Privacy Policy
Last updated: November 4, 2026
The short version. BrainFlo has no accounts, no analytics, no ads and no servers of ours. Your notes stay on your devices and sync through your own iCloud account. We never see them.
1. Who we are
BrainFlo (“the app”) is made by an independent developer based in Canada (“we”, “us”). This policy covers the BrainFlo app for iPhone, iPad and Mac, its Safari Web Clipper and Share extensions, and this website.
We follow the privacy laws that apply where BrainFlo is available, including Canada’s PIPEDA, the EU and UK GDPR, California’s CCPA/CPRA and Brazil’s LGPD.
2. What we collect
From the app: nothing. We don’t collect, receive or store any personal data through BrainFlo. Specifically, the app has:
- No account, sign-in, name, email address or phone number.
- No analytics, telemetry or usage tracking.
- No advertising or advertising identifiers.
- No location data.
- No third-party SDKs that collect data.
That’s why the app’s privacy manifest declares no collected data.
3. What stays on your device
Everything you put into BrainFlo is stored on your device by the app and processed there:
- Notes and links. Your notes, connections, tags, attachments and imports are stored with Apple’s SwiftData and protected by your device’s encryption.
- Search and connections. Search by meaning, suggested connections and the Synapse Engine use Apple’s on-device NaturalLanguage and Core ML frameworks.
- AI actions. Summarize, Expand and Extract Insights run on your device, using Apple’s on-device models or an open-source model you choose to download.
- Voice, camera and photos. If you allow it, the app uses the microphone for voice notes and transcription, and the camera or photo library for images and text recognition. Speech recognition is required to run on your device, and text recognition uses Apple’s on-device Vision framework. Read-aloud uses Apple’s built-in voices.
- Email credentials. If you connect an email account to turn messages into notes, your password is stored in your device’s Keychain.
Deleting the app deletes this data from that device.
4. When data leaves your device
Data leaves your device only in these cases, each of which you control:
| What | What happens | Who can see it |
|---|---|---|
| iCloud sync | Your library syncs between your own devices through the private database in your iCloud account (Apple CloudKit). It’s on when you’re signed in to iCloud; you can turn off iCloud for BrainFlo in your device’s Apple Account settings. | Only you. Apple stores it under Apple’s Privacy Policy; we have no access. |
| AI model download | If you choose to download a language model, its files are fetched from Hugging Face. Like any download, this reveals your IP address and which model you picked. None of your notes are sent. | Hugging Face, under its Privacy Policy. |
| Email import | If you connect an email account, the app connects directly from your device to your mail server over an encrypted connection to read recent messages. | Your email provider. Nothing passes through us. |
| Export and sharing | You can export your library as Markdown or JSON, or share notes with the system share sheet. | Wherever you choose to send it. |
We do not run servers, so your notes are never sent to us.
5. Purchases
BrainFlo Pro is a one-time purchase sold through Apple’s App Store. Apple handles payment and shares no personal information about you with us; we only see aggregate sales figures. The app checks your purchase with Apple’s StoreKit on your device. Apple’s handling of App Store data is covered by Apple’s Privacy Policy.
If you’ve opted in to share diagnostics with app developers in your device settings, Apple may send us anonymous crash reports (device model, OS version, technical details). These never contain your notes. You can turn this off in Settings › Privacy & Security › Analytics & Improvements.
6. This website
Unlike the app, this website uses analytics to see how many people visit and which pages they read:
- Google Analytics 4, which sets cookies and processes your IP address and browser details under Google’s Privacy Policy. You can opt out with the Google Analytics opt-out add-on.
- Matomo, which we host ourselves, so its data isn’t shared with anyone else.
- Google Fonts, which supplies some of the site’s fonts and receives your IP address and basic browser details under Google’s Privacy Policy.
Neither has any connection to the app or your notes. Blocking them doesn’t affect the site.
Support messages. When you use the support form, your name, email address, topic, device, message and browser type are emailed to us. The website doesn’t save them; to limit spam it keeps a one-way hash of your IP address for up to an hour. We use your message only to reply, and delete support emails when they’re no longer needed.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or move your personal data, to object to or restrict processing, and to withdraw consent. Because we hold no app data about you, you exercise most of these directly in the app: export your library at any time, or delete notes or the app itself. For support emails or anything else, contact us and we’ll respond within 30 days.
We do not sell or share personal information, as those terms are defined under the CCPA/CPRA. You can also complain to your data protection authority, such as the Office of the Privacy Commissioner of Canada or your EU or UK supervisory authority.
8. Children
BrainFlo collects no personal information from anyone, including children.
9. Security
Your library is protected by your device’s encryption and Apple’s app sandbox, credentials are kept in the Keychain, and iCloud sync uses Apple’s encrypted infrastructure. For even stronger protection, you can turn on Advanced Data Protection for iCloud.
10. Changes to this policy
If we change this policy, we’ll update the date at the top of this page and mention significant changes in the app’s release notes.
11. Contact
Questions about privacy? Email support@lymegrove.com or use the support form.