Last updated: 29 September 2026. Most of what you put into MeBrain stays on your computer. This page explains what leaves it, where it goes and why.
MeBrain is made by Emerj LLC, 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States. Emerj LLC is responsible for the personal data described here (the "controller" under the GDPR).
This policy covers the MeBrain desktop app, including the version from the Microsoft Store, the website mebrain.me and our server at api.mebrain.me. Questions and requests: support@mebrain.me.
Your chats with the characters, your notes, todos, calendar events, goals, the characters' memory of you and the app's logs are stored as files on your computer, in the Documents\Mebrain folder and the app's own settings folder. We do not receive copies of them.
Passwords and sign-in tokens for your MeBrain account and for services you connect are kept in Windows Credential Manager on your computer.
Speech-to-text runs on your computer. Your voice recordings are not sent to us or to anyone else.
The app does not send crash reports, usage analytics or its log files to us automatically. If you contact support, we may ask you to send a log file yourself.
When you create an account we store your email address and a hashed (not readable) password. If you add them, we also store a display name, username, phone number, "about" text, profile photo and city. The city is used to show local news.
We store your plan, your subscription status and how much of your daily AI allowance you have used (token counts per request, with the date and the model used), plus simple counters such as the number of chat messages sent.
If you sign in with Google, we receive your email address, name and profile picture from Google to create or match your account.
When you send a message to a character using a MeBrain model, the app sends the message to our server together with the context the character needs to answer: the character's instructions, recent messages from the conversation, and any of your notes, todos, calendar events or emails that the reply needs. If you attach an image, or allow a character to use your webcam, that image is sent too. The webcam is off for every character unless you turn it on.
Our server passes the request to an AI model provider through OpenRouter (openrouter.ai), which forwards it to the company that runs the model, for example OpenAI, Anthropic, Google or DeepSeek, and returns the answer. These providers process the content to produce the reply under their own terms.
Our server does not store the content of your messages or the replies. It records who made the request, when, which model was used and how many tokens it used, for billing and to enforce the daily allowance.
If you choose to use Codex (ChatGPT) or Claude Code inside MeBrain, those tools run on your computer under your own OpenAI or Anthropic account, and your messages go directly to OpenAI or Anthropic under the terms of your account with them. They do not pass through our server.
You can connect a Gmail or other email account, Google Calendar, and Telegram, Slack, Discord or WhatsApp. These connections are made from your computer directly to those services. Your emails, events and messages are downloaded to your computer, not to our server.
Content from these services reaches an AI model only when a character needs it to answer you, and then only in the way described under "When you use the AI assistant".
MeBrain's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertising, we do not sell it, and people do not read it unless you ask us to for support, it is needed for security, or the law requires it.
Messages that characters send to you through Telegram, Slack, Discord or WhatsApp are delivered by those services under their own privacy policies.
Posts, comments and votes you make in Discuss are stored on our server and are visible to other MeBrain users together with your display name or username. Do not post anything you want to keep private.
Paid plans are handled by Stripe. Stripe collects your card details directly; we never see or store your card number. We keep a Stripe customer ID and your subscription status so we know which plan you are on.
We send emails for account verification, password resets and billing notices (for example a failed payment). We do not send marketing email without asking you first.
News in the app comes from public news sites and feeds. The app and our server fetch these feeds directly from those sites, which can see the request like any visit to their website.
The website uses Google Analytics to count visits and see which pages are used. Google Analytics sets cookies and receives your IP address and information about your browser and device. We use it only for statistics, not for advertising.
When you sign in on the website, your browser stores your sign-in tokens and last used email address in its local storage so you stay signed in.
Our server keeps technical logs, such as the time of a request, the address it came from, errors and slow requests, to keep the service running and secure. These logs are kept for a limited time and are not used to build profiles.
To provide the service you asked for: your account, the AI assistant, Discuss and your subscription (performance of a contract).
To keep the service secure, prevent abuse and improve it, including server logs and website statistics (our legitimate interests). Where the law requires consent, for example for analytics cookies, we rely on your consent, which you can withdraw at any time.
To keep payment and tax records (legal obligation).
Only the services needed to run MeBrain: our hosting provider (our server and database), OpenRouter and the AI model providers it uses, Stripe for payments, our email provider for account emails, Google for Google sign-in and website statistics, and Microsoft for distribution through the Microsoft Store.
We do not sell personal data and we do not share it for advertising. We may disclose data if the law requires it.
Emerj LLC is based in the United States, and several of the services above process data in the United States or other countries. Where data about people in the EU or UK is transferred, we rely on the safeguards the law provides, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified.
Account data is kept while your account exists. If you delete your account, it is deactivated at once and can no longer be used or seen by others. Email us to have your account data erased completely; we do so within 30 days, except records we must keep for tax or accounting, which we keep for as long as the law requires.
Files on your computer stay there until you delete them. Uninstalling the app removes its settings folder but not your Documents\Mebrain folder.
Depending on where you live, including under the GDPR, you can ask us for a copy of your personal data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Email support@mebrain.me from the address on your account. We answer within one month.
If you are in the EU or UK, you can also complain to your local data protection authority.
Connections between the app, the website and our server are encrypted. Passwords are stored hashed. Sign-in tokens on your computer are kept in Windows Credential Manager. No system is perfectly secure, and we will tell you and the authorities about a breach where the law requires it.
MeBrain is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
We will update this page when what we collect or how we use it changes, and change the date at the top. For significant changes we will also tell you in the app or by email.
