Privacy policy
Last updated 14 November 2026.
The short version
- Your notes live in your own storage (Google Drive, OneDrive, GitHub or your own server). Loremyr reads and writes them there while you use it, and never keeps a copy.
- Loremyr keeps only what it needs to run your account: your email address, your handle, your settings, and the login it uses to reach your storage, which is encrypted.
- No adverts, no tracking cookies, no analytics, and nothing about you is sold or shared for marketing.
- Loremyr doesn't send your notes to any AI. If you connect Claude, Claude reads what it needs through Loremyr under your own Claude account and Anthropic's terms.
- You can export everything and delete your account at any time.
Who we are
Loremyr is run by an independent developer in the United Kingdom, who is the data controller for the information described here. Questions, requests and complaints: hello@loremyr.com.
What Loremyr keeps, and why
All of it is held on Cloudflare, which hosts Loremyr. The database is in Western Europe.
| What | Why | How long |
|---|---|---|
| Your email address, handle, the name you give your AI, and when you joined | To sign you in, and so friends can find you by handle | Until you delete your account |
| Sign-in sessions and one-time codes (stored only as scrambled hashes) | To keep you signed in, and to check sign-in codes | Codes: minutes. Sessions: until they expire or you sign out |
| Which storage you chose, its account name, and the login token for it (encrypted) | To read and write your notes there for you | Until you disconnect it or delete your account |
| Your devices for notifications, and app keys (stored as hashes) | To send reminders and notes to your devices | Until you remove the device or delete your account |
| App settings: which hubs are open, Brain Core's look, your caretakers and what they remember, reminder settings and your time zone | So every device shows your brain the same way | Until you delete your account |
| Text and files you send between your own devices | To deliver them | Up to 14 days, or until you clear them |
| Friends, shared hubs, junctions and who's in them, and a log of who changed what in a shared hub | To run sharing | While the share exists (the log keeps its newest 300 entries) |
| The outline of a junction's forum: who posted when, what's been read, @mentions | To run the forum | While the junction exists |
| A forum post's words, a topic's title and pictures | Only while they're on their way to everyone's own copy | Until every member's copy has them, then cleared |
| A snapshot of your map's shape for friends (dots, colours and sizes: no names or text) | So friends see the shape of your map, if you allow it | Until you turn it off or delete your account |
| Your IP address, against a counter | To stop abuse of sign-in | About two hours |
| Counts of errors (never note contents) | To fix problems | 30 days |
Loremyr doesn't keep your notes, their titles or their files. Its logs record only warnings about the service itself, never what's in your notes, and drop the details from web addresses.
Your storage
You choose where your brain lives, and that service's own privacy policy applies to what's stored there. Loremyr asks each one for as little as it can:
- Google Drive: only the files Loremyr creates or that you open with it (Google's
drive.filepermission), plus your email address. Not the rest of your Drive. - OneDrive: only Loremyr's own app folder, plus your basic profile.
- GitHub: only the repository you choose when you install Loremyr's GitHub app.
- Your own server (WebDAV): the folder you give it.
Google user data
Signing in with Google gives Loremyr your email address only. Google Drive access is used only to read and write your brain's files for you. Loremyr's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. It isn't used for adverts, isn't sold, and isn't read by people except with your permission, for security, or where the law requires.
Claude and other AI
Loremyr itself doesn't send your notes to any AI service. If you add Loremyr to Claude as a connector, Claude reads and writes your brain through Loremyr when you ask it to, as part of your own Claude account. What Claude does with your conversations is covered by Anthropic's terms and privacy policy, not this one.
Sharing with friends
When you share a hub or join a junction, the people there can read what's shared, and may copy notes into their own brains if the share allows it. Each member keeps their own copy of a junction's forum in their own storage, so posts stay with them even if you leave or delete your account.
Loremyr emails you only sign-in codes, and an invitation if someone invites you. They're sent through Cloudflare. There are no marketing emails. Reminders come as notifications on your devices, not by email.
Cookies
Only the ones needed to sign you in and keep you signed in (their names start __Host-). No analytics, advertising or tracking cookies, so there's no cookie banner to click.
Your rights
Under UK data protection law (the UK GDPR) you can ask for a copy of your information, have it corrected, have it deleted, or object to how it's used. You can export everything yourself from your account page and delete your account there too; deleting it removes everything Loremyr keeps about you. Your notes stay in your own storage, where they always were. For anything else, write to hello@loremyr.com. If you're unhappy with the answer, you can complain to the Information Commissioner's Office.
Loremyr uses your information to provide the service you signed up for (a contract with you), and to keep it safe and working (its legitimate interests).
Children
Loremyr isn't meant for anyone under 13.
Changes
If this policy changes, the date at the top changes too, and anything significant will be shown in the app first.