Legal
Privacy Policy
The short version: we don't collect anything by default. Recordings, transcripts, and summaries stay on your device. Anything you do choose to share with us (your email if you contact us, an opt-in error report) is described below in plain language.
Last updated:
Section 01
Summary
NeuroBridgeEDU is a local-first desktop application. The default privacy posture is: nothing leaves your device unless you explicitly choose to send it.
This page describes what data we touch, how we touch it, and the rights you have under the EU General Data Protection Regulation (GDPR). It applies to both the desktop application and to the marketing website at neurobridgeedu.eu.
The data controller is Emanuel Covasa, trading as NeuroBridgeEDU. You can contact the controller at contact@neurobridgeedu.eu.
Section 02
What we collect
Desktop app — what stays on your device
The following are stored locally in a SQLite database in your OS application support directory and are never sent to us:
- Audio recordings you make (saved as WAV files alongside the database).
- Transcripts generated by the on-device Whisper model.
- Summaries generated by the on-device Mistral / EuroLLM models.
- Your settings, including chosen models, language, and reading-style preferences.
- API keys for cloud providers (encrypted with AES-256 before being written to disk).
Desktop app — opt-in error reports
If you opt in during onboarding (it's off by default), the app may send anonymous error reports when something crashes. Each report contains: a stack trace, the app version, the OS version, and an anonymous installation ID. Reports never contain your audio, transcripts, summaries, or any personally identifying information.
Website — what we log
The marketing site uses Rybbit, a privacy-friendly analytics service hosted on European infrastructure. It records aggregate page views, referrer hosts, and rough geography (country level). It does not set cookies that identify individual visitors, does not fingerprint browsers, and does not track you across sites.
Contact form / waitlist
If you submit the contact form or the Pro waitlist form we receive the fields you typed: your name, email, role, and (optionally) institution. We use this only to reply to you. Waitlist data is also used to email you once when Pro launches; you can unsubscribe in one click.
Section 03
How we use it
The data we receive is used for these purposes only:
- Replying to your message. If you wrote to us, we reply.
- Telling you when Pro is ready. One launch email to the waitlist; nothing else.
- Diagnosing crashes. If you opted into error reporting, the trace helps us fix the bug.
- Understanding website traffic. Aggregate analytics tell us which pages are useful and where to focus.
We do not use your data for advertising, do not sell or rent it to anyone, and do not use it to train AI models.
Section 04
Your rights under GDPR
Under the GDPR you have the following rights with respect to data we hold about you:
- Right of access — ask us what data we have about you and we'll send you a copy.
- Right to rectification — ask us to correct any data that's wrong.
- Right to erasure — ask us to delete your data (the "right to be forgotten").
- Right to restrict processing — ask us to pause processing your data while a question is being resolved.
- Right to data portability — get a machine-readable copy of your data.
- Right to object — object to specific processing activities, including marketing.
- Right to lodge a complaint with the Irish Data Protection Commission (or your local supervisory authority) if you believe we've handled your data improperly.
To exercise any of these rights, email contact@neurobridgeedu.eu. We respond within 30 days.
Section 05
Data transfers
We are based in Ireland and store any data we receive on European infrastructure (Rybbit analytics is hosted in the EU; n8n automations on emmi.zone run on EU servers).
If you choose to use cloud AI providers (Mistral Cloud, OpenAI, Anthropic, Google Gemini, or self-hosted Ollama), the content you send goes directly from your device to that provider — we don't intercept or proxy it. Each provider has its own privacy policy and data-residency story; please review the one(s) you opt into.
Section 07
Contact for privacy questions
For any privacy-related question, complaint, or rights request, email contact@neurobridgeedu.eu. Please mention "Privacy" in the subject line so we can route it appropriately.
If you're not satisfied with our response, you can lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.