Security, without theater.
Security claims should describe what the code and deployment actually support. This page avoids promising a perfect system or implying that infrastructure alone guarantees legal compliance.
Website
- The public site is delivered over HTTPS through Cloudflare.
- Fonts and core page assets are hosted with the site.
- The site does not currently load advertising, session-recording, or visitor-analytics scripts.
- Cloudflare still processes ordinary network request data to deliver and protect the site.
SHIFT
- Reset history, check-ins, preferences, and optional notes are designed to be stored locally on the device.
- Free-text reset notes are not intentionally sent as analytics.
- Purchases use Apple or Google and RevenueCat, which necessarily process purchase and app-user data.
- Messages submitted to the optional companion leave the device and are processed by Brainchild's API and its configured language-model service.
Limits
No application or transmission is risk-free. Device backups, operating systems, app stores, network providers, and service processors have their own security boundaries. Do not submit information to the companion or email that you would not want processed by those systems.
Report an issue
Email [email protected] with a concise description and reproduction steps. Please do not access, alter, or retain other people's data while testing.