Privacy Policy

1. Introduction

Braindump Note ("we", "our", or "the Application") is an open, self-hosted note management and audio transcript indexing service designed to capture, organize, and auto-tag quick thoughts, smartwatch notes, and webhook entries. We are committed to transparency and safeguarding the personal data and privacy of our users.

2. Information We Collect

We only process information necessary to provide the note-taking and backup services:

• Note Content & Metadata: Text entries, transcripts, tags, categories, and creation timestamps you input or send via authorized webhooks.
• Authentication Data: The email address specified in your configuration, used exclusively for sending secure passwordless magic login links.
• OAuth Tokens: If you connect Google Drive for automated database backups, OAuth access and refresh tokens are stored securely in your private server environment configuration.

3. Google API Services & Google Drive User Data Policy

Braindump Note's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Purpose of Access: We request access to Google Drive solely to upload compressed, encrypted database backups to your designated Google Drive folder.
• Limited Scope: We only access, create, or write files necessary for the backup job. We do not access, read, or catalog any unrelated files or folders in your Google Drive.
• No Third-Party Sharing: Google user data and files are never transferred, sold, or disclosed to third parties, external advertisers, data brokers, or used for training AI/ML models.
• Token Storage: All OAuth credentials and refresh tokens reside strictly in your private server environment and are communicated only with Google's official authorization servers.

4. Data Storage & Security

Your notes are stored on your local server database (SQLite engine). We implement industry-standard security safeguards including CSRF token verification, HMAC signed login authentication, and encrypted communications over HTTPS.

5. Data Retention & Deletion

You retain 100% ownership of your data at all times. You may export your complete note history in standard CSV or Markdown format at any time. When you delete a note, category, or database record, it is immediately deleted from the active database. To revoke Google Drive access, you can disconnect the integration or revoke access through your Google Account Security Settings at any time.

6. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact the administrator: