Privacy Policy

StareBrain is a natural-language command interface for Android. You type what you want done — send a text, add a calendar event, open an app, control the device, place a call — and StareBrain shows you exactly what it's about to do before it does it. Nothing runs without your confirmation.

StareBrain is currently in development and has not publicly launched. This policy describes how it's designed to handle data once it does.

Account data — your email address and a hashed password. We never store your password in plain text.

Command text — what you type in ("Text Sarah I'm running late," "Add dentist tomorrow at 2pm"). This is sent to our backend to be interpreted.

Action details — the structured plan built from your command (recipient, message, event time, app name, and similar fields), stored only long enough to show you the confirmation and carry out the action.

Permission grants — which device capabilities you've turned on (messaging, calendar, device control, app launching, calls) and when you granted or revoked each one.

Audit log — a record of actions actually taken, kept so you can see exactly what StareBrain did on your behalf.

Basic technical data — things like session tokens and IP address, used only to keep your account secure.

StareBrain isn't built to read your messages, contacts, or calendar in the background. It only touches what a specific command requires, at the moment you send it.

There's no analytics or telemetry layer in the current design, and no data is sold or shared with advertisers.

When you send a command, the text is passed to a third-party language model (Nvidia NIM) to be turned into a structured action plan. That request includes the command text and the list of permissions you've granted — nothing else.

The resulting plan is shown to you as a confirmation before anything happens. If you cancel, no action is taken.

Command history is kept for 7 days and then automatically deleted.

Audit log entries and permission records are kept for as long as your account is active, so you retain a record of what's been done under your account.

You can request deletion of your account and associated data at any time; see Contact below.

All traffic between the app and our servers runs over TLS. Sensitive fields are encrypted at rest, and the Android app stores local data in encrypted storage rather than plain preferences.

Passwords are hashed, never stored as plain text. Access to the app is protected by an authentication token that expires and must be refreshed.

This is standard encryption in transit and at rest — not end-to-end encryption. StareBrain's backend can technically access data in the course of processing your commands.

Each device capability — messaging, calendar, device control, app launching, calls — is off until you turn it on, and StareBrain will only ever propose actions that match permissions you've granted.

You can revoke any permission at any time from the Permissions screen. Revoking a permission stops StareBrain from proposing or taking that category of action going forward.

You can ask us, at any time, to: see what data we hold on your account, correct anything inaccurate, delete your account and its data, or export your command history.

Depending on where you live, you may have additional rights under laws like the GDPR or CCPA. We'll honor applicable requests regardless of location where we reasonably can.

If this policy changes in a material way, we'll notify you in the app before the change takes effect. Continued use after that point means you accept the update.

Questions about this policy or your data can be sent to the address that will be published here at launch.