What's private
What you write in Brain Supply is encrypted before it’s stored, with a key that belongs to your space. Nobody running the site, including a Global Admin, can read it. This topic says what that covers, what isn’t encrypted, and what goes to an AI.
What’s encrypted
- Todos: titles, notes and categories.
- Journal entries: titles, entries and categories.
- The Inbox: titles, text, web addresses, file names, and the files and photos themselves.
- The wiki: titles, text, categories, tags and links, in every version.
- Sources: titles, text, web addresses and files.
- The name of each curator and model, on versions and on Compare.
What isn’t encrypted
The site needs these to sort and show your things, and none of them is what you wrote:
- dates and times;
- what kind each thing is (a note, a file, a link, a photo, an article, a receipt) and its status (waiting, failed, done);
- a file’s type and size;
- which articles were built from which sources, and each version’s number and why it was made (created, merged, edited, restored);
- the tokens each curator used, and its estimated cost;
- the activity log, which records what was done and when, never what was written.
Search words and filters are sent in the body of the request, never in a web address, so they don’t appear in the site’s logs. A category or tag in an address is a code, not its name.
What goes to Gemini, and when
Only when you select Process, Process Inbox or Start Comparing. For each item it sends to Google’s Gemini:
- the item’s title, text, and web address if it has one;
- its PDF or photo, if it has one;
- the titles, categories and tags of your articles, so it can choose where the item belongs;
- the text of the one article it might add the item to.
It never sends your todos or journal unless you’ve sent one to the Inbox. [CHECK: whether Google’s terms for the paid Gemini API, which this site uses, let Google keep or learn from what’s sent.]
What goes to an AI you connect
Only what you allowed it to reach when you connected it, and only when you ask it something. What it reads goes to the company that runs it, under your own agreement with them. You can see and revoke the connection under Access tokens on your Account page: see Connect an AI.
What’s kept after filing
When an item is filed, its original stays as a source: the text, the web address, and the file or photo. A Global Admin can set the site to keep no original files, or no original text. For a note, your Keep the original box decides whether its text is kept. A file that isn’t kept is deleted as soon as the item is filed. See Sources.
Who can see your things
Only the members of your space. A Global Admin can see that your space exists and who its members are, but not what’s in it.