Privacy Policy
Last updated: June 27, 2026
1. Introduction
Welcome to LocalBrain ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our application.
2. Information We Collect
Account Information
- Email address (for authentication)
- Name (if provided via Google OAuth)
- Password (encrypted, stored by Supabase)
Content You Create
- Notes and documents you write or upload
- PDF files you import
- Knowledge graph data you create
- Chat conversations with AI
Technical Data
- Usage analytics (page views, feature usage)
- Device information (browser, operating system)
- IP address (for security and abuse prevention)
3. How We Use Your Information
- To provide and maintain our service
- To authenticate your account
- To process your notes and generate AI responses
- To improve our application
- To detect and prevent fraud or abuse
4. Data Storage and Security
Your data is stored securely in Supabase (PostgreSQL database) with row-level security enabled. Your API keys are encrypted with AES-256 before storage. We implement industry-standard security measures including:
- Encrypted data at rest and in transit
- Row-level security policies
- Regular security audits
- Secure authentication via Supabase Auth
5. Third-Party Services
We use the following third-party services:
- Supabase - Database and authentication
- Vercel - Hosting and deployment
- LLM Providers - AI processing (you provide your own API keys)
- Google OAuth - Optional authentication
Each third-party service has its own privacy policy governing the use of your data.
6. API Keys
If you choose to configure LLM providers, you provide your own API keys. These keys are encrypted and stored securely. We do not share your API keys with any third parties. You can delete your API keys at any time from the Settings page.
7. Data Retention
We retain your data for as long as your account is active. You can delete your notes, knowledge graph, and other data at any time. Account deletion will remove all associated data within 30 days.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data
- Withdraw consent for data processing
9. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated "Last updated" date.
11. Contact Us
If you have any questions about this privacy policy, please contact us at:
Email: privacy@localbrain.in