Privacy Policy

Last updated: 11 July 2026

braird is run by Dipeolu Innovations (“braird”, “we”, “us”, “our”). This policy explains what personal data we handle, why, and the choices you have. It covers our website at braird.app, the braird app, and anything else that links to this policy (together, the “Services”).

We are the data controller for the personal data described here. If you disagree with this policy, please don’t use the Services. Questions: hello@braird.app.

The short version

• Your notes are end-to-end encrypted. We hold the encrypted data; the keys stay with you. We cannot read your note text.
• To turn your photos into searchable text and ideas, the content is sent to AI providers (Anthropic and Microsoft Azure) in readable form. They process it to give you the feature. They do not use it to train their models. This is not a zero-retention arrangement — see “AI processing”.
• We collect the account, payment, and usage data needed to run the Services. We don’t sell your data, and we don’t run ads.
• Most of your data is stored in the EU. Some processing happens in the US (Anthropic, Stripe).
• You have rights over your data — access, correction, deletion, and more. See “Your rights”.

This summary is a guide, not the full picture. The sections below govern.

1. What braird does with your data, in plain terms

You photograph annotated book pages and handwritten notes. braird reads the text, tags it to ideas, and builds you a private, searchable index of your reading.

Two things matter for your privacy:

Your note content is end-to-end encrypted. When your captures and notes are stored and synced, they’re encrypted with keys that only you hold. We cannot decrypt or read that content.

To create the text and ideas, your content is processed by AI in readable form. Reading a photo and tagging it can’t happen on encrypted data, so at the moment of processing your image and its text are sent — readable — to our AI providers. They return the result, and it’s encrypted again. We explain exactly who sees what in “AI processing” below.

We tell you this plainly because your notes can contain personal or sensitive thoughts, and you deserve to know where they go.

2. What we collect

Information you give us

• Account data: your name or username, email address, and password (stored hashed — we never see it in readable form).
• Your content: the photos you capture, the text extracted from them, your notes, tags, and the idea index built from them. This is end-to-end encrypted; we store it but cannot read it.
• Payment data: if you subscribe, your payment is handled by Stripe. Stripe processes your card details; we receive limited billing information (such as your billing country, card brand, and the last four digits) but never your full card number.
• Support and messages: anything you send us by email or feedback.

Information we collect automatically

• Usage and device data: basic technical information such as IP address, browser and device type, operating system, and how you use the Services (pages, features, timestamps, error reports). We use this to keep the Services secure and working, and — only with your consent — for analytics. In our Android and iOS apps, analytics are narrower than this: each one is a bare count of feature use or its outcome, with no device identifier and no advertising identifier. The count is sent over your signed-in connection so we know it came from a real account, but that identity is checked and then discarded — never recorded, never passed on.

What we do not collect

• We do not collect your location. braird has no location features.
• We do not access your microphone. Capture uses your camera only.
• We do not buy or enrich your data from third-party data brokers.

Push notifications are not used today. If we add them, we’ll update this policy before turning them on.

3. Sensitive information

Your notes can contain sensitive personal information — for example religious or philosophical beliefs, political opinions, health, or details about your life. braird is built for reflective reading, so this is expected.

We handle it this way: your note content is end-to-end encrypted, so we cannot read it. To provide the reading and tagging features, that content is processed in readable form by our AI providers (see below). We do not use your content to build profiles about you, and we do not sell or share it for advertising.

If you’d rather not have particular content processed, don’t capture it.

4. How we use your data, and our legal basis

Under the EU/UK GDPR and the Swiss Federal Act on Data Protection (FADP), we rely on these bases:

We don’t use your data for advertising, and we don’t sell it.

5. AI processing

To read your photos and suggest ideas, braird uses AI providers. Here’s exactly what happens:

• Anthropic (US) transcribes your captures and helps tag them to ideas. Your image and its text are sent to Anthropic in readable form for this processing.
• Microsoft Azure AI Content Safety (EU — Germany West Central) screens content to keep the Services safe. It also sees the text in readable form.

What you should know:

• These providers process your content to provide the feature, under contract with us.
• They do not use your content to train their AI models.
• This is not a zero-retention arrangement: providers may hold data briefly under their standard terms before deletion. We don’t have an agreement that guarantees zero retention.
• Outside this AI processing step, your content stays end-to-end encrypted and unreadable to us.

6. Who we share your data with

We don’t sell your data. We share it only with the service providers (sub-processors) that help us run braird, each under a contract that limits what they can do with it:

We may also disclose data if the law requires it (for example a valid court order), to protect people’s safety, or as part of a business sale — in which case we’d tell you.

7. Where your data is stored and sent

Most of your data is stored and processed in the EU (Supabase, Azure, PostHog). Some processing happens in the US (Anthropic for AI, Stripe for payments, Resend for email) and on Cloudflare’s global edge network.

When data goes outside the EU/EEA or Switzerland, we rely on appropriate safeguards — such as the EU Standard Contractual Clauses and their Swiss equivalent — to protect it. You can ask us for details.

8. How long we keep your data

• Your account and content: for as long as your account is active. If you delete your account, we delete your content from our active systems within 30 days. Encrypted copies may persist in routine backups for a short additional period before they’re overwritten.
• Payment and tax records: kept as long as the law requires (for example accounting rules).
• Logs and analytics: kept for a limited period, then deleted or anonymised.

9. How we keep your data safe

• End-to-end encryption for your note content — the keys are yours, and we can’t read it.
• Encryption in transit, access controls, and reputable infrastructure providers.

No system is ever perfectly secure, and we can’t guarantee absolute security. But the design means that even we cannot read your notes.

10. Your rights

Depending on where you live (the EEA, UK, Switzerland, and elsewhere), you have rights over your personal data, which may include:

• Access — get a copy of your data.
• Correction — fix data that’s wrong.
• Deletion — ask us to delete your data.
• Portability — receive your data in a usable format.
• Restriction and objection — limit or object to certain processing.
• Withdraw consent — for anything based on consent (like analytics), at any time.

To exercise any of these, email hello@braird.app. We’ll respond within the time the law allows. Using your rights is free, and we won’t treat you differently for it.

You can also complain to a regulator:

• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC).
• EU/EEA: your national data protection authority.
• UK: the Information Commissioner’s Office (ICO).

11. Cookies and analytics

We use a small number of cookies and similar technologies:

• Essential ones to sign you in and keep the Services working. These are always on.
• Analytics (PostHog) to understand how braird is used. These run only if you consent.

You choose through our consent banner, and you can change your choice any time from the “Consent preferences” link in the footer. We default to off for anything non-essential.

In our Android and iOS apps there are no cookies and no consent banner. Analytics there are off until you switch them on: we ask once, and you can change your answer any time in Settings → Privacy. What those apps send is deliberately thin — counts of feature use and outcomes, for example whether a search found anything — never your note content, never what you searched for, and no device or advertising identifier. They carry no third-party analytics software: each count goes to our own servers, which check that it came from a signed-in account, discard that identity without recording it, and pass on only the count to PostHog in the EU.

12. Children

braird isn’t intended for children. You must be at least 16 to use braird; if you are under 16, please don’t use the Services without a parent or guardian’s consent, and only where your local law allows it at your age. If we learn we’ve collected a child’s data without the right consent, we’ll delete it.

13. Changes to this policy

We may update this policy. We’ll change the “Last updated” date, and for significant changes we’ll give you clearer notice. Please check back from time to time.

14. Contact us

Dipeolu Innovations 14 Edikerstrasse, Dürnten, Zürich 8635, Switzerland Email: hello@braird.app Phone: +41 76 525 21 03