2 important privacy / security questions about TheBrain version 15 #98989

https://thebrain.zendesk.com/agent/tickets/98989

Hello Michael,

Thank you for reaching out, and I appreciate how clearly you explained your concerns. These are important questions, and I want to give you clear and direct answers.

Regarding cloud sync and encryption, all data transferred between your device and TheBrain Cloud uses HTTPS encryption. Data stored on our servers is also encrypted at rest. Our infrastructure is hosted on Microsoft Azure, and access to customer data is contractually restricted to service-delivery only. Even internally, passwords are salted and hashed, and staff cannot view your Brain content. There is no scenario where your Brain data is reviewed, accessed, or used for anything beyond providing the service you signed up for. While this is not end-to-end encryption in the sense that only your device holds the encryption keys, your data is encrypted, isolated, and protected under strict access controls on Azure.

Regarding your question about AI, none of your Brain content is used to train any AI models. Prompts and responses are processed only for the duration needed to generate an answer, and are not retained for training, storage, or reuse. TheBrain has agreements in place to prevent training and long-term retention of customer data, and no third-party AI vendor is permitted to use your material for model improvement. Once a response is generated, that prompt data is cleared.

Your concerns are completely valid, especially with how many apps today are adopting AI. If you have any follow-up questions or would like clarification on anything above, I’m happy to help. Also, thank you for the valuable suggestion given during our call, will take a look into it, and into some of the bugs you mentioned in the other ticket.

Best regards,

John