BrainFlow Privacy Policy

Internal Testing Version

Last Updated: [Date]

Overview

BrainFlow is designed with privacy as our core principle. We believe your thoughts, ideas, and voice recordings belong to you alone. This privacy policy explains how we protect your data and what minimal information we collect to provide our service.

Our Privacy-First Approach

No Server Storage: We do not store your audio recordings, transcripts, or personal content on our servers. All your data remains on your device under your complete control.

Processing Only: When you use our AI features, your audio is sent to our processing partners (AssemblyAI and Claude AI) solely for transcription and refinement. This data is processed in-memory and immediately deleted after processing is complete.

Local Storage: All your recordings, transcripts, and personal settings are stored locally on your device using secure storage methods.

Information We Collect

Information We Do NOT Collect

• Your voice recordings (stored locally only)

• Your transcripts or refined content

• Personal identification information (email, name, etc.)

• Content analytics or speech pattern analysis

• Location data

• Contact lists or device information beyond basic authentication

Minimal Information We Do Collect

Device Authentication Data

• A stable device identifier for subscription management

• iOS: Vendor identifier

• Android: Android ID

• This allows us to maintain your subscription status without requiring personal accounts

Basic Usage Metrics

• App usage statistics (number of recordings, feature usage)

• Crash reports and error logs (containing no personal content)

• Subscription status and billing information via Superwall

Optional Profile Information

• User name (if you choose to provide it for personalisation)

• Default settings and preferences

• All stored locally on your device

How We Process Your Data

Voice Recording and Transcription

1. You record audio on your device

2. Audio is temporarily sent to AssemblyAI for transcription

3. Transcript is sent to Claude AI (via BuildShip) for refinement

4. Processed content is returned to your device

5. All temporary data is immediately deleted from processing servers

Third-Party Services

We use the following services for processing only:

AssemblyAI: Converts your voice recordings to text. Data is processed and immediately deleted.

Claude AI (via BuildShip): Refines and formats your transcripts. Data is processed in-memory only.

Superwall: Manages subscription paywalls and billing. Handles subscription status only.

Data Security

• All communication uses HTTPS encryption

• Local data is stored using secure storage methods

• Webhook authentication prevents unauthorised access

• No persistent storage of user content on external servers

• Regular security audits of our dependencies

Your Rights and Control

Complete Data Ownership: All your recordings and content belong to you.

Export Capabilities: You can export your data at any time through our built-in export features.

Deletion: You can delete any recording or content from your device at any time.

No Vendor Lock-in: Your data remains accessible even if you stop using BrainFlow.

Data Sharing

We do not sell, trade, or share your personal information with third parties, except:

• Processing partners (AssemblyAI, Claude AI) for service delivery only

• As required by law or legal process

• With your explicit consent

Changes to This Policy

We may update this privacy policy as we develop new features. We will notify users of significant changes through the app.

Contact Information

For privacy-related questions or concerns during testing, please contact: [Internal Testing Contact]

Compliance

This policy is designed to comply with:

• General Data Protection Regulation (GDPR)

• California Consumer Privacy Act (CCPA)

• Other applicable privacy regulations

This is an internal testing version and subject to revision before public release.