Last updated: August 22, 2026
This page is for the Mac app. Using Braintunnel in the browser? See Security for hosted Braintunnel. All security pages: Security.
This page summarizes how the Mac app is built. It is not a contract. How we use personal information: Privacy Policy. Rules of use: Terms of Service.
The index of your mail, calendar, documents, text messages, and pages lives on the machine where you installed Braintunnel. We never see or collect your email, calendar, documents, or other indexed data.
Tokens and secrets on this Mac are encrypted. The key is held in the macOS Keychain.
You choose what to grant. More permission means more of your own data can join that index, such as your text messages.
Some of those sources need Full Disk Access. macOS uses that for data Apple keeps in protected folders, including Messages. We may also ask for Contacts so search can show familiar names for people you text with, not so we can copy your whole address book.
You can turn these off in System Settings. That stops new indexing from those sources.
Braintunnel is a notarized Mac app. It does not give a model a shell on your computer. It does not install marketplace skills. Chat uses a fixed set of tools for mail, calendar, and your brain.
You choose the model. Use a key you already have, or a model that runs on this Mac. The Mac talks directly to that provider, or stays on-device. We do not proxy inference.
Our agreements with those providers prohibit them from training on your content. We send what the question needs, not your whole mailbox.
You can open Braintunnel from another device, such as your phone, while this Mac is on. We create a hostname (you.braintunnel.ai) and an encrypted tunnel to this Mac. Chat and search still run here. The other device only sees the UI. We do not store the session or inspect it.
Each client gets one secure pairing token. You connect a device by scanning a QR code from the Mac app. Once that device connects, the code cannot be reused to add another client. You can revoke a token or a remote connection in the app at any time.
The app calls our servers only for jobs like these:
If you connect Gmail, Calendar, or Drive, we follow the Google API Services User Data Policy, including Limited Use. Disconnect in the app to revoke access.
The Limited Use statements we published for Google review are on Security for hosted Braintunnel.
The Mac app does not send product telemetry or error traces off the machine unless you turn that on.
If you believe you've found a security vulnerability, email security@braintunnel.io rather than posting it in public. We aim to acknowledge reports within 3 business days.
The "Last updated" date at the top changes when we make material edits. Privacy notice rules are in the Privacy Policy.