Privacy Policy

The short version

Who we are

Agent Brain (the iPhone app, the web app and the service behind them) is operated by Worthy Software LLC ("we", "us"). This policy explains what we collect, why, who processes it, and the choices you have. Contact us at support@tryagentbrain.com.

What we collect

Account information

• Email address, if you sign in with an email code. Sign-in codes are stored only as hashes, expire after 10 minutes and allow a limited number of attempts.
• Sign in with Apple: a stable Apple user identifier, and your name and email (which may be an Apple private relay address) if you choose to share them.
• Signed-in devices: for each session, the device name and platform you sign in from, when it was created and last used. Session tokens are stored only as hashes and expire after 180 days without use.

What you save

• Screenshots, photos, images, PDFs and other files you capture or share, kept as originals.
• Links, page titles, descriptions and selected text you share, plus the public page content we fetch for a shared link so it can be understood.
• Voice notes (audio) and their transcripts.
• Emails you forward to your private capture address: sender, subject, date, body text and attachment names. We never connect to or read your inbox; only mail sent to that address is received.
• Text recognized in images on your iPhone, and the sensitivity flags detected on your iPhone (for example "one-time code" or "payment card").
• What the service works out about each capture: title, summary, category, topics, people, places, dates and prices mentioned, why you probably saved it, whether something still needs doing, and how long it's likely to matter.
• Your corrections, notes, projects and settings, and an activity history for each capture (including actions taken by agents you've connected).
• The time zone of your device, so times and daily recaps match your local time.

Screenshots and your photo library

If you allow Photos access, the app reads only items in your Screenshots album that were taken after you turned automatic capture on (with a short look-back on first setup). Your other photos are never uploaded. Photos you pick with the camera or share yourself are uploaded because you chose to save them. You can pause or turn off automatic capture in Settings.

Agent connections

For each AI app you connect: its name, the permissions you gave it, and when it was created and last used. Connection links and tokens are stored only as hashes. For apps that connect by signing in, the authorization grant is stored so the app can keep access until you revoke it.

What we don't collect

We don't use advertising or analytics SDKs, don't track you across apps or websites, and don't collect your location, contacts or health data. Searches are run against your data and not stored as a history.

How we use it

We use your information only to provide Agent Brain to you:

• to store your captures and make them searchable;
• to work out what each capture is and why you saved it, link related captures, and build your daily and weekly recaps;
• to give the AI agents you connect the access you've granted;
• to sign you in, keep your account secure, and send sign-in codes;
• to fix problems and keep the service running.

We don't sell or rent your information, use it for advertising, or share it with data brokers.

AI processing and your consent

Agent Brain understands your captures in two ways:

• On your iPhone. Text in images is recognized with Apple's on-device Vision framework, and voice notes are transcribed with on-device speech recognition when your iPhone supports your language. The app also checks for sensitive details (one-time codes, passwords and keys, card numbers, bank accounts, government IDs, medical details, street addresses, private messages, information about children) before anything is uploaded.
• Cloud analysis. When cloud analysis is on, each capture is sent to Anthropic's Claude model to be understood. This can include the original image or PDF, the recognized text, the text or link you shared, and context that helps it understand you: your project names, a short list of your recent captures, and corrections you've made. Under Anthropic's commercial terms, data sent through its API is not used to train its models.

We ask for your permission to use cloud analysis the first time you sign in. You can turn it off at any time in Settings → Privacy. When it's off, captures are organized with on-device text and simple rules, and nothing is sent to a cloud model.

In Settings → Privacy you can also choose kinds of sensitive details that are never sent to a cloud model. By default these are one-time codes, passwords and keys, card numbers, government IDs and medical details. Captures that contain them are still saved, but are organized without cloud analysis.

If a voice note couldn't be transcribed on your iPhone and cloud analysis is on, the audio is transcribed by a speech-to-text model (Whisper) running on Cloudflare Workers AI.

AI agents you connect

Agent Brain lets you connect AI apps such as Claude, ChatGPT or any app that supports the Model Context Protocol (MCP). When you connect one, it can read the captures you allow and, if you permit it, add notes, mark items done or save new captures on your behalf.

• Each connection sees only the categories and permissions you allow. You can limit categories, hide sensitive captures, withhold original images, and make a connection read-only. The app shows exactly what each connection can see.
• Blocked categories, and any capture you hide from agents, are never shown to any connection.
• Information an agent reads from Agent Brain is then handled by that app's provider under its own privacy policy. Review it before connecting.
• A connection link works like a password: anyone who has it gets that connection's access. You can regenerate or disconnect it at any time.

Service providers

We use a small number of providers who process data on our behalf, under contracts that limit their use of it:

We may also disclose information if required by law, or to protect the rights, safety or property of our users or others, and in connection with a merger or acquisition, in which case this policy continues to apply to your data.

How long we keep it

• Your captures and originals are kept until you delete them or your account.
• Short-lived items (such as one-time codes, boarding passes and past events) are archived automatically when they expire, then permanently deleted 30 days later. You can change or turn off this cleanup in Settings.
• Signed-in sessions expire after 180 days without use. Sign-in codes expire after 10 minutes.
• When you delete your account, your data is deleted immediately from our active systems, as described below.

Your choices and rights

• Correct: edit what was understood about any capture, or hide it from agents.
• Delete: delete any capture, or delete your account in Settings → Delete account. Deleting your account permanently removes your captures and their history, original files, projects, connected agents and their access, and all signed-in devices.
• Export: download all your data as a JSON file in Settings → Export my data.
• Control AI processing: turn cloud analysis off, choose what's never sent to a cloud model, block categories from every agent, and change or disconnect any agent.
• Photos and microphone: change access at any time in iOS Settings.

Depending on where you live, you may have additional rights, such as to access, correct, delete or port your data, or to object to or restrict processing. Most of these you can do directly in the app; for anything else, email support@tryagentbrain.com. You may also complain to your local data protection authority.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Each user's captures are stored in a separate database, and original files under a separate per-user location. Session tokens, connection tokens and sign-in codes are stored only as hashes. No system is perfectly secure, so please protect your devices and keep connection links private.

Children

Agent Brain is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us information, contact us and we'll delete it.

International transfers

Our providers operate globally, so your information may be processed in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

If we change this policy, we'll update the date above. If the changes are significant, we'll tell you in the app or by email before they take effect.

Contact

Questions or requests: support@tryagentbrain.com.