe acts as an independent controller under its own privacy policy (https://stripe.com/privacy).
We share data with authorities only when the law requires it. If brainplane is sold or merged, the data passes to the new owner under this policy, and we tell you first.
7. Where your data goes
We operate from the United Arab Emirates. Vercel, Neon, Resend, Google and Stripe may process personal data in the countries listed in our subprocessors list. For each transfer that the GDPR restricts, we use the applicable adequacy decision (such as the EU-US Data Privacy Framework and its UK Extension for certified companies) or the European Commission's standard contractual clauses. Write to hello@brainplane.app to learn the safeguard used for a named provider and to get a copy where available.
8. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time; this does not affect what we did before. For Google Analytics, open Cookie settings in the footer of any page. To leave the waitlist, reply to any of our emails or write to hello@brainplane.app.
Write to hello@brainplane.app from the email address we hold. We answer within 1 month.
You can complain to the data protection authority of the country where you live or work.
If you live in California or another US state with a privacy law: we do not sell or share your personal information for cross-context behavioural advertising, and you have the rights listed above.
9. Security
We keep the data we hold to a minimum. Licence keys are stored encrypted, and sign-in codes and session tokens only as hashes. Access to our systems is limited to the people who run brainplane. Our security page describes how brainplane protects data on your Mac and how to report a vulnerability.
10. Age
brainplane is meant for adults and professionals. You must be 18 or older to buy a plan. We do not knowingly collect data from children under 16.
11. Changes
We update this policy when our processing changes. We tell customers by email before a material change applies. Each version shows its number and date, and we send earlier versions on request.