INFORMATION & CONTROL

Privacy policy

Second Brain Intake is a private, owner-operated desktop application. This policy explains its optional Google Drive connection and how information is handled.

Prepared 18 October 2026. Connection features described below apply when enabled and authorized by the owner.

Google Drive access

The proposed connection requests https://www.googleapis.com/auth/drive.readonly. This permits viewing and downloading files throughout the authorized Google account. The installed reader limits its automated listing to the designated intake folder, but that code restriction is not a folder-level OAuth permission.

The reader checks file identifiers, names, types, modification times, versions and available checksums. Separately authorized processing workflows may read selected source contents, preserve source snapshots and create derived notes. This connection does not change Drive originals.

Local processing and external services

The intake runtime and knowledge vault are stored on the owner's devices. Processing records distinguish sources, review decisions and verified outputs. The knowledge vault uses the owner's configured Obsidian Sync service, so local storage does not mean information never leaves the device.

Google receives authenticated API requests. When the owner authorizes AI-assisted processing, selected source content may be sent to the configured AI provider, such as OpenAI. Those services apply their own terms and account settings. The application does not sell Google user data, use it for advertising, or train its own generalized AI models.

Credentials and security

The prepared Windows connection stores its refresh credential outside the vault and source repository, encrypted with Windows CurrentUser DPAPI. Directory access is restricted to the Windows user and SYSTEM. OAuth uses the system browser, PKCE and a loopback callback; the application does not collect the owner's Google password.

Access tokens are used for Google API requests and are not intentionally included in logs, public pages or source control. These safeguards reduce risk but do not guarantee absolute security. A failed or revoked connection must be reported as unavailable rather than as verified coverage.

Retention and removal

Source metadata, snapshots, processing history, backups and derived notes remain until the owner removes them under their retention practices. Disconnecting Google does not automatically delete existing local or synchronized copies. Removing a local copy may leave copies in backups or synchronization history.

The owner can revoke authorization in Google Account connections and remove the local encrypted credential. Revocation prevents further authorized API access once existing access is no longer valid.

This public website

This site contains general application information only. It does not provide access to private sources, processing ledgers or notes. These pages contain no analytics scripts, advertising, tracking cookies, forms or embedded third-party resources. The hosting provider may process ordinary request information, such as IP addresses and browser details, to deliver and secure the site.

Google API data use

Second Brain Intake's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Operator and updates

This application is maintained by its owner for personal use. The support email shown on Google's consent screen identifies the operator. This policy should be reviewed before access permissions, external processing or retention practices change. No private source details are published on this site.