Your vault stays yours.

What we hold about you

Nothing, by design. There is no sign-up, so we have no name, email address or password of yours. Your vault is encrypted on your Mac with keys derived from your passphrase, and we never see the passphrase, the keys or the contents.

If you email us, we have that email. That’s it.

What leaves your Mac, and when

Sync between your Mac and iPhone

If you pair an iPhone, changes travel through a relay we run on Cloudflare. The relay stores and forwards encrypted, signed updates. It never has your passphrase or keys, so it can’t read what’s inside them. Like any web service, it sees the IP address that connects to it. If you don’t pair a device, nothing is synced.

Update checks

Released copies of the app check once a day for a new version, by downloading a small signed list of releases. That request carries your IP address and the app’s version, as any download does. The app doesn’t send a profile of your Mac.

Share links

Nothing is shared unless you create a link. When you do, Brassword encrypts the fields you tick on your Mac and uploads only that encrypted copy to share.brassword.app, which we run on Cloudflare. The key is in the part of the link after the #, which browsers never send to a server, so the relay can’t read what you shared, or even the item’s title.

• Expiry. You choose one view (unopened links still end after 7 days), 1 hour, 1 day, 7, 14 or 30 days. The relay deletes the encrypted copy when the link expires or runs out of views.
• Cancelling. Each item lists its live links. Cancel one there and the relay deletes the copy straight away.
• What the relay can see. That a link exists, its rough size, when it was made and when it expires, and how often it’s opened. It can never see the contents.
• Your IP address. It’s used only to limit how many links one address can create per minute and per day. The relay keeps a daily count under a scrambled form of the address, deleted when the day ends, and keeps no request logs.

Anyone who has the link can open it until it expires or runs out of views, so send it only to the person it’s for. Expiry and view limits are enforced by our relay, not by the encryption itself.

Agents (Gmail and API keys)

Agents is off until you turn it on. It lets AI tools on your Mac, such as Claude Code or Codex, use your Gmail and API keys without ever seeing them. Brassword holds the credentials and makes each request itself.

• Google access you grant. When you connect a Google account, Brassword asks Google for two permissions: gmail.modify (search, read, label, archive and move mail to the bin; it can’t delete mail permanently) and gmail.send (send mail as you).
• Where it goes. Brassword talks to Google directly from your Mac. Your Google sign-in and everything read from Gmail stay on your Mac, sealed under a key from your vault. None of it is sent to us, and we have no server that receives it.
• What an agent receives. Only what it asks for and you’ve allowed: search results, a message’s text, an attachment’s extracted text. Sending, binning and other changes need Touch ID every time. Brassword keeps a log on your Mac of every request.
• The agent’s own provider. An AI tool you connect may send what it receives to its maker (for example Anthropic or OpenAI) under that maker’s terms. That’s between you and them, so only connect tools you trust with that mail.
• Turning it off. Remove an account in Settings › Agents, or remove Brassword’s access in your Google Account’s security settings. Unpairing an agent stops it at once.

Brassword’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We don’t use Gmail data for advertising, we don’t sell it, and we don’t use it to train AI models.

This website

brassword.app runs on Cloudflare. There are no analytics, no advertising and no tracking cookies. Your appearance and motion choices are saved in your own browser and never sent to us. Cloudflare handles the connection, so it processes your IP address to serve the page.

Email to brassword.app addresses is forwarded to us by Cloudflare.

Questions

Ask anything at hello@brassword.app. Security problems go to security@brassword.app, privately.

If this policy changes, we’ll update the date at the top of this page.