Second BrainPrivacy Policy
Second Brain is a personal read-it-later, notes and to-do app. This page explains what data the app handles and why. It is run by an individual maintainer, not a company; you can reach me at arpitv16@gmail.com.
What the app collects
- Account identifier. Your email address, used only to sign you in and link your data to you. Sign in is handled by Sign in with Apple or an email magic link. If you use Sign in with Apple and choose “Hide My Email”, we only ever see Apple’s private relay address.
- Content you create. Links you save and the title, description and preview image fetched for them; images and files you attach; notes; to-dos and their due dates; and the tags and captions you add. This is the core of the app and is stored so it’s available on all your devices.
- App settings. Small preferences such as your theme and reminder lead-time.
- Standard server logs. Our hosting providers keep short-lived technical logs (IP address, timestamp, request path) for security and reliability. We don’t use these to build a profile of you.
We do not collect your contacts, location, browsing history, or device identifiers for advertising, and there is no analytics or tracking SDK in the app.
How your data is used
Only to operate the app for you: authenticating you, storing your items, syncing them between the iPhone app, the web app and the browser extension, and — for to-dos with a due date — scheduling a reminder notification. Reminder notifications are scheduled and shown on your own device; the reminder text is not sent anywhere for that purpose.
Link previews
When you save a link, a small server function fetches that page once to read its title, description and preview image. The page URL is sent to that function to do this; the fetched preview is then stored with your saved item.
Where it’s stored and who processes it
Your data is processed by these providers on the maintainer’s behalf:
- Supabase — the database, file storage and authentication. Your content and account live here. The project is currently hosted in the Asia-Pacific (Tokyo) region.
- Apple — Sign in with Apple, if you use it.
- Vercel — hosts the web app and the small API functions (such as the link-preview fetch).
- Resend — sends the one email generated if you request beta access from the marketing site. Not used by the app itself.
We don’t sell your data or share it with anyone else. If the maintainer moves to a different infrastructure provider in future, this page will be updated.
Retention
Your content is kept until you delete it or delete your account. Deleted items and deleted accounts are removed from the live database promptly; provider backups may retain copies for a short period before rotating out.
Your choices
- Edit or delete any individual item at any time in the app.
- Delete your entire account from Settings → Account → Delete account. This permanently removes your account and all associated data — saved links, notes, to-dos, tags and attachments — and cannot be undone.
- Sign out to stop syncing on a device without deleting anything.
Security
All traffic between the app and its servers uses HTTPS. Access to the database is restricted by row-level security so each account can only read and write its own rows.
Children
Second Brain is not directed to children under 13 (or under 16 in the EEA and UK) and we do not knowingly collect their data.
Changes
If this policy changes in a material way, the “Last updated” date above will change and, where appropriate, you’ll be told in the app.
Contact
Questions or requests about your data: arpitv16@gmail.com.