Skip to content
SecBrain
Start freeDownload
Menu
Privacy

Privacy, in detail.

This page is the long version. If you want the short version: your library is cached on each device and synced through our servers, AI runs in the cloud through our server, and we never sell or train on your library.

The short version

Every device keeps a full local copy of your library; the cloud copy keeps them in step and wins when edits conflict. AI runs in the cloud through our server, on SecBrain’s own provider accounts (you can’t add your own API key). We never train on your data. We don’t run ads. The apps use PostHog product analytics, with an opt-out in each app’s settings; this site asks before it sets any analytics cookie, and the Chrome extension uses none. You can export everything, any time, on any plan.

Read the full detail below ↓
Data map

A map of your data.

For each main kind of data SecBrain stores, we tell you where it sits and how it’s protected.

Memo text and metadata
Where it livesCached on each device (IndexedDB on web/desktop, GRDB on iOS). Synced to a Postgres database we operate, which keeps your devices in step.
ProtectionAt rest: Postgres encryption (provider-managed). In transit: TLS. Not currently end-to-end encrypted in the cloud copy; see “What isn’t end-to-end yet” below.
Attachments
Where it livesStored in our cloud storage (Cloudflare R2), within your plan’s storage limit.
ProtectionIn transit: TLS. Our storage service serves your files only to your own signed-in account.
Forwarded emails
Where it livesMail you send to your personal capture address arrives through Cloudflare Email Routing and is saved as a memo, with its attachments in our cloud storage. Our server summarises it with a cloud AI provider when it arrives.
ProtectionStored and protected like any other memo and attachment.
Shared memo links
Where it livesCreated only when you share a memo from the web or desktop app. Anyone with the link can read that memo’s title, text and source link. The link does not expire; it stops working when you delete the memo.
ProtectionThe link carries a 256-bit random token. The apps have no button to revoke a link yet.
Embeddings (vector representations of your memos)
Where it livesStored on your device: IndexedDB on web and desktop, GRDB on iOS. Cloud embeddings are generated by Google’s gemini-embedding-001 through our server. We do not store embeddings server-side.
ProtectionLocal file system permissions only.
Search index
Where it livesLocal: a full-text index on your device (IndexedDB on web and desktop, SQLite FTS5 on iOS). Also a server-side full-text index over memo titles and bodies in Postgres, which the Chrome extension’s chat searches.
ProtectionLocal: your device’s storage permissions. Server: row-level security scopes the app’s queries to your account.
OAuth tokens (Google Drive and YouTube, Notion)
Where it livesEncrypted by our server with AES-GCM and a server-held key, stored in Postgres. The Notion token is decrypted and handed to your browser, which calls Notion directly. Our server uses the Google token to import from Drive and YouTube.
ProtectionEncrypted at rest. Not end-to-end encrypted.
Account email, plan, billing record
Where it livesPostgres + our payment provider (Paddle, or Apple for iOS purchases). The payment provider holds your payment method; we hold your subscription state. If you sign in with Google or Apple, we also hold the profile details that provider shares at sign-in.
ProtectionPostgres encryption + the payment provider’s PCI infrastructure.
AI prompts and responses (cloud AI)
Where it livesSent from your device to our server (a Supabase Edge Function), which calls the provider on SecBrain’s own accounts with Anthropic (Claude), OpenAI and Google (Gemini) and returns the response. This includes the automatic summaries, tags and titles for captured items and image descriptions: the memo text, captured page text or image goes to the provider. For forwarded-email summaries and recap digests, our server reads the content from your synced memos instead. You can’t add your own API key. Our usage log records provider, operation and token count, not the text.
ProtectionTLS to our server and on to the provider. Subject to the provider’s terms.
Telemetry / analytics
Where it livesWeb and desktop apps: PostHog product analytics. iOS app: PostHog analytics and crash reports. Each app has an opt-out: Settings → Privacy on web and desktop, Settings → Data & Advanced on iOS. The Chrome extension: none. This site: the two rows below.
ProtectionUsed to see how the product behaves and to catch errors. No advertising trackers.
Website analytics
Where it livesGoogle Analytics 4, through Cloudflare Zaraz on secbrain.app, only if you accept analytics cookies in the banner on your first visit. Zaraz keeps the visitor and session ids in its own cookies (cfz_google-analytics_v4 and cfzs_google-analytics_v4); Google sets no cookie itself. If you decline, Google receives only cookieless consent-mode pings. Google processes the data under its API terms.
ProtectionNothing is set until you choose. Change your choice any time with “Cookie settings” in the footer.
Attribution cookie
Where it livesA first-party cookie, sb_attr, on secbrain.app, only if you accept cookies in the banner. It records which campaign or link brought you here, so we can see what works. Lasts 90 days. We send it to no one; app.secbrain.app reads it when you sign up.
ProtectionSet only with your consent and removed when you withdraw it. Readable only by secbrain.app and its subdomains.
AI

Cloud AI, through our server.

SecBrain sends AI features (summaries, tags, embeddings, AI chat, weekly insights, and slash-command rewrites) through our server to a cloud provider, so they work with no setup: nothing to install, no keys to manage.

Cloud AI runs on SecBrain’s own accounts with Anthropic (Claude), OpenAI and Google (Gemini), within your plan’s limits. You can’t add your own API key. When a cloud AI feature runs:

  1. 01You use an AI feature, or capture something the app enriches automatically: summaries, tags and titles for captured items, image descriptions.
  2. 02The app sends the content the feature needs (memo text, captured page text or an image) over HTTPS to our server. For forwarded-email summaries and recap digests, our server reads it from your synced memos instead.
  3. 03Our server calls the provider (Anthropic Claude, OpenAI or Google Gemini) on SecBrain’s own account, within your plan’s limits.
  4. 04The response comes back through our server to your device, or is saved to your account for server-run features. Our usage log records provider, operation and token count, not your prompt or response.
Your device
Full local copy on every device. Capture, search and edit work offline.
Sync when online
Automatic while you’re signed in.
SecBrain cloud
Keeps your devices in step. Wins when edits conflict.
Not yet

What isn’t end-to-end yet.

  • Cloud-side memo encryption (E2EE).

    Today, your memo content in Postgres is protected by the database’s at-rest encryption and by our access controls, but it is not encrypted with a key only you hold. We are considering client-side memo encryption. It’s marked Considered on the Roadmap. If it ships, the cloud copy of your memos will be opaque to us.

  • End-to-end encrypted cloud search (opt-in).

    Once memos are E2EE, the cloud will not be able to run full-text search on them. That’s the trade-off. We’re considering an opt-in model where you can choose: keep cloud search and accept that the cloud sees plaintext, or take E2EE and accept that search runs only locally, on your device’s full-text index.

  • Cross-source full-text search.

    Today, a local full-text index covers your memos on your device, and a server-side index covers them for the Chrome extension. One query across imported sources, such as YouTube transcripts, is under consideration.

Commitments

Some commitments we hold ourselves to.

  • We will never train a model on your data. Cloud AI providers process your requests under their API terms.
  • We will never sell your data, your usage patterns, or aggregate insights derived from them.
  • We will never run third-party advertising in the product.
  • We will never lock export behind a paid plan. Export is always available, in plain JSON and Markdown (Markdown on iOS), regardless of subscription state.
  • We will never silently change these commitments. If we ever revise this page in a way that loosens any of the above, we’ll send a notice to every account 30 days before it takes effect.
Your rights

What you can do, any time.

Export everything.

Settings → Data Management on web and desktop: JSON for fidelity, Markdown for portability. Settings → Data & Advanced → Import & Export on iOS: Markdown. No subscription required.

Delete your account.

Settings → Delete account on web and desktop, Settings → Account on iOS. We delete your account and everything synced to it, including memos, OAuth tokens and share links, and wipe the device you delete from. Stored attachments are purged at the same time on a best-effort basis. Embeddings live only on your devices; other devices keep their local copy until you remove the app or clear its storage. Deletion runs when you confirm; there is no grace period. Deleting your account cancels a plan bought on our website or web app immediately. The rest of the period isn’t refunded automatically; the 30-day guarantee in our Refund Policy still applies. A plan bought in the iOS app is billed by Apple until you cancel it in your Apple subscription settings. Our payment provider keeps billing records for the period tax law requires (typically 7 years), and we cannot shorten that window.

Request a data report (GDPR / CCPA).

Email privacy@secbrain.app. We respond within 30 days. We don’t charge a fee.

Legal
Read the Data Processing Addendum (DPA) for business users →Coming soon

Last updated: October 2026.

Contact

Talk to us about privacy.

Download SecBrain
Read the manifesto →