Privacy Policy

About this policy

BrainCache is a personal productivity service operated independently by an individual in New York State, USA, without an LLC or corporation. This policy explains how information is handled when you use its website, Memories, tasks, scheduling, and optional integrations. BrainCache is intended for adults aged 18 or older. See the Terms of Service for information about using the service.

Information collected and stored

• Account information: your email address, authentication identifiers, and account/session information. Supabase handles email/password authentication, verification, and password resets. BrainCache does not request your Google password.
• Your content: Memory titles and notes, images and image URLs, Categories, tags, task and review dates, recurrence settings, completion history, and Schedule Events.
• Scheduling information: timezone, availability, date overrides, sharing-link settings, and information visitors submit when booking or creating an event through a permitted link.
• Billing information: Stripe customer and subscription identifiers, email, plan and billing status, and billing-event records. Stripe handles payment details through its checkout and billing portal.
• Feedback: messages, subjects, feedback type, account association, and whether you permit follow-up contact.
• Operational information: authentication cookies, temporary OAuth state, synchronization timestamps and error status, and application/server error logs. Hosting and other providers may process request information such as IP addresses and browser information.

How information is used

Information supports signing in, saving and finding content, task and review workflows, displaying schedules, booking and trusted calendar links you enable, optional Google synchronization, subscription management, feedback, and protection against abuse. You retain ownership of your content; BrainCache uses only the permissions needed to store, process, synchronize, and display it for the features you authorize.

BrainCache does not sell personal information or share it with advertisers for targeted advertising. Service providers receive information necessary to deliver the features you use, such as authentication, storage, billing, and optional calendar integration.

Google Calendar access and use

Connecting Google Calendar is optional and separate from signing in to BrainCache. Consent requests permission to read your calendar list and events, and to create, change, and delete events on calendars you own. These permissions are broader than the current feature: BrainCache selects your primary calendar and writes only Schedule Events you explicitly link to Google. Older read-only connections need renewed consent before writes are available.

BrainCache stores your connected account and calendar details, permissions, encrypted authorization credentials and their expiry, sync status, and a local copy of event information. That information includes titles, descriptions, dates and times, timezone, cancellation and recurring-event details, event links, and identifiers used to keep events up to date. Google events can appear on your Dashboard and Schedule. Anyone holding a Trusted Calendar link can see the Google event details it makes available. Public Booking links show open slots without private event details; imported Google events currently do not block those slots.

The initial sync reads events from 30 days before to 365 days after the sync, then later syncs check for changes. This date range does not determine when stored data is deleted. Opening Schedule can trigger a refresh, and Sync Now requests one manually. Google events do not automatically become Memories, and Memory tasks or review dates are not automatically sent to Google. For events you explicitly link, BrainCache sends the title, description, start/end times, and identifying information needed to create, update, or delete the corresponding Google event.

BrainCache commits to the Limited Use rules in the Google API Services User Data Policy and the Google Workspace user data policy. Google Calendar data is used only for integration features you authorize. It is not sold or used for advertising, credit decisions, or training AI models.

Transfers are limited to features you authorize and processing necessary to provide them, security, legal obligations, or a business transfer with your prior explicit consent, within Google's permitted exceptions. Human access requires your documented permission for specific data, a necessary security or legal purpose, or permitted aggregated and anonymized internal operations.

Storage, providers, and sharing choices

• Supabase handles your account email, authentication credentials and sessions, verification/reset emails, and uploaded Memory images.
• Application content and account-associated records are stored in a PostgreSQL database.
• Stripe receives your account email and account identifier for customer/subscription association, plus payment information you enter in its checkout or portal. BrainCache stores billing identifiers and status, rather than collecting payment-card details in its own forms.
• Vercel hosts the website and processes requests and information used to protect the service from abuse.
• Google processes your OAuth authorization and calendar API requests; explicitly linked event data is sent to Google as described above.

Providers process information necessary for these functions under applicable arrangements and their own policies. Contact support if you have questions about service providers or information processing.

Memories and Categories are account-scoped. Uploaded Memory images use public storage URLs: anyone with the URL may access the image without signing in. Avoid uploading confidential images. Booking and Trusted Calendar links are bearer links: recipients can forward them. Trusted links permit the calendar access and event creation configured by the owner. Disable a sharing link to stop future access through that link; this cannot recall information already copied by a recipient.

Cookies and privacy choices

Cookies keep you signed in and help securely connect your Google Calendar. Blocking these cookies can prevent sign-in or connection. You choose what content to save, whether to connect Google, which events to link, and whether to enable or disable calendar-sharing links.

Disconnecting Google Calendar

Use Disconnect in Schedule → Google Calendar settings. BrainCache attempts to revoke its Google authorization, then removes its stored connection credentials and imported Google events even if revocation fails. Your BrainCache events and information linking them to Google remain; disconnecting does not delete events already created in Google. You can also revoke access in Google Account connections. Revoking access there does not immediately delete records in BrainCache. Reconnecting the same Google account may restore linked-event synchronization.

Retention and deletion requests

User data is generally retained until you request deletion or remove it through available controls, subject to legal, billing, security, and other applicable retention requirements. BrainCache does not currently automatically delete accounts for inactivity. Any future inactivity-based deletion policy will be announced in advance; no inactivity deadline applies under this policy.

You can request account or data deletion, or information about your personal data, by emailing support@braincache.dev. Requests must be verified before deletion. BrainCache does not currently offer self-service account deletion. Contact support to discuss the scope of your request, available options, and any records that must be retained. This policy does not promise a specific processing time.

Removing an image and deleting a Memory are separate actions. Deleting a Memory does not necessarily remove its uploaded image. Logs, backups, legally retained records, and copies already held by recipients or providers may require different handling; immediate complete erasure is not guaranteed. Removing data in BrainCache does not automatically remove events held in Google Calendar or cancel your Stripe subscription.

Access and security

BrainCache checks account identity and restricts access to account-owned records. Google authorization credentials are encrypted before storage, and connection requests include checks designed to prevent unauthorized linking. These measures do not make public image URLs private, and no online service can guarantee complete security. Keep your credentials and sharing links secure.

Policy updates

Material changes will be communicated by email or a prominent in-app notice before taking effect. Minor changes may be reflected in the policy text and updated dates. Contact support if you have questions about a change or how it affects your information.

Contact

BrainCache is operated independently by an individual in New York State, USA, and is not an LLC or corporation. Contact support@braincache.dev for support, privacy questions, information about your personal data, or account and data deletion requests. Signed-in users can also submit Feedback.