Privacy Policy
Last updated 22 October 2026 The short version. Prjct Brain has no server, no accounts and no tracking. Your notes and everything the app keeps stay on your iPhone or in your own iCloud Drive. When you use an AI or online feature, what that feature needs goes straight from your phone to the service you set up, with your own key. We never receive any of it. 1. Who we are Prjct Brain is made by Edwin Gonzalez. Questions about this policy: edwingmultimedia@gmail.com. 2. What stays on your device Your notes, chats, the companion's memory, the Brain (its knowledge graph), its persona files and the usage log are plain files on your iPhone, or in your own iCloud Drive when you turn iCloud on. iCloud is run by Apple under Apple's terms. API keys, sign-in tokens and your PIN are kept in the Keychain of your iPhone, iPad or Mac, on that device only. They are never backed up or synced. Settings, caches and the app's own bookkeeping stay on the device. 3. What leaves your device, and to whom Only when you use a feature, and only to services you set up. Each service handles what it receives under its own privacy policy. Anthropic (Claude), with your own Anthropic key: your messages and what a reply needs. That can include notes (never notes you tag private), the companion's memory and Brain entries, and data from features you turn on: calendar, tasks, contacts, mail, location and Health. Files you attach go too. Anthropic can also receive documents through its Files API and code execution when you ask for a report, batched requests for background work (such as filing what you said into the Brain), and the Brain skills you write, which it keeps in your own Anthropic account so the companion can use them. The app asks for your agreement before anything goes to an AI service, and you can withdraw it any time in Settings → AI → Sending to AI. Image and video services (Higgsfield, fal.ai, OpenRouter), with your own keys: the prompts and photos you use for pictures and videos. Google, when you sign in: Calendar, Tasks, Gmail (reading and drafts; the app never sends mail), Drive (files the app creates, and files you ask it to read), Contacts (read only), and for the optional business features Google Analytics and Search Console. For the optional store features, the product list you choose for the wayfinder Doc (product names, brands, sizes, prices, SKUs and product photo links) is written to a Google Doc in your Drive. Web search and lookups: Exa and Firecrawl (search words and page addresses, with your own keys), Wikipedia, Open-Meteo (a place for the weather) and Frankfurter (currency rates). Apple: iCloud Drive (when on), Apple Maps (a destination and your location, for travel times), speech recognition (on the device by default; on Apple's servers only if you turn that off), HealthKit (read only, off until you turn it on) and local notifications. Connectors (MCP servers) you add: the requests you approve. Optional business features: Instagram (Meta), with a token you paste; Dutchie (read only), with your key. App updates come from Expo's update service, which receives the app's version, its update channel and the device's platform, not your content. 4. Google user data When you connect a Google account, Prjct Brain asks for these permissions, each for the feature named: Google Calendar (events): show your schedule, and add or change events when you ask. Google Tasks: show your tasks, and add, change or complete them when you ask. Gmail (read, and compose drafts): show and summarise your mail, and write drafts that you review and send yourself. The app never sends, deletes or archives mail. Google Drive (files the app creates, and read only): save files the app makes to its own "Prjct Brain" folder, and read files you ask about. The app never changes or deletes your existing files. Google Contacts (read only, including "Other contacts"): find a person's name and email address when you ask, for example to invite them to an event. Google Analytics and Search Console (read only, optional business features): show your website's figures. How it's used. Google data is used only to provide these features to you, inside the app. When you ask for something that needs it, such as a summary of today's mail, the app sends only what that request needs to Anthropic (Claude), with your own key, solely to answer you. Google data goes to any other service only when you approve it in the app first. Where it's kept. On your device, and in your own iCloud Drive when you ask the app to save something into your notes. The developer never receives your Google data, and no person reads it: the app has no server. AI training. Prjct Brain does not use Google user data to develop, improve or train generalised AI or machine-learning models, and does not allow it to be used for that. Never used for advertising, never sold, and never used to judge creditworthiness or for lending. Removing access. Disconnect Google in Settings, or at myaccount.google.com/permissions. To remove Google data the app kept, delete the app (and the Prjct Brain folder in iCloud Drive, if you used it). Prjct Brain's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. 5. What we never do No analytics, ads or tracking of any kind. No selling or sharing of your data. No data sent to us: we have no server that could receive it. 6. Your choices Each phone feature (calendar, contacts, location, photos, Health and so on) has its own switch in Settings → Phone access, on top of the iOS permission. Sending to AI can be turned off in Settings → AI. Any key can be switched off or removed in Settings. Google can be disconnected in Settings, and its access revoked at myaccount.google.com/permissions. 7. Children Prjct Brain is not meant for children under 13. 8. Deleting your data Delete the app to remove everything kept on the device. If you used iCloud, delete the Prjct Brain folder in iCloud Drive. Remove your keys in Settings, and disconnect Google. Services you used keep what they received under their own policies; ask them to delete it there. 9. Security Secrets stay in the device's Keychain, the app can be locked with Face ID and a PIN, and every connection uses HTTPS (a server of your own on your home network may use plain HTTP). 10. Changes When this policy changes, this page and its date change with it. 11. Contact edwingmultimedia@gmail.com