Privacy Policy

1. Scope

This Privacy Policy applies to the Brother: AI Mentor for Men iOS and web applications, supporting website, and backend services (together, “Brother,” “we,” “us,” or the “Service”).

2. Information we process

• Account information. If you sign in with Apple or Google, Firebase Authentication may process identifiers, email address, display name, authentication tokens, and sign-in metadata. If you continue without an account, Firebase may create an anonymous identifier.
• Profile and memory. Your name, age, life situation, goals, pressures, preferred tone, saved memories, theme, and related onboarding answers are stored on your device. For Apple- or Google-signed-in users, this information is also included in a private account backup so it can be restored. Relevant profile context is sent with chat requests so replies can be personalized.
• Conversation notes. To keep replies consistent over time, Brother maintains a short set of notes drawn from your conversations — people you have mentioned, situations that are unresolved, things you said you would do, and advice already given. These notes are generated from your messages, stored on your device in protected storage, and included in the private account backup when you sign in with Apple or Google. Deleting Brother's memory or your account deletes them.
• Conversations. Your current message and a limited amount of recent chat context are sent to our backend and AI providers to generate a response.
• Screenshots. A screenshot is uploaded only when you choose to attach it. It may contain third-party messages or other personal information, so review it before sending. Original screenshot files stay in local chat history for a limited number of recent screenshot turns and are not included in account backup. A text summary of visible context may remain with the conversation so later replies can remember what was shown.
• Usage and technical data. The app-analytics control is preselected during onboarding and can be switched off before onboarding is completed or anytime afterward in Settings. When enabled, Firebase Analytics and our first-party analytics service receive feature events such as onboarding completion, settings use, and message counts. Message text, profile answers, saved memory, and screenshot contents are not included in these feature events. Cloudflare, Firebase, Google, and other infrastructure providers may process device, network, diagnostic, and request metadata.
• Optional conversation improvement. After five successful replies, Brother may separately ask whether you want to share future de-identified text conversations for internal response-quality review. Sharing remains off unless you affirmatively choose it. We do not attach your name, email address, Firebase or account identifier, profile answers, IP address, advertising identifier, or screenshot content to this research copy. Common contact and identity details in message text are automatically replaced where possible before storage, but free-form text can still contain personal or sensitive context. Screenshot turns and crisis or safety turns are excluded.
• Personal check-ins. When you choose a check-in time, Brother may generate a short follow-up from the conversation being processed. The schedule, notification wording, privacy-preview choice, and in-app opening are stored on your device and delivered using Apple’s local notification system. Brother does not operate a remote push-notification database for these check-ins.
• Contextual advertising. On eligible non-sensitive text turns, our advertising provider may process a short redacted excerpt of the current message, a random conversation-session identifier, approximate network location derived from IP address, and basic device context such as operating system, locale, and time zone. Brother does not provide the advertising provider with screenshots, profile answers, saved memory, name, email address, account identifier, Firebase identifier, or IDFA. No advertising request is made for users under 18 or sensitive conversations.

3. How information is used

We process information to authenticate users, personalize and provide conversations, analyze optional screenshots, maintain security, prevent abuse, diagnose failures, understand feature usage, provide limited contextual sponsorships, and comply with law. When you separately opt in, de-identified conversation copies are reviewed internally to evaluate and improve Brother’s response quality, tone, safety boundaries, and reliability.

4. AI processing and permission

Before the first AI-generated reply, Brother asks for permission to send your messages to OpenAI, which generates the replies. If you do not continue, Brother does not send a chat request and cannot generate replies.

When permission is active, chat requests are routed through our backend to OpenAI. OpenAI may process your current message, a limited amount of recent conversation, relevant profile context (including your name, age, onboarding answers, goals, pressures, preferred tone, and saved conversation notes), approximate time context, and any screenshot you choose to attach solely to generate and maintain Brother's replies. We do not send your password, Apple or Google credentials, authentication token, or payment-card details to OpenAI.

5. Storage and retention

Brother stores your profile, saved memory, conversation notes, chat history, check-in schedule and wording, and notification preferences on your device. Guest conversations remain local and are removed when you delete Brother's memory or remove the app. If you sign in with Apple or Google, Brother stores a private account backup containing your profile, conversation notes, chat text, feedback, and text summaries of screenshot context on Cloudflare infrastructure so the conversation can be restored. Original screenshot image files and scheduled check-ins are not included in that backup. The backup remains until you delete Brother's memory or account. Optional de-identified conversation-improvement copies are kept for up to 90 days and are not connected to the account backup. Turning that sharing option off requests deletion using a random on-device deletion key. Feature-count analytics events are kept for up to 180 days. Service providers may process or retain request, security, diagnostic, authentication, analytics, advertising-attribution, or AI request data under their own retention rules. Using “Delete account” deletes the private account backup and Firebase sign-in account, then clears local Brother memory and chat history. Deleting only the app removes the local copy; a signed-in backup remains available for restoration.

6. When information is shared

We share information only as needed to operate the Service, including with Apple and Google for sign-in; Google Firebase for authentication and optional analytics; Cloudflare for backend delivery and security; OpenAI for reading attached screenshots and generating responses; and Gravity (Gravity AI) for limited contextual advertising on eligible turns. Each of these providers is contractually required to protect your information to a standard equal to the protections described in this notice, and to use it only to perform the service we requested. We may also disclose information when required by law, to protect users or the Service, or as part of a business transfer. We do not sell your chat text or profile answers.

7. Your choices

• Choose whether to continue with AI processing by OpenAI before Brother sends its first chat request.
• Turn app analytics off before completing onboarding or anytime afterward in Brother’s Settings.
• After five successful replies, separately choose whether to share future de-identified text conversations for response-quality improvement. Choosing “Keep my chats private” leaves sharing off. Turning sharing off later stops future sharing and requests deletion of copies associated with the random deletion key stored on that device or browser.
• Turn personal check-ins and detailed lock-screen previews on or off, and cancel scheduled check-ins, in Brother’s Settings.
• Delete local and signed-in account memory from Settings. Deleting the iOS app or clearing this site's browser storage removes a guest's local memory; signed-in backups remain until deleted through Brother or a verified support request.
• Limit screenshot access by choosing only the image you want to share.
• Use Apple or Google account controls to manage information held by those providers.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent. Requests may be submitted using the developer support contact displayed on Brother’s App Store listing. We may need to verify your identity before completing a request.

9. Children

Brother is not directed to children under 13. If you are under the age of legal majority where you live, use the Service only with permission from a parent or legal guardian. If we learn that information from a child under 13 was collected without appropriate authorization, we will take reasonable steps to delete it.

10. Security and international processing

We use reasonable technical and organizational safeguards, but no online service is completely secure. Providers may process information in countries other than your own, where privacy laws may differ.

11. Changes and contact

We may update this policy as Brother changes. The effective date above will be revised when material updates are published. For privacy questions or requests, use the developer support contact on Brother’s App Store listing.