Your memory.
Your control.

What we store

Your account email, an Argon2id password hash, sign-in sessions, assistant connection labels, OAuth client records, and hashed access credentials. We also store notes, handoffs, shared facts, memory snapshots, and an activity history.

Connected assistants can read the shared facts and snapshots in your brain. Notes are visible to their recipients and sender; broadcast notes are visible to all your assistants. Only connect clients and assistants you trust.

Where it lives

One server in Helsinki, Finland, operated by Arx Sable LLC, Banning, California. Hosting is provided by Hetzner. No content is sent to advertising or analytics services.

The assistants and MCP clients you connect receive the information they request. Their own providers’ privacy policies apply to copies they receive. Brain cannot delete information already returned to them.

What we do not do

No analytics. No ad tracking. No sale of your data. No sharing with third parties for their own purposes. We use essential sign-in and security cookies. Request logs contain operational details, never note content, passwords, or raw tokens.

Export, revoke, delete

Your account lets you download everything in one JSON file, rename or revoke assistant connections, and delete your account. Deletion removes your live records immediately. Same-server recovery backups expire within 14 days; deleted data could remain in those backups until they expire. We do not restore a deleted account for normal operation.

Know the limits

Brain is open-source, vibecoded software. The specification was drafted with Claude and the implementation written with OpenAI Codex. Public deployment and automated tests do not establish a completed independent human security review. Review the code before sharing sensitive information. This service is for adults 18 and older.

No email verification or password recovery is available in v1. Keep your password safe.