SecondBrain
Data practices

Privacy Policy

Effective October 8, 2026 · SecondBrain personal-use application

About this application

SecondBrain is a private, self-hosted personal knowledge-management system. It is operated for the account owner's own use. This public site describes the system; it does not host the private application or its Google-account data.

Google information accessed

When authorized by its operator, SecondBrain requests the following read-only Google API scopes:

These permissions do not allow SecondBrain to send or delete email or to change calendar events.

How data is used

Data retrieved through Google APIs is used to support the operator's personal note organization, searchable knowledge records, and contextual summaries. The application may index or process retrieved information using its configured knowledge-processing components. It is not used for advertising or to build marketing profiles.

Storage and security

The private application uses operator-managed, self-hosted storage and databases for the information it collects and organizes. Access to the private application is restricted by the operator. OAuth credentials are used to authorize the requested Google API access and must be protected against unauthorized access. This public informational website does not receive or store Gmail messages or calendar events.

Sharing and Limited Use

Google user data is not sold or disclosed to advertisers. The intended use is the personal functionality described in this policy. SecondBrain's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Access outside the application's personal-use purpose is not authorized.

Retention and deletion

Data imported into SecondBrain may remain in its operator-managed storage until the operator deletes it, including associated knowledge records. Deleting or revoking the Google connection stops future authorized API access but does not by itself automatically delete previously imported copies. The operator manages deletion of stored data and any backups.

Revoking Google access

Google access may be revoked at any time from Google Account third-party connections. Revocation prevents further authorized Google API requests using that grant. Data already stored by SecondBrain must be removed separately by its operator.

Changes and contact

This policy may be updated when the application's features or data handling change. For privacy questions, contact the application's operator using the user support email shown on the Google OAuth consent screen for SecondBrain.