Privacy Policy

Last updated: April 2026

The short version: AIBrain runs on your machine. Your brain data — conversations, memory, workflow outputs — stays on your machine. We do not collect it, sell it, or share it with third parties. When you activate a paid license, we collect minimal license validation data (described below).

What AIBrain Is

AIBrain is a developer tool and agentic cognitive layer that runs locally on your computer. It connects to AI providers you configure (Anthropic Claude, OpenAI, Google Gemini, local Ollama, or others) using API keys you supply. All AI conversations are sent directly from your machine to the provider you choose — not through AIBrain servers.

Data That Stays on Your Machine

All brain data is stored in a local SQLite database (~/projects/aibrain/aibrain.db or the path shown by aibrain status). This includes:

Your memories, notes, and stored context
Embedding vectors
Evolution and quality scores
Task execution logs

This data never leaves your machine unless you explicitly export it or move the file.

LLM Provider Calls

When AIBrain processes a task, it routes it to a language model. By default:

Deterministic tasks: handled locally with no LLM call
Simple tasks: Ollama (fully local) if installed; otherwise Anthropic Claude Haiku
Judgment and complex tasks: Anthropic Claude Sonnet or Opus by default

This means that in a default installation, the content of non-trivial tasks is sent to Anthropic (api.anthropic.com). Your Anthropic API key is stored locally and used directly — it is not relayed through AIBrain servers. Anthropic's privacy policy governs their use of this data: anthropic.com/privacy

To run fully locally with no external LLM calls, install Ollama and configure AIBrain to use it as the inference backend.

If you configure other providers (OpenAI, Gemini, Groq, DeepSeek, Together), their respective privacy policies apply to data sent to those endpoints.

License Activation and Heartbeat Telemetry (Pro and Team only)

Free-tier users: no telemetry collected.

When you activate a Pro or Team license, AIBrain sends a small validation record to our licensing server (api.myaibrain.org):

Field	What it contains	Why
`key_hash`	SHA-256 of your license key	Identify which key activated — raw key never sent
`email`	Email address embedded in your license	Associate activation with your account
`machine_fingerprint_hash`	SHA-256 of (salt + hostname + first MAC address + OS name)	Count distinct machines per license — no raw hardware ID stored or transmitted

Heartbeats (periodic re-validation) occur at most once every 24 hours per machine. If our server is unreachable, the heartbeat is silently skipped and your license continues to work offline.

To disable license telemetry: Set AIBRAIN_LICENSE_API_URL= (empty string) in your environment. Your license will still validate against the locally cached state.

Data retention: Activation records are retained for the duration of your subscription plus 90 days, then deleted. Aggregated counts (number of activations per key) may be retained indefinitely for business metrics.

Your Rights

Export your brain: Run aibrain brain export to export your full memory database to a portable format.
Delete license records: Email [email protected] to request deletion of your activation records. We will confirm deletion within 30 days.
Disable telemetry: Set AIBRAIN_LICENSE_API_URL= in your environment.

myaibrain.org Website

When you visit myaibrain.org, standard infrastructure logging records your IP address and the pages you visit. We use Cloudflare as our CDN and DNS provider — Cloudflare may collect anonymised, aggregated page view statistics (no cookies, no fingerprinting, no personal data). See Cloudflare's privacy policy.

We do not use advertising networks, behavioural tracking pixels, or remarketing systems.

If you create an account on myaibrain.org (for Pro or Team licensing), we store your email address and license information. We do not store payment card details — payments are processed by Stripe and Gumroad and governed by their respective privacy policies.

Payments

Payments are processed by Stripe and Gumroad. We do not store payment card details. We receive your email address from these processors to issue your license key.

Children

AIBrain is not directed at children under 13. We do not knowingly collect information from children.

Changes to This Policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of AIBrain constitutes acceptance of the updated policy.

Contact

Privacy questions: [email protected]