What we protect, and where the limits are

How your memories are stored

Memories are stored as readable text in our database. Search needs that: to find a memory by its words or meaning, the server has to be able to read it. So HeyBrainey does not offer end-to-end encryption, and we don't claim to. The people who run the service could technically read stored text. We don't look at memories unless you ask us to in a support case, or the law requires it.

Don't save passwords, card numbers or other secrets in a memory. Mark anything sensitive as Private, and remember that Private keeps it from AIs, not from the database.

What we do

• Encrypted in transit. Every connection to HeyBrainey uses HTTPS.
• Separated by person. Every lookup goes through one set of access rules. Anything outside your scope reads as not found.
• Private stays from machines. Private memories are hidden from every AI, agent and token, and no machine can change that setting.
• Scoped connections. Each AI connects through sign-in with its own connection, which can be read-only or limited to one brain or project.
• An access log. Reads and writes are recorded, so you can see which AI did what.
• Tokens stored as hashes. Tokens for agents are shown once and stored only as hashes.
• Real deletion. Deleting a memory removes it and its history from the live database at once. Backups are kept for 14 days and then age out.
• No training. We never use your memories to train AI models.
• No trackers. No third-party analytics or ad scripts on this site.

The honest limits

• MCP needs you to ask. Your AI saves when you tell it to. HeyBrainey does not capture anything automatically.
• What an AI reads, its maker can process. When a connected AI reads a memory, that text enters your chat, under that AI's own terms. Use limits and Private for what should not go there.
• An AI can be fooled. We label saved text as data, not instructions, and clones are marked as someone else's. That lowers the risk that a saved text steers your AI, but your AI decides what it does. Be careful with public brains from people you don't know.
• Public means public. A published collection can be read by anyone with the link, and clones made by others stay with them after you unpublish.

Found a problem?

Write to [email protected]. Please give us a chance to fix it before you publish details.