# Privacy Policy

Last updated: January 2026

## 1. Information We Collect

We collect the following types of information:

**Account Information:**

- Email address
- Display name (optional)
- Profile photo (if using Google Sign-In)

**Content:**

- Notes and their contents
- Attachments (images, PDFs)
- Voice recordings (for transcription)
- Tasks and tags

**Usage Data:**

- App usage patterns (associated with your user account when you consent to product analytics)
- Device information
- Crash reports

## 2. How We Use Your Information

We use your information to:

- Provide and improve the Brainstream service
- Generate AI-powered features (summaries, briefs, suggestions)
- Sync your data across devices
- Send important service notifications
- Detect and prevent fraud or abuse
- Comply with legal obligations

## 3. AI Processing

When you use AI features, your content is processed by our AI systems:

- Brain queries search across your notes using AI
- Summaries and briefs are generated from your content
- Suggestions are based on your note patterns

We do not use your personal content to train general AI models. Your notes remain private to you.

## 4. Data Storage and Security

Your data is stored securely using:

- Firebase Cloud Firestore (encrypted at rest)
- Firebase Cloud Storage (for attachments)
- Industry-standard encryption in transit (TLS)
- Access controls and authentication

We retain your data while your account is active and may retain certain information for a limited period after account deletion as described in Section 7.

## 5. Data Sharing

We do not sell your personal data. We may share data with:

- Service providers (Firebase, OpenAI) to operate the service
- Law enforcement when required by law
- Successors in case of a merger or acquisition

Third-party services have their own privacy policies.

## 6. Your Rights

You have the right to:

- Access your personal data
- Export your notes and data
- Delete your account and all associated data
- Opt out of product analytics by going to Settings > Privacy and toggling off "Product Analytics"
- Withdraw consent at any time

## 7. Data Retention

We retain your data:

- While your account is active
- For a reasonable period after account deletion (for backup recovery)
- As required by law

You can request complete deletion by contacting support.

## 8. Children's Privacy

Brainstream is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

## 9. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.

## 10. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the App or via email.

## 11. Contact Us

For privacy-related questions or to exercise your rights, contact us at: [info@usebrainstream.app](mailto:info@usebrainstream.app)