Privacy Policy

This policy explains how Brevosi handles personal information. Brevosi is operated by Lucas Knight, a sole trader based in Perth, Western Australia ("Brevosi", "we", "us"). It covers the Brevosi iOS app, the servers we host on your behalf, and this website.

By creating an account or using Brevosi, you agree to this policy. If you do not agree, do not use the service.

1. Who this policy applies to

Brevosi is a small business operator for the purposes of the Privacy Act 1988 (Cth). We nonetheless aim to handle personal information consistently with the Australian Privacy Principles, and we treat this policy as binding on us regardless of whether the Act compels it.

Brevosi is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

2. What we collect

Information you give us

• Account identity. Your email address and, where your sign-in provider returns it, your name. If you use Sign in with Apple and choose to hide your email, we receive only Apple's private relay address.
• Content you create. The prompts you write, the servers, tools, resources and prompts you build, their generated code and configuration, and any data those servers store while running.
• Anything you send us. Support requests, bug reports and feedback, including whatever you choose to put in them.

Information we generate

• Service records. Build history, deployment status, and records of calls made to the servers we host for you, including timestamps, latency, status codes, tool names, and request and response payloads where needed to run and debug the service. This is what powers the Activity screen in the app.
• Technical data. IP address, device and operating system version, app version, and log data generated when you or a client connects to us.

What we do not collect

We do not embed advertising, attribution or third-party analytics SDKs in the app. We do not collect your location, contacts, health or financial information, and we do not track you across other companies' apps or websites.

3. Why we use it, and the latitude we take

We may use the information described above for any of the following:

• Operating, hosting, securing and supporting the service and the servers you create.
• Authenticating you, enforcing limits, preventing abuse, and investigating suspected misuse or security incidents.
• Debugging, monitoring, measuring, and improving Brevosi, including evaluating and improving the quality of the build agent's output.
• Producing aggregated or de-identified statistics and insights. Once information has been aggregated or de-identified so that it no longer reasonably identifies you, we may use, retain and publish it for any purpose, including describing or promoting the service.
• Sending you service messages, and, where you have not opted out, occasional product updates. You can opt out of the latter at any time.
• Complying with law, and establishing, exercising or defending legal claims.
• Any other purpose that is related to the above and that you would reasonably expect, and any purpose you consent to.

Your content and the build agent. Prompts you write and code produced for you are sent to third-party AI model providers so the build agent can do its job. We may review your prompts, generated code and server activity where it is necessary to run, secure, debug or improve the service, or to respond to a support request or a report of misuse.

4. Who we share it with

We do not sell personal information. We disclose it to:

• Service providers, who process it on our behalf and under our instructions. Today these include our cloud and database host (Convex), the AI model provider or providers behind the build agent, our sign-in providers (Apple, Google), and email delivery and error monitoring providers. The specific providers may change over time as the service evolves.
• Anyone you direct us to, including any MCP client you connect to a server you have made public. A server you publish, and its tool definitions, are public by design.
• Law enforcement, regulators and other parties where we reasonably believe disclosure is required by law, or is reasonably necessary to protect the rights, property or safety of Brevosi, our users, or the public.
• A buyer or successor, if Brevosi or substantially all of its assets are sold, merged or otherwise transferred. Your information may be one of the transferred assets, and the recipient may continue to use it in line with this policy.

5. Overseas storage and processing

Brevosi is operated from Australia, but our providers store and process information overseas, primarily in the United States, and potentially in any country where a provider we use operates. By using Brevosi you consent to your information being transferred to, stored in and processed in those countries.

We take reasonable steps to use reputable providers, but privacy laws in those countries may differ from Australian law, and to the extent permitted by law we are not accountable for a provider's acts or practices once information has been transferred with your consent.

6. Security

We take reasonable steps to protect information from misuse, loss, and unauthorised access, including encryption in transit, credentials held in the device keychain, and access controls on our infrastructure.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for the code your servers run, for what you put into them, and for who you share their endpoints with. Do not store credentials, secrets, health information, payment details or other sensitive data in a Brevosi server.

7. Retention and deletion

You can delete your account at any time from Settings, Delete account in the app. Doing so deletes your account, the servers you created, and their hosted deployments.

After deletion, residual copies may persist in backups, logs and provider systems for a period, and we may retain information for as long as we reasonably need it to comply with legal obligations, resolve disputes, enforce our terms, or prevent abuse. Aggregated and de-identified information is not affected by deletion.

8. Access and correction

You can view and correct most of your information in the app. You may also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@brevosi.com. We will respond within a reasonable time, normally 30 days.

We may decline a request where we are permitted to do so, including where it would be unreasonable, would affect another person's privacy, or where the request is manifestly unfounded or repetitive. If we decline, we will tell you why. We may ask you to verify your identity first, and we may charge a reasonable fee for access where the law allows it.

9. Cookies and this website

The Brevosi website uses only what is needed to serve the site. We do not run advertising cookies or third-party trackers on it. Fonts are loaded from Google Fonts, which will see your IP address.

10. Changes

We may change this policy at any time by publishing an updated version at brevosi.com/privacy with a new "last updated" date. Changes take effect when published. If a change is material, we will take reasonable steps to notify you, such as an in-app or email notice. Continuing to use Brevosi after a change means you accept the updated policy.

11. Complaints and contact

Privacy questions or complaints go to privacy@brevosi.com. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

12. Governing law

This policy is governed by the laws of Western Australia and the Commonwealth of Australia. You submit to the non-exclusive jurisdiction of the courts of Western Australia. Nothing in this policy excludes, restricts or modifies any right or remedy you have under the Australian Consumer Law or the Privacy Act 1988 (Cth) that cannot lawfully be excluded.