Privacy
Your notes never leave your machine. What we hold is what a purchase requires.
The short version
The app has no account and no telemetry. Your notes never leave your device unless you send them somewhere yourself. We hold as little as we can.
What the app collects
Nothing. CacheYourBrain runs locally. It does not phone home, does not track usage and does not send us your content.
Two exceptions, both under your control:
- If you use AI features, your prompts go directly from your device to the provider you chose, using your own API key. They never pass through us.
- The app may occasionally fetch a public list of revoked licence ids. That request contains nothing about you or your licence.
What we hold when you buy
- Your name, as you asked for it to appear on the licence.
- Your email address, to send you the key and to resend it if you lose it.
- Licence facts: which tier, when it was issued, how long updates run, and the Paddle transaction id.
We do not receive or store your card details, billing address or tax details — Paddle handles payment as merchant of record and has its own privacy policy.
Licence emails are sent through Resend. They are transactional and contain no marketing. The optional news-and-updates list is entirely separate: you opt in deliberately, confirm by email, and can unsubscribe from any message. Buying something never subscribes you to anything.
Community accounts
If you create an account for the community area, we store your display name, email address and what you post. Ask us and we'll delete it.
How long we keep it
Licence records are kept for as long as the licence is valid plus whatever period tax law requires, so we can honour support and resend requests.
Your rights
Under the Privacy Act 2020 you may ask to see or correct what we hold. Email support@gma-software.com. Deleting your licence record means we can no longer resend your key, so keep a copy first. Complaints can also be made to the Office of the Privacy Commissioner.
This website
The site is served through Cloudflare, which keeps short-lived request logs for security. We don't run advertising or third-party analytics.