Privacy Policy

This policy covers two things: the Bramwell app (a Home Assistant add-on made by Bramwell Technologies LLC, a Maryland, USA company) and this website, bramwell.app. It is written to be read, not skimmed past. If anything is unclear, write to [email protected] and a person will answer.

The app: your data stays home

No telemetry, no analytics. The Bramwell app does not report usage, behavior, diagnostics, or anything else back to us. There is no analytics library in it and no tracking of any kind. What happens in your home stays on your hardware.

The Free tier phones nobody. If you run Bramwell without a license key, the app makes zero calls to Bramwell servers. Not on install, not on startup, not ever.

Paid tiers check their license — and that's all. A paid install contacts our license server only to activate and validate its license. That request carries the license key, an installation identifier, and the app version. Nothing else: no usage data, no home data, no device names, no chat content.

Your conversations go to your AI provider, not to us. Chat and voice requests are processed locally on your hardware. The content is sent to exactly one external place: the AI provider you configured (for example Anthropic, OpenAI, or Google), using your own API keys, under your own account and that provider's terms. Bramwell Technologies is not in that path and never receives, stores, or sees your conversations or your voice.

Your API keys stay on your device. They are stored encrypted at rest on your own hardware and are never transmitted to Bramwell.

Cameras: event metadata only. If you connect a Frigate camera system, Bramwell receives event metadata only — for example, "person detected, driveway, 6:12 pm". It does not receive images, video frames, or face data.

Deleting your data. The in-app account-deletion flow hard-deletes the data Bramwell holds about you and issues a signed deletion certificate listing what was removed. The one documented exception — an agent action audit log retained for 1 year as dispute evidence — is explained in the Profile Data Privacy Notice. You can also request deletion any time by email: [email protected].

This website

Analytics. The only analytics service this site uses is Plausible: cookieless, aggregate page-view counts only, no personal data collected, no advertising trackers, no cross-site tracking. We set no cookies.

Hosting. The site is served by Cloudflare Pages. Like any host, Cloudflare processes standard request data (such as your IP address and the page requested) to deliver the site to you.

Fonts. The homepage loads its typefaces from Google Fonts, which means your browser requests those font files from Google's servers, and Google receives your IP address and browser details for that request. The legal pages you are reading now load no third-party resources at all.

The waitlist. When you join the waitlist we store four things: your email address, the signup source tag (for example a campaign code from the link you followed), a timestamp, and a country code derived by Cloudflare from your IP address — the IP address itself is not stored. This lives in Cloudflare's KV storage and is used for exactly one purpose: telling you about Bramwell's availability and launch. We keep it until we have contacted you about the launch, or until you ask us to delete it — email [email protected] and it's gone. It is never sold, shared for marketing, or added to any other list.

Purchases

Purchases of paid tiers are processed by Lemon Squeezy, our merchant of record. Your payment details go to Lemon Squeezy and are handled under their privacy policy; Bramwell receives the order details and license information — never your card number.

Detailed notices

Two feature-specific notices sit alongside this policy:

• Profile Data Privacy Notice — the notice-at-collection for the onboarding profile on paid tiers: every field, why it exists, how long it's kept, and how to delete it.
• Consumer Health Data Privacy Policy — a separate policy required by Washington's My Health My Data Act and Maryland's Online Data Privacy Act, covering the optional medical-context field on the Cloud Pro tier.

What we never do

• We do not sell your personal data. Not to advertisers, not to data brokers, not to anyone. Not the technical "sale" definition under CCPA/CPRA, not in any sense.
• We do not run advertising and there are no advertising trackers in the app or on this site.
• We do not collect data the product doesn't need. The lists above are exhaustive: if it isn't named here or in the detailed notices, we don't have it.

Your rights

You can ask what we hold about you, ask for a copy, and ask for it to be deleted — through the in-app deletion flow or by email to [email protected]. We honor these requests for everyone, regardless of which state or country you live in. State-specific rights (California, Texas, Maryland, Washington, and others) are detailed in the notices above.

Changes to this policy

Updates are posted on this page with a new effective date. Material changes are announced by email to the people they affect before they take effect.

Contact

Privacy questions, requests, and complaints: [email protected].

Bramwell Technologies LLC · Maryland, United States