Privacy Policy

Effective Date: June 4, 2026

This Privacy Policy explains how Bright Worldwide, LLC ("Bright", "we") collects, uses, and protects your information when you use the Bright service ("Service").

1. Summary

Bright helps you understand how you spend your time and who you spend it with. To provide insights, we read certain Google Calendar, Gmail, and Google Contacts data and store limited metadata. We aim to keep this policy clear and simple.

2. Data We Collect

Data You Connect via Google OAuth

When you connect your Google account, we request permission to read:

• Calendar event metadata (titles, attendees, timestamps)
• Gmail email metadata (subject lines, sender and recipient addresses, dates, and message IDs — not email body content)
• Google Contacts data (names, email addresses, and profile photos)

Bright is read-only. We never write to or modify your Google data.

We do not access:

• Your Google password
• Email body content or attachments
• Files, documents, or photos

Data Bright Stores

To operate the Service, we store:

• Calendar event metadata
• Gmail email metadata (subject, sender, recipients, dates)
• Contact fields (name, email, phone)
• Your Bright account profile
• Email delivery records for login and notification emails (retained by Mailgun)
• Basic analytics data (page views, device type, etc.)

Data We Do Not Collect

• Email body content or attachments
• Calendar attachments or meeting bodies
• Location data
• Sensitive personal data categories

3. How We Use Your Data

We use your data to:

• Provide insights about your time and relationships
• Display your communication history with contacts (using Gmail metadata)
• Enrich contact profiles with names and photos from Google Contacts
• Send daily summaries or reminders
• Maintain and improve the Service
• Ensure security and fix bugs

We do not sell your personal data or share it for advertising purposes.

AI-Powered Features

Bright offers optional AI-powered features, such as note summarization, powered by Anthropic (Claude Sonnet 4.6). These features are opt-in only. No data is sent to Anthropic unless you have enabled AI features in Settings → AI. When enabled, the relevant content (e.g., the text of a note) is transmitted to Anthropic solely to generate a response and is not used to train their models.

4. Google API Limited Use Disclosure

Bright's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide and improve Bright's core features as described in this policy.
• Google user data is not used for advertising or to serve ads.
• Google user data is not transferred to third parties except as necessary to operate the Service (e.g., our hosting provider), and only with your permission.
• We do not allow humans to read your Google data unless you explicitly request support that requires it, or it is required for security purposes.

5. Third-Party Service Providers

We use trusted providers to operate Bright:

6. Security

We use industry-standard measures to protect your data, including HTTPS, OAuth authentication, encryption in transit, and limited employee access. No system is perfectly secure, but we work hard to safeguard your information.

7. Data Retention

We retain your data only as long as needed to provide the Service. If you delete your account, we will remove your stored data within 30 days, except where retention is legally required.

8. Your Rights

You may:

• Request a copy of your data
• Request deletion of your data
• Revoke Google OAuth access at any time
• Unsubscribe from non-essential emails

For any requests, contact us at [email].

9. Children's Privacy

Bright is not intended for individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy over time. If changes are significant, we will notify you via email or inside the app.

11. Contact

If you have questions, contact us at [email protected].