Your files stay shut. Here's exactly what moves.
StareBrain never asks for access to your photos, videos or documents, and its agent is blocked from gallery and file apps. Some things do travel: your command text and a text log of your screen go through our server to AI providers. We'd rather show you precisely where everything goes than hide it behind a slogan.
Follow your data.
Choose a kind of data below and watch how far it gets.
Pick something and follow it
Never requested. Blocked in code.
The app never asks Android for access to your photos, videos or documents. On top of that, a block list inside the app stops its agent from reading gallery, photos, file-manager and cloud-drive screens, and from opening them by name. A block list covers the apps it knows about, so we call it a strong guard, not a vault.
Nothing runs without you.
You see the plan first
StareBrain shows what it's about to do and waits for your yes. Texts always ask. You can opt in to auto-confirm for other tasks, and it's off by default.
The Stop Line
While working inside an app, the agent stops and asks before taps that can't be undone, like Send, Pay, Delete or Confirm. A keyword check in the app backs the AI up. It's a strong guard, not a guarantee.
A record you can read
What you asked and what happened is saved in History on your phone, so you can see it.
Short memory on your phone
Command history is deleted from your phone after 7 days automatically.
- MessagingCan send texts (always asks first).
- CalendarCan add and change calendar events.
- Device controlCan tap and change settings on screen.
- App launchingCan open apps for you.
- CallsOff. StareBrain won't use this.
- Photos, videos, documentsThe app never asks for this permission, and a block list keeps the agent out of these apps.
A demo of how the screen behaves. Nothing here connects to a real phone.
The safeguards.
- Encrypted (TLS) connections from our server to the AI providers, and from the app to our server
- Sign-in token kept in Android's encrypted storage, not plain preferences
- Passwords stored hashed, never as plain text
- Sign-in tokens that expire and have to be refreshed
What we can't promise.
Trust comes from knowing the limits. These are ours.
This is not end-to-end encryption.
Our server and the AI providers have to read your command text and screen log to do the job. We use standard encryption, and we say so plainly.
We can't control the providers' retention.
Once a request reaches an AI provider, their own terms and privacy policy apply. Deleting data on your phone does not delete what a server or provider already received.
The screen log reflects your screen.
It's separate from your files, but it can include whatever is visible, such as messages from other apps. Keep sensitive details off screen while a command runs.
No certificate pinning yet.
Connections are encrypted, but the app does not yet pin our server's certificate. It's on our hardening list for the final phase.
Our server keeps request records.
It stores your command records and can log the text of a task. We haven't set an automatic deletion window on the server yet, so tell us at starebrain@gmail.com if you want your data removed.
File protection is a block list.
It covers the gallery, files and drive apps we know about, plus screen-name patterns. A brand-new or unusual app could slip past it, which is why the app also never requests storage access.
No system is perfectly secure.
We build carefully and tell you where the limits are, because you should decide with the full picture.
Questions? Ask us anything.
Read the full details in the privacy policy, or write to starebrain@gmail.com. If you think you've found a security problem, tell us there.