SecondBrain Privacy Policy

Effective date: August 26, 2026 · Developer: Shtnegear · Contact: shtnegear@gmail.com

This policy explains what data SecondBrain collects, why we use it, and the choices available to you. SecondBrain is a personal memory and planning app for notes, people, conversations, reminders, and schedules.

1. Data we collect and why

Account and profile data. When you sign in with Apple, Google, or email, we may receive and store your name, email address, and account identifier. If you use Apple's Hide My Email feature, we receive Apple's private relay address.
Personal memory data. Notes, people, facts, reminders, and events you add are stored in our secure cloud database (EU region, Frankfurt) and may also be held locally on your device for the app's offline-first operation. This data is associated with your account.
Chat history and AI input. Conversations and text or images you submit to AI features may be stored in secure cloud account storage for continuity and may be sent to the AI providers needed to provide the requested feature.
Voice recordings. When you use voice input, your audio is sent to a transcription service. We do not retain the audio after the transcription request is complete. The resulting text may be stored as personal memory or chat data.
Google Calendar data. If you connect Google Calendar, SecondBrain may access your basic Google profile and the calendars you choose. Depending on the features you use, access can include reading events, listing calendars, creating a calendar, and creating, updating, or deleting events after you approve the action. Calendar event payloads are kept on your device and are not stored in our app database. We may send derived availability windows, without event titles or details, to AI features when needed to check scheduling conflicts.
Subscription data. Purchases are processed by the app store and subscription-management services. We receive subscription or entitlement status to unlock paid features; we do not receive or store your payment-card details.

2. How we use your data

We use data to authenticate your account, store and sync your SecondBrain content, provide search and AI features, show relevant schedule context, process subscriptions, prevent abuse, troubleshoot problems, and respond to support requests. We share data with cloud hosting, authentication, transcription, AI, app-store, and subscription-management providers only when needed to provide these services or comply with law.

3. Google API data and limited use

SecondBrain's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We use Google Calendar data only to show schedule context, identify availability or conflicts, let you choose or create a calendar, and carry out calendar actions that you explicitly approve. We do not sell Google user data, use it for advertising, or use it to determine a person's creditworthiness or lending risk.

4. Future use of aggregated, anonymized data

In the future, we may offer anonymized, aggregated insights derived from usage patterns, such as popular features or content categories, to business partners. This data will not include your name, email address, voice recordings, calendar data, individual memories, personal notes, or other directly identifiable information. Before any such program launches, we will notify you in-app and provide a clear opt-out mechanism. You may also opt out by emailing shtnegear@gmail.com.

5. What we do not sell

We do not sell your name, email address, personal memories, notes, voice recordings, calendar data, or individual chat messages. Service providers may process data on our behalf as described in this policy.

6. Data retention

Account, memory, and chat data is retained until you delete your account. Calendar access tokens and locally cached calendar data remain on your device until you disconnect Google Calendar, sign out as applicable, or remove the app's data. Voice audio is not retained by us beyond the transcription request.

7. Your rights and account deletion

You may request access to, correction of, or deletion of your personal data at any time by emailing shtnegear@gmail.com. To delete your account and associated server-side data, open Settings → Delete account inside the app. Deletion is permanent and irreversible. You can revoke Google access from your Google Account's third-party connections page or disconnect Google Calendar in SecondBrain.

8. Security

Data is encrypted in transit and protected at rest through our service providers' infrastructure. Google access tokens are stored in the device's secure storage. We follow industry-standard security practices, but no transmission or storage method is completely secure.

9. Children

SecondBrain is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us at shtnegear@gmail.com.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by another appropriate notice before taking effect. The latest version will always be available at this page.

11. Contact

For privacy questions, data requests, opt-out requests, or account deletion help, email shtnegear@gmail.com.