Brow

Draft. The parts marked like this must be filled in before Brow launches.

Privacy Policy

Last updated 3 November 2026

  • Brow runs on your Mac. Without the AI features, nothing you dictate or write leaves your Mac.
  • With Brow Pro, the text you ask Brow to write or polish goes to Anthropic through Brow’s relay, or straight to OpenAI or Anthropic if you use your own key. Neither we nor the relay keep it.
  • This website collects only what you type into the beta sign-up form. It uses no cookies and no tracking.

Who is responsible

[Company name, S.L.], NIF [NIF], [registered address], Spain (“we”). Write to us about privacy at [privacy email].

The Brow app

  • Speech. Brow listens only while you hold fn and uses Apple’s speech recognition. When your Mac supports it, recognition happens on the Mac itself; otherwise Apple processes the audio under Apple’s privacy policy. Brow keeps no recordings and no transcripts, except a note you ask it to keep by saying “Brow, remember …” (see Notes below).
  • AI features (Brow Pro). When you use them, the text you dictate, the text you have selected and, for summaries, the file you ask about are sent from your Mac to an AI service. With Brow AI, which is included in Brow Pro, it passes through our relay on Cloudflare to Anthropic (Claude), using our Anthropic account; the relay hands the text on and the reply back without storing or logging it. If you add your own key instead, it goes directly from your Mac to that provider, OpenAI (ChatGPT) or Anthropic (Claude). The AI provider handles the text under its own terms and privacy policy and may process it outside the EU. You can turn AI off completely, or only in specific apps, in Brow’s menu.
  • Your voice with Brow AI. With Brow AI on, Brow keeps a copy of what you say in memory while you hold fn. When you let go, it is sent through our relay to ElevenLabs (Scribe), on servers in the EU, for a more accurate transcription, and the copy is deleted from your Mac straight away. Turn on Keep My Voice on This Mac in Brow’s settings to use only Apple’s recognition, so your voice never leaves your Mac.
  • The relay’s counter. To prevent misuse, the relay counts requests per beta code per day. It keeps only a fingerprint of the code and the date, and deletes them after two days.
  • Legal basis and transfers. We send the text because you asked Brow to do something with it: that is how we provide the service you use (Art. 6(1)(b) GDPR). Anthropic, Cloudflare and ElevenLabs are based in the United States; ElevenLabs transcribes on EU servers [confirm EU data residency on your ElevenLabs plan]. The transfer is protected by [EU-US Data Privacy Framework / Standard Contractual Clauses]. Anthropic keeps requests for [retention period] to detect misuse and [does not use them to train its models]. ElevenLabs keeps transcription logs for [retention period].
  • Sensitive information. Don’t use the AI features on patient records or other health data unless your agreement with the AI provider allows it. Turn AI off in the apps where you handle such data.
  • What Brow Should Know. If you choose files or folders in Brow, or add a website (which Brow reads directly from your Mac and refreshes once a week), their text is read on your Mac and sent along when Brow writes for you, answers a question or runs a mode, so it can use your tone of voice and facts. Plain dictation never includes it. Only choose files without patient data or other sensitive information.
  • Notes. Brow keeps a note only when you start with “Brow, remember …” (“Brow, husk …”): the words after it, the date and time, and the name of the app that was in front. Nothing else you say is kept. Notes are stored only on your Mac, never on our servers, and you can delete one or all of them at any time under What Brow Knows › Notes. When you ask Brow a question, the notes from the last 30 days are sent along with it to the AI service described above, so it can answer from them, and the answer shows which note it used. Don’t keep patient data or other sensitive information in notes.
  • Replying to mails. When you are in a mail app and ask Brow to reply (“Brow, reply …”), to run one of your own modes, or to answer a question, Brow reads the text of the mail open in front of you on your Mac and sends it along with your instruction, so the reply fits the mail. It is read only when you ask Brow, never for plain dictation, and is not stored on your Mac or by us. The mail contains personal data about its sender and anyone else in it; you decide when to send it, and Brow processes it on your behalf for this one reply. Brow never sends a mail itself: the reply is written into the reply field for you to read, change and send. Don’t use this on mails with patient or other health data. Mails can contain hidden text meant to steer an AI; Brow tells the AI to ignore instructions in a mail and not to include your internal information unless you ask, but always read the reply before you send it.
  • Hearing names right. To hear names and terms correctly, Brow picks out names (capitalized words, product names) from the text field you dictate into, the mail you're answering and what you gave Brow under What Brow Knows. Only this short list of words is used as a hint for speech recognition and the AI clean-up; the text itself isn't stored or sent. When you change a word Brow just typed (for example “Loverball” to “Lovable”), Brow looks at the same field shortly after and remembers the word pair on your Mac, so it gets it right next time. You can turn this off under Settings › Learn From My Corrections, and remove learned words under Words.
  • Your API key is stored in the macOS Keychain on your Mac and is only ever sent to the provider it belongs to.
  • Kept on your Mac only: your clipboard history (cleared when you lock the screen or the Mac sleeps), the Shelf, saved texts, modes, reminders, notes and settings. None of it is uploaded.
  • Diagnostics. Brow keeps a short local log of timings and which way each command went. It never contains what you said or wrote. It leaves your Mac only if you attach it to a feedback mail yourself, and Brow removes even single heard words before attaching it.
  • Usage counts. Brow counts, on your Mac, how often each feature is used, how much AI it used (in tokens), and on which days you used Brow. Only numbers and dates, never text. They are included in a feedback mail you choose to send, and you can delete them before sending.
  • Feedback. If you send us feedback, we receive your email address and your message, and use them only to reply to you and improve Brow.

This website and the beta sign-up

  • What we collect: your name, email address, what you work with, whether you have a Mac with macOS 13 or later, and the language of the page you signed up on.
  • Protection against automated sign-ups: for two minutes we keep a salted, shortened fingerprint of your IP address to limit how many sign-ups can come from one place. Your IP address itself is not stored.
  • Why: to invite you to the beta, send you your beta code and ask what you think of Brow.
  • Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by replying to any of our emails or writing to [privacy email].
  • How long: until the beta ends, and no longer than 12 months after, unless you become a customer.
  • Who helps us: Cloudflare (which hosts this website and stores the sign-ups), our email service [email provider], Cloudflare (which runs the Brow AI relay), Anthropic (the AI behind Brow AI) and ElevenLabs (the transcription in Brow AI). They process data only on our instructions under a data processing agreement.
  • Fonts: the main page loads fonts from Google Fonts (Google Ireland Ltd.), so Google receives your IP address when the page loads. This legal page loads nothing from other servers.
  • Cookies: none, and no analytics. Your chosen language is remembered in your browser’s local storage and never leaves your device.

Your rights

You can ask to see, correct or delete your data, restrict or object to how we use it, take a copy of it, and withdraw your consent. Write to [privacy email]; we answer within one month. If you think we handle your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos.

Children

Brow is not meant for children under 14, and we don’t knowingly collect their data.

Changes

If we change this policy, we update the date above, and for important changes we tell beta testers by email.