Privacy Policy

Account information. Your email address and display name, plus a password or the Google/Apple account you choose to sign in with.

Content you add. Events, to-dos, notes, family member names and ages, shopping items, meal plans, recipes, and photos you scan. This is the reason the app exists, and it stays inside your household.

Device information for notifications. If you enable reminders, we store a push subscription for that browser or device so we can deliver them.

Basic technical logs. Standard server logs used to keep the app running and to investigate errors.

We do not sell your data, and we do not use it for advertising.

To show you your calendar and lists, to send the reminders you ask for, to share data with the other members of your household, and to support you when something breaks.

When you scan a school flyer, calendar, or recipe, the image is sent to an AI model so the dates and ingredients can be read out for you. The extracted text is saved to your account; scan images are stored in a private bucket that only your account can read. Images are not used to train models.

Members of your household see the shared calendar, lists, meals, and notes. If you create a share link for your calendar, anyone with that link can see event titles, dates, locations, categories, and the person an event is for — never notes or attachments. You can turn a share link off at any time.

We share information with these categories of recipients: service providers who run the app (hosting and database, AI processing for scanning and transcription, push notification delivery); our Merchant of Record, Paddle.com, which handles the sale of subscriptions, billing, payments, tax compliance and invoicing; professional advisers such as legal and accounting; and authorities where the law requires it. Service providers process data on our behalf and may not use it for their own purposes.

The named recipients we share, transfer, or disclose data to are: Lovable (application hosting and the AI gateway used for scanning and transcription), Supabase (database, authentication, file storage), Google Cloud (Gemini models used for reading scanned images and audio, accessed through the Lovable AI gateway), Cloudflare (content delivery and domain security), Paddle.com Market Limited (subscriptions, payments, tax), Apple and Google (app distribution and in-app purchases when you buy through their stores), and RevenueCat (in-app purchase records). We do not sell, rent, or trade your data, and we do not share it with advertisers or data brokers.

If you choose to connect a Google Calendar, Brim reads and writes calendar events on your behalf so your family calendar stays in step. Google account data is used only to provide and improve the calendar features you asked for.

Brim's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Specifically: we do not transfer Google user data to any third-party artificial intelligence or machine learning service, and no Google user data — raw, aggregated, anonymised, or derived — is used to develop, train, or improve any general or foundational AI/ML model. Brim's AI features only ever process images, audio, and text you submit yourself for scanning or transcription; they never receive Google Calendar data. Google user data is never sold, never used for advertising, and is shared only with the hosting and database providers named above that store it on our behalf, or where the law requires it. You can disconnect your Google Calendar at any time from the Connected calendars screen, or revoke access at myaccount.google.com/permissions; we then delete the stored connection and its synced event links.

We process your account and content to perform our contract with you; reminders and notifications on the basis of your consent, which you can withdraw at any time; security, fraud prevention and product improvement on the basis of our legitimate interests; and billing records where we have a legal obligation to keep them.

We use appropriate technical and organisational measures — encryption in transit, row-level access controls so households can only reach their own data, and private storage for scanned images — to protect your information.

We use only essential cookies and local storage needed to keep you signed in and remember your preferences. We don't use advertising or third-party tracking cookies. Checkout pages served by Paddle may set cookies necessary to process your payment.

Your content stays until you delete it or delete your account. Push subscriptions are removed when you turn notifications off.

Open the app and go to You → Delete my account. This permanently removes your profile, your personal data, and — if you are the only member left — your household's calendar, lists, meals, and recipes. Shared households remain for the other members. Deletion is immediate and cannot be undone.

You can also email support@usebrim.app from your account's email address and we will delete it for you.

Brim is intended for adults running a household. You may record a child's first name and age as a family member; we do not create accounts for children and do not knowingly collect information directly from them.

You can access, correct, export, or delete your information at any time from inside the app, or by emailing us at support@usebrim.app.

If this policy changes in a meaningful way, we'll update the date at the top and note it in the app.

Questions about privacy: support@usebrim.app