Privacy

Who is responsible

Profectify LLC, 256 Chapman Road STE 105-4, Newark, Delaware 19702, United States, is the data controller for the data HeyBrainey processes about you. Write to [email protected] with any question.

What we store

• Your account: name, email address, password (only as a hash) and, if you turn them on, two-factor settings and passkeys.
• Your memories: the text you and your connected AIs save, with titles, tags, projects, earlier versions, which AI saved each one and any source link.
• Connections: which AIs and agents you connected and the limits you set. Agent tokens are stored only as hashes.
• The access log: which AI or person read or changed which memory, and when.
• Public brains: what you publish, the publisher name you choose, and view and clone counts.
• Pro: your Stripe customer number and subscription status. Card details go directly to Stripe.
• Operations and security: IP addresses and technical logs for a short time, so we can keep the service running and stop abuse. Views of public brains are counted with a short-lived keyed hash of the IP address, not the address itself.

What we don't do

• We don't use your memories to train AI models, and we don't let anyone else do so.
• We don't sell your data, and there are no ads or third-party analytics on this site.
• We don't send your memories to AI services. HeyBrainey runs no generative AI. The one model we run is a small search model on our own servers.

Your connected AIs

When you connect an AI, it can read and write memories within the limits you set. Text it reads enters your chat with that AI, under its maker's own terms. Memories marked Private are never sent to any AI.

Why we may do this

• To give you HeyBrainey, which you asked for (the contract with you, GDPR Art. 6(1)(b)).
• To follow bookkeeping law when you pay (legal obligation, Art. 6(1)(c)).
• To keep the service safe and stable (our legitimate interest, Art. 6(1)(f)).

Who helps us

Hetzner Online GmbH runs the servers. Stripe handles payments. Cloudflare delivers the site quickly and safely. They may use data only to help us. Stripe and Cloudflare may process data in the United States, under the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.

How long we keep it

• Your memories stay until you delete them or your account.
• Deleting removes a memory and its history from the live database at once. Backups are kept for 14 days and then age out.
• When you delete your account, your brains, memories and connections go with it, and backups age out the same way. Records we must keep by law, such as invoices, stay for as long as the law says.
• Clones that other people made of a public brain are their copies, and stay with them.

Cookies

We use only the cookies the service needs: one that keeps you signed in and one that protects forms. No tracking cookies.

Your rights

You can see, correct, export and delete your data, and object to or limit how we use it. Much of this you can do yourself in the app. Otherwise write to us. You can also complain to your data protection authority. In Denmark that is Datatilsynet.

Changes

If we change this page in a way that matters, we tell you before the change applies.