1. Introduction
BrainMap ("we", "our", "us") is a personal knowledge management application. This Privacy Policy explains how we collect, use, and protect your information when you use our service at brainmap.cc.
2. Data Controller
BrainMap is operated by Hai Do as an individual developer based in Vietnam. For all privacy-related requests — including access, correction, erasure, or withdrawal of consent — please use the contact details in Section 10.
3. Information We Collect
- Account Information: When you sign in with Google, we receive your name, email address, and profile picture from Google.
- Notes & Content: The notes, tags, topics, and other content you create within BrainMap.
- Usage Data: Basic usage metrics such as AI credit consumption and feature usage.
4. How We Use Your Information
- To provide and maintain the BrainMap service
- To authenticate your identity via Google Sign-In
- To process your notes with AI for automatic categorization, summarization, and semantic search
- To store and sync your data across sessions
5. Data Storage & Security
Your data is stored on Cloudflare's infrastructure (D1 database, R2 storage) with encryption at rest. Authentication uses secure httpOnly cookies with JWT tokens. We do not sell or share your personal data with third parties.
6. AI Processing
Your note content is processed by AI models (via Cloudflare Workers AI and third-party APIs) to generate summaries, tags, topics, and embeddings. This processing is done to provide the core features of BrainMap. AI providers do not retain your data after processing.
7. Cookies & Analytics
We use the following cookies:
- Authentication cookies (essential): httpOnly cookies holding your access and refresh tokens. Required for the service to function and exempt from consent requirements.
- Cloudflare Turnstile cookies (essential): set by our bot-protection provider to distinguish humans from automated traffic.
- Locale and region cookies (essential): remember your language preference and, for visitors from the EU/EEA/UK, the region tag used to decide whether to show the cookie consent banner.
- Google Analytics 4 (optional): cookies
_ga and _ga_2J68M8WNVH, valid up to 2 years, used to understand aggregate usage so we can improve BrainMap. We do not use these cookies for advertising and do not share the resulting data with third parties for marketing purposes. For visitors from the EU/EEA/UK these cookies are set only after you click "Accept" on the consent banner; until then Google Analytics runs in Consent Mode v2 denied state (cookieless pings only). For other visitors these cookies are set by default.
8. Your Choices
- Withdraw analytics consent: if you are in the EU/EEA/UK you can revoke consent at any time by clearing your browser cookies for brainmap.cc — the banner will reappear on your next visit. Outside the EU/EEA/UK you can opt out via the Google Analytics Opt-out Browser Add-on or by enabling Do Not Track in your browser.
- Export your data: all notes and related content can be exported from Settings → Export at any time.
- Delete your account: request full deletion of your account and associated data via the contact details below. Deletion is permanent and cannot be undone.
- GDPR rights (EU/EEA/UK residents): you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with your national data-protection authority.
9. Data Export & Deletion
You can export all your data at any time via the Export feature in Settings. You may request deletion of your account and all associated data by contacting us at the address in Section 10.
10. Contact
For any privacy-related questions or to exercise your rights, please contact us at privacy@brainmap.cc.