SecondBrain ProSecondBrain Pro privacy policy
Updated 15 October 2026. Describes the current app and the optional backend setup linked from this website.
Overview
SecondBrain Pro lets you capture and retrieve personal memories. Data handling depends on your storage mode, speech recognition, AI provider and any external tools you connect. No SecondBrain account is required for local or iCloud mode.
Local Only storage
Memories are stored on this device. Selecting Local Only disables iCloud memory sync in the app. Device backups and operating-system services are controlled by your device and Apple account settings. Local storage does not mean that every optional feature is offline.
iCloud sync, included in every tier
When you enable iCloud mode, memory content and associated metadata such as tags and timestamps are synced through your personal Apple iCloud account. This transfers data off the device. Apple operates iCloud; its account, storage, security and retention settings apply. Disabling sync does not by itself delete existing cloud data. We do not promise a specific end-to-end encryption configuration for your iCloud account.
Your optional Cloudflare backend
Premium can connect to a Worker endpoint and API key that you configure. The backend described in our setup guide stores memory content and metadata in Cloudflare D1 and search embeddings in Vectorize. Workers AI can process memories for embeddings and other AI features. This is remote storage, not transient processing only. Your deployment configuration determines the actual services, logs, retention, regions and costs. There is no blanket guarantee of EU-only processing.
AI chat and consent
Apple Foundation Models process chat and selected memory context on your device when supported and available. They require iOS 26 or later, compatible Apple Intelligence hardware and enabled Apple Intelligence. With the Cloudflare AI provider selected, chat messages, selected memories and optional location context are sent over HTTPS to your configured Worker for Workers AI processing. The app requests AI consent in-app; you can revoke it in Settings. Backend memory storage is separate from AI chat processing.
Voice and speech recognition
Voice capture requires microphone and Apple speech recognition permissions. The app uses Apple's Speech framework and does not force on-device recognition. Depending on the language, device and service availability, audio may be processed by Apple's servers. We therefore do not describe voice transcription as always local or always offline. Check your device's speech recognition permissions and Apple's policy.
Optional location context
If you enable location context and grant permission, the app obtains location information and uses reverse geocoding to provide place context for AI chat. This can involve Apple location services. When cloud AI is selected, that context can also be included in requests to your backend. Location context can be disabled in Settings.
External assistants through MCP
When you connect an MCP client to your backend, that client can access memories within the permissions of the configured API key. Client tools may read, create, update or delete data. Memories included in a client conversation can be processed by its AI provider under that provider's policy and your client settings. Review those settings before connecting.
Developer access, purchases and diagnostics
The app does not include advertising trackers or a developer-operated analytics service for personal memories. We do not sell memories. Apple handles purchases and may provide diagnostics according to your Apple settings. The developer does not receive your configured backend API key or operate your personal backend as part of this app. If you email support, we receive the information you choose to send. Do not send private memories, passwords or API keys.
Retention, export and deletion
Local memories remain until you delete them or remove their local app data; copies may remain in device backups. iCloud copies follow your deletion, sync and Apple account settings. Backend memories, embeddings, logs and backups follow your configured deployment and provider retention. Deleting the app or changing a purchase tier does not automatically delete remote data. Standard and Premium provide JSON/Markdown export and backup tools. To remove backend copies, use its deletion tools and check D1, Vectorize and backup retention. Contact support if you need help identifying the relevant storage.
Service policies and your choices
You control storage mode, connected backend, AI consent, microphone permission and optional location context. Apple and Cloudflare operate their respective infrastructure. Read their current policies for service-specific details. No subscription cancellation is required for the app's one-time purchases.
Contact and policy updates
For privacy questions or requests concerning information you sent directly to support, email henry.krupp@gmail.com. The developer is Heinrich Krupp, Switzerland. Changes to data handling will be reflected on this page. Review this policy when switching storage modes or connecting a new provider.