Brainverse is a small, invite-only notes app made by Rob Huttinga (Mooi Bekeken, Nijmegen, the Netherlands). It is in beta and free. This page says what it keeps about you and why, so you can decide whether you want to put your thoughts in it.
Your notes. Everything you type: note text, comments, the life area, project and priority you give a note, whether it is done, and when it was created or changed.
Your Google account basics. When you sign in with Google we receive your email address, your name and a permanent account id from Google. We keep those three things. We do not receive your password, your contacts, your calendar or anything else in your Google account. The calendar button only opens Google Calendar in a new tab with a prefilled event; nothing is written to your calendar by us.
Your settings. Which view you last used, which rails are collapsed, and the projects you created.
If you are not on the list yet. When someone signs in who has not been invited, we keep their email, name, Google id and the times they tried, so Rob can see who is waiting. That record is removed when they are added or when they delete their account.
There is no analytics, no advertising, no tracking pixel and no third-party script on the page. The only cookie is the one that keeps you signed in.
To run the app you asked to use: show you your own notes and nobody else's, keep you signed in, and let Rob manage who gets in. That is the legal basis (performing the service you requested). Nothing is used for any other purpose, and nothing is sold or shared.
Notes and account data live in a Postgres database hosted by Neon in Frankfurt, Germany (EU). The app itself runs on Vercel, also in Frankfurt. Both companies process data on Rob's behalf under their standard data processing agreements. Your data does not leave the EU for storage.
Until you delete it. Deleting a note removes it from the database right away. Deleting your account (in the menu under your name) removes all your notes, settings, your account record and your invite in one go. Database backups made for safety are kept for a limited time and then overwritten.
You can see everything we hold about you at any time: the menu has an Export button that downloads it all as one file. You can delete it all yourself with Delete account. For anything else (a correction, a question, an objection) message Rob directly; you have his number, or reach him on LinkedIn or at hallo@mooibekeken.nl. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Brainverse is a beta run by one person. Please export your notes now and then. If the database were ever lost or leaked, Rob will tell everyone who is affected personally and without delay, and report it to the Autoriteit Persoonsgegevens where the law requires it.