Privacy Policy

This Privacy Policy (“Policy”) describes how Flynn McConneloug (“NoBrainer,” “we,” “us,” or “our”) collects, uses, stores, and protects information obtained from users (“you” or “your”) of the NoBrainer mobile application and website (collectively, the “Service”). By accessing or using the Service, you consent to the data practices described in this Policy.

NoBrainer has two plans. The Free plan shows your calendars, reminders, and friends, and uses no AI: it sends nothing to OpenAI or Anthropic. NoBrainer Pro, including its free trial, adds features that use AI, and those run only after you allow AI processing in the app (Section 2).

1. Information We Collect

We collect the following categories of information:

1.1 Account Information. When you create an account using Sign in with Apple, we receive your name and email address (or an Apple-generated relay address, if you choose to hide your email). We store a unique user identifier, display name, and authentication credentials.

1.2 Calendar and Scheduling Data. With your permission, NoBrainer reads calendar events from Apple Calendar (through Apple’s EventKit framework, on your device) and Google Calendar (through your Google account), and from your school’s calendar feed (such as Canvas or Blackbaud) if you add its address. This includes event titles, dates, times, locations, and notes. The feed’s address may also be saved with your account so NoBrainer can check it for new deadlines. Apple Calendar events are read on your device and leave it only if you have Pro and use chat or ask NoBrainer a question through Siri (Section 2), or, if you turn on sharing with friends, as busy and free times without titles, locations, or notes (Section 1.11).

1.3 Reminders and Tasks. With your permission, NoBrainer reads your incomplete reminders from Apple Reminders (through EventKit, on your device) and your tasks from Google Tasks. This includes task titles, due dates, and notes.

1.4 Changes You Make in NoBrainer. NoBrainer changes your Apple Calendar, Apple Reminders, Google Calendar, or Google Tasks only when you ask it to: when you save an event, reminder, or task in NoBrainer’s own add or edit form, check one off, or delete one; when you ask Siri to create an event or add a reminder with NoBrainer, which works on any plan, uses no AI, and adds it to your default calendar or list; and, if you have Pro, when you ask the AI assistant to make a change (Section 2). Changes to Apple Calendar and Reminders are made on your device. Changes to Google Calendar and Google Tasks are sent to Google through our server, which holds your Google connection.

1.5 Email Connections from Earlier Test Versions. NoBrainer no longer connects to email accounts. If you added an Apple Mail account in an earlier test version, or connected Google before August 26, 2026 (when NoBrainer still asked for Gmail access), that connection keeps working until you remove it: remove Apple Mail in Settings, which deletes its stored app password, or disconnect Google in Settings and connect it again. Until then, if you have Pro, NoBrainer can read previews of your recent unread email to answer you in chat (they are sent for AI processing as described in Section 2), send or file email when you ask it to, and include Apple Mail in an email digest automation.

1.6 Chat Data. If you use chat, which is part of Pro, we store the messages you send to and receive from the NoBrainer AI assistant, including any text and photos you attach. Chat history is associated with your user account. NoBrainer may also save short facts you tell it (“memory”) to personalize later answers, and a nightly summary of the day’s conversation so the next day’s thread has context; you can view and delete saved memories in Settings. If you give feedback through chat, it is saved with your account identifier so we can act on it. If your Pro ends, your chat history stays in your account under the retention rules in Section 6.

1.7 Subscription Information. NoBrainer Pro is sold through the App Store. Apple handles the payment, and NoBrainer never sees your payment card or other billing details. RevenueCat, the service that runs our subscriptions (Section 4), receives your NoBrainer account identifier and your purchase history and subscription status from Apple, and tells our server whether you have Pro. We store on your account whether you have Pro, your plan, its status (such as trial, active, or cancelled), and when it renews or ends, and we keep a record of each subscription change RevenueCat reports, such as a trial starting or a renewal.

1.8 Device and Usage Information. We collect device push notification tokens for the sole purpose of delivering notifications you have configured. We also collect basic product-interaction analytics, all tied to your account identifier: events such as app opens and session ends, along with the token counts and AI model used for each AI request; the steps of first-time setup (which setup screens you reach; whether you connect a school calendar, and how many items it holds; whether you allow calendar access and notifications; how you sign in; whether you claim a username, start a trial, restore a purchase, invite friends, or share your semester summary; how long setup takes; and which first-week checklist tasks you complete); your answer when the app asks you to allow AI processing, whether in first-time setup, on the screen it shows when you have Pro, or in Settings; when the Pro offer is shown to you, on which screen, and whether you choose to continue on the Free plan; and when the end-of-trial screen is shown to you, which moment it is (the day before your trial renews, the day before it ends, or after it has ended) and which option you choose. Setup steps from before you sign in are kept on your device with a random setup ID, which is not a device identifier, and are sent only after you sign in. We use this data solely to understand how NoBrainer is used and to improve the product. We do not sell it, we do not use it for advertising or ad tracking, and the app contains no third-party advertising SDKs. Analytics data is erased when you delete your account. We do not collect device identifiers.

1.9 Website Signups. If you join the waitlist or sign up as a beta tester on our website, we collect your name and mobile phone number, and, for the beta, your Apple ID email if you choose to give it. We use them for the sole purpose of contacting you about NoBrainer availability and sending TestFlight beta invitations.

1.10 Text Messages. By giving us your phone number on our website you consent to receive text messages from NoBrainer about the launch and the TestFlight beta. These are one-off, manually sent messages, not a recurring campaign. Message and data rates may apply. Reply STOP to any message to stop receiving them, and we will remove your number. Your number is stored in our database, hosted by Supabase, and if you sign up for the beta, also in the Notion workspace where we track testers (Section 4). We never sell or rent phone numbers, and we never use them for advertising. Your consent to be texted is not a condition of using the app.

1.11 Friends and Free/Busy Sharing. NoBrainer lets you show friends when you are busy or free. Friends is part of the Free plan. Sharing is off until you turn it on, either during first-time setup or in the Friends tab.

• Username and profile photo: To be added as a friend, you choose a username; anyone who types it exactly can send you a friend request. You may also add a profile photo, from which the app removes location and camera information before it is uploaded. Your display name and profile photo are shown to your accepted friends and to people you send a friend request to.
• Invite links: If you share an invite link, anyone who opens it while signed in to NoBrainer sees your display name, username, and profile photo, and can send you a friend request for you to accept or decline. Each link works once and expires after 7 days.
• Busy and free times: If you turn sharing on, the app works out on your device when you are busy. It reads only the calendars switched on under Friends → Sharing → “Calendars I share”, plus timed events from your school calendar feed. Calendars you can’t edit, such as subscribed or shared calendars, start switched off; your own calendars are shared until you switch them off. The app uploads only the start and end times of busy periods for the next 7 days, within your sharing hours (8 AM to 10 PM), along with your time zone. Each period can carry one general label (class, studying, work, gym, meal, travel, social, or personal), and you can turn the labels off. Event titles, locations, attendees, and notes are never uploaded for this feature. Nothing is uploaded until you have at least one accepted friend you share with.
• Who sees it: Only friends you have accepted (or who accepted your request), and only while both of you are sharing. You can pause sharing, hide the labels, stop sharing with any one friend (they are not told), or turn sharing off at any time in the Friends tab.
• Remove, block, and report: From a friend’s profile you can remove them, block them, or report them. Blocking hides each of you from the other and stops friend requests and invite links between you; you can unblock someone in Settings. A report sends us the reported account’s username, display name, and profile photo with the reason you give, and which account sent it. We review reports within 24 hours and may remove content or suspend accounts that break our Terms of Service.
• This information is not sent to OpenAI or Anthropic.

1.12 Setup Questions. When you first set up NoBrainer, it asks your school year (such as 9th or 10th grade, or college), what trips you up most, your goal for the semester, and when you want your morning brief. Your answers are saved to your account along with the usage information in Section 1.8, and are erased when you delete your account. Answers you give before you sign in stay on your device until you sign in. For a new account, the brief time also sets when your morning brief arrives.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To show your schedule, reminders, and tasks in the app, to make the changes you ask for (Section 1.4), and, if you have Pro, to answer your questions through the AI assistant.
• AI Processing (Pro only): AI features are part of NoBrainer Pro, including its free trial, and run only after you allow AI processing in the app. The Free plan sends nothing to OpenAI or Anthropic. When AI runs, your messages, along with contextual data from your connected accounts, are transmitted to OpenAI, L.L.C. (“OpenAI”) for processing by OpenAI’s models, and to Anthropic, PBC (“Anthropic”) for processing by the Claude model only when OpenAI is unavailable. Specifically, the following may be sent: your chat messages, recent chat history, and photos you attach; calendar events (titles, times, locations) from the calendars you connect; reminders and tasks; assignments from your school calendar feed; saved memory facts; the nightly chat summary; and previews of recent email, only from a connection described in Section 1.5. This processing is necessary to generate relevant, context-aware responses, briefs, and reminders. OpenAI’s handling of API data is governed by its Privacy Policy and API data usage policies; Anthropic’s by its Privacy Policy and Usage Policy. Neither uses API inputs to train their models.
• Your Consent to AI Processing: Before any of this data is sent to OpenAI or Anthropic, the app asks for your explicit permission on a dedicated screen that names them and lists what is shared, and nothing is sent unless you tap Allow. Our server records your answer on your account and refuses to send anything unless you have allowed it and have Pro, including for scheduled features such as the morning brief and deadline reminders. If you tap “Don’t allow”, you can keep using the Free plan. You can withdraw that permission at any time in Settings under “AI & your data”; NoBrainer then stops sending your data to them, and chat, automations, and AI reminders stop until you allow it again.
• Catches, Briefs, and Automations (Pro): To send you catches (notifications before a deadline slips), your morning brief, and the automations you set up. NoBrainer keeps a record of what it has sent you, so it does not repeat itself and can show you what it caught during your trial.
• Friends: If you turn on sharing, to show your busy and free times, display name, and profile photo to the friends you choose, as described in Section 1.11, and theirs to you; and to review reports and keep Friends safe.
• Notifications: To deliver push notifications for reminders, catches, automation results, and alerts you have enabled.
• Subscriptions: To know whether you have Pro, through RevenueCat and Apple (Section 1.7), and to show your plan in the app.
• Action Execution: To create, change, or delete calendar events, reminders, and tasks when you ask, in NoBrainer’s own forms, by asking Siri to add an event or reminder, or, if you have Pro, through the AI assistant (Section 1.4).
• Product Improvement: To understand how NoBrainer is used, using the product-interaction analytics described in Section 1.8, so we can fix problems and improve the app. This data is never used for advertising and is never sold.

3. Data Storage and Security

3.1 Server-Side Storage. Your account data, chat history, integration credentials, subscription status, Friends data, and automation configurations are stored in a PostgreSQL database hosted by Supabase, Inc. (“Supabase”), and profile photos are stored in Supabase’s file storage. Supabase provides:

• Encryption in transit via TLS 1.2+
• Encryption at rest via AES-256
• Row Level Security (RLS) policies ensuring each user can only access their own data
• SOC 2 Type II compliance

3.2 Device-Side Storage. Authentication tokens and sensitive credentials are stored in the iOS Keychain, Apple’s encrypted on-device credential storage. Non-sensitive preferences are stored in UserDefaults.

3.3 OAuth Token Security. Google OAuth2 tokens, and any Apple Mail credentials from an earlier test version (Section 1.5), are stored encrypted in the Supabase database, accessible only through authenticated API requests scoped to your user account. Tokens are never exposed in client-side code or transmitted to any party other than the respective service provider (Google, Apple).

3.4 Backend Infrastructure. Our application server is hosted on a Virtual Private Server (VPS) secured with SSH key authentication, firewall rules, and HTTPS via automated TLS certificates.

4. Data Sharing and Disclosure

We do not sell, rent, lease, or trade your personal information. We share your data only with the following parties, solely as necessary to provide the Service:

• OpenAI, L.L.C. — AI processing for Pro (primary). Receives your chat messages and the connected-account context described in Section 2, only if you have Pro and have allowed it in the app. OpenAI does not use API inputs to train models.
• Anthropic, PBC — AI processing for Pro (fallback, only when OpenAI is unavailable). Receives the same data under the same conditions. Anthropic does not use API inputs to train models.
• RevenueCat, Inc. — Runs the Pro subscription. Receives your NoBrainer account identifier and your purchase history and subscription status from Apple. It does not receive your calendars, chats, or Friends data.
• Supabase, Inc. — Hosts our database, file storage, and authentication infrastructure. Acts as a data processor on our behalf.
• Google LLC — Receives OAuth2 token requests to access your Google Calendar and Google Tasks data on your behalf, and the changes you make to them in NoBrainer.
• Apple Inc. — Processes Sign in with Apple authentication, handles all App Store billing for Pro (NoBrainer never sees your payment details), delivers push notifications, and provides access to Apple Calendar and Reminders via on-device frameworks.
• Notion Labs, Inc. — Hosts the internal workspace where we track website beta signups (your name, phone number, and Apple ID email if you gave it) and feedback you send through chat, so we can follow up.

Each of these parties provides the same or equal protection of your data as described in this Policy.

If you use Friends, we also show other NoBrainer users you choose the limited information described in Section 1.11. We never show them your event titles, locations, or notes.

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of NoBrainer, our users, or the public.

5. Google API Services Compliance

NoBrainer asks Google for three permissions: to see and edit the events on your Google calendars, to see the list of your Google calendars, and to create, edit, and delete your Google Tasks. It uses them to show your calendars and tasks in the app, to make the changes you ask for (Section 1.4), to work out the busy times you choose to share with friends (Section 1.11), and, if you have Pro and allow AI processing, for catches, the morning brief, and the AI assistant, including the changes you ask it to make.

NoBrainer’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to Google data that is necessary for the features you use.
• We do not use Google data for advertising purposes.
• We do not transfer Google data to third parties except as necessary to provide the Service (i.e., OpenAI, or Anthropic as its fallback, for AI processing if you have Pro and allow it), for security purposes, or to comply with applicable law.
• If you turn on Friends sharing, the busy and free times the app derives from the Google calendars you share, never event details, are shown to the friends you choose, as described in Section 1.11.
• We do not use Google data to train machine learning or AI models.
• We do not let people read your Google data unless you ask us to (for example, for support), it is needed for security, or the law requires it.

6. Data Retention

We retain your data for the following periods:

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Chat history: Conversations older than 90 days are automatically deleted. You may manually delete individual conversations at any time.
• Integration tokens: Deleted immediately when you disconnect an integration or delete your account.
• Automation results: Retained while associated automation is active.
• Analytics events: Retained while your account is active. Erased when your account is deleted.
• Subscription records: Retained while your account is active. Erased when your account is deleted. Apple and RevenueCat keep their own purchase records under their own policies.
• Friends: Busy and free times for days more than 14 days in the past are deleted automatically. Your username, friend connections, sharing settings, busy and free times, invite links, and profile photo are deleted when you delete your account. Reports are kept as long as needed to review them and keep Friends safe.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Deletion: You can delete your account and its data at any time in the app (Settings → Delete Account), or ask us to. We will process deletion requests within 30 days.
• Disconnection: You may disconnect any third-party integration at any time through the app’s Settings screen. Disconnection immediately revokes our access to that service’s data.
• AI processing: You can use the Free plan without allowing AI processing, and withdraw your permission at any time in Settings under “AI & your data”.
• Portability: You may request your data in a machine-readable format.
• Correction: You may request correction of inaccurate personal information.

To exercise any of these rights, contact us at johnflynn850@gmail.com.

8. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal information, please contact us at johnflynn850@gmail.com.

9. State Privacy Rights

California Residents (CCPA/CPRA). California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at johnflynn850@gmail.com.

Other U.S. States. Residents of states with applicable privacy laws (including Virginia, Colorado, Connecticut, and Utah) may have similar rights. Contact us to exercise any applicable rights.

10. International Data Transfers

Your data may be processed in the United States regardless of your location. By using the Service, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or via email at least 7 days before the changes take effect. The “Effective” date at the top of this Policy shows when this version takes effect, and the “Last updated” date shows when it was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Flynn McConneloug
Email: johnflynn850@gmail.com
Salt Lake City, Utah, United States