Second Brain
Privacy Policy
Effective August 24, 2026 (prepared for build 70)
Privacy first: Studio AM never receives your note or voice content. There are no Studio AM accounts, AI-processing servers, analytics, ads, or tracking. AI processing stays on-device. Notes stay local unless you enable optional private iCloud sync; recording audio stays on the device. Pinned model and natural-voice files download directly from Hugging Face, which may receive ordinary connection and download-request metadata under its own policy. Studio AM receives none of that provider data.
1. Information we collect
1.1 Personal information
Studio AM collects no personal information. Second Brain requires no Studio AM account, email, or identifier. Direct file requests to Hugging Face are separate: Hugging Face may process provider request metadata as described in section 2.
1.2 Your captures
The thoughts you capture, items derived from them, reminders, photos, and text shared into the app are stored locally by default and processed on-device. Optional private iCloud sync is off until you enable it. When enabled, supported note data and photos sync through your private iCloud database, which Studio AM cannot access. Voice-recording audio remains local to the device.
1.3 Microphone & voice
Dictation turns speech into text on-device without retaining the dictated audio. If you deliberately start a voice memo, Second Brain stores that recording on the device so you can play it back and transcribe it. A user-started recording may continue in the background; the app never starts recording by itself.
1.4 Analytics
Studio AM collects no analytics or usage data. Second Brain contains no
analytics SDK, tracking, telemetry, or advertising. Hugging Face is not
an in-app analytics service, but it may process metadata generated when
the app directly requests a model or natural-voice file. The
conservative App Privacy disclosure for those requests is CoarseLocation,
OtherDiagnosticData, and ProductInteraction;
linked=true; tracking=false; purposes
AppFunctionality, Analytics, and Other. Studio AM receives no Hugging Face analytics or tracking data.
2. On-device processing & network use
Second Brain uses Apple's built-in on-device model where available. On other supported hardware, setup may directly download one immutable on-device model from Hugging Face: the pinned Gemma artifact, or the pinned LFM bundle. The optional Kokoro natural voice is attributed to the Kokoro base model; the files the app actually downloads come from the pinned Kokoro deployment. The LFM revision identifies the distributed bundle; we do not claim that it cryptographically maps to separate source-weight files. We likewise do not claim a conversion or cryptographic mapping from the Kokoro base model to those deployment files.
These are fixed-file HTTPS requests. They contain no note text, transcript, recording audio, question, answer, or other saved app content. Hugging Face can still receive ordinary service metadata such as IP-derived approximate location, diagnostics, and the download interaction. Hugging Face processes that data under its Privacy Policy; Studio AM does not receive it. After download, both model inference and natural-voice playback stay on-device. The app also uses StoreKit for purchase or restore and private iCloud only when you enable sync. If Ask has no grounded answer, tapping Search the web opens the exact question as a DuckDuckGo query in your default browser; Second Brain never sends that question automatically. Links, exports, and shares likewise leave the app only when you choose their destination, whose privacy terms then apply.
3. Notifications
Reminders are scheduled as local notifications on your device. They are created and delivered entirely by your iPhone; nothing is sent to a push server.
4. Purchases
Second Brain offers monthly and yearly auto-renewable subscriptions through the App Store. Eligible new subscribers may receive a 3-day free trial. A retired lifetime product is not sold to new customers but remains restorable for verified previous owners. StoreKit validates access; Studio AM does not receive your payment details.
5. Export and deletion
With an active subscription, Settings offers Markdown and structured JSON exports of note and Ask text. Both omit all media, including photos and recording audio, and are non-restorable records. After a subscription ends, the only export offered in archive mode is the separate complete archive ZIP. It includes structured data and available original photos and recording audio, but it is a non-restorable complete export/data package—not an app backup or restore path. You can delete existing items in the app. Deleting local data does not automatically delete copies you previously exported.
6. Requirements
Second Brain requires iOS or iPadOS 26 or later. Devices with Apple Intelligence use Apple's built-in on-device model. Other supported devices may require a one-time model download. This device capability does not change what Studio AM collects: we still receive none of your note, recording, or AI content.
7. Children's privacy
Studio AM collects no personal information from anyone, including children. There are no Studio AM accounts or ads. Optional private iCloud sync follows the device owner's Apple settings and remains off until the user enables it. A direct Hugging Face download remains subject to the separate provider boundary and policy described in section 2.
8. Changes to this policy
If the app's data practices ever change, this page will be updated and the effective date revised before the change ships.
9. Contact
Questions about privacy: [email protected]