Privacy & security

Where your data lives

• Student Portal: account details and probe responses are stored on the server. This is separate from the installed tools. See Student Portal for account controls.
• Website visualization demos: uploaded key files are read in your browser. They are not saved to a student account by the demo.
• The extensions store everything in your browser on your computer.
• The Mac app stores everything in your user folder on your Mac.
• For the installed tools, copies leave your device only when you turn something on: sync, cloud backup, or a cloud AI engine.

What's encrypted

• Important Accounts: encrypted on your device with your PIN as the key. The PIN is never stored.
• Full private sync and cloud backup: encrypted on your device before upload, with a passphrase only you know. Google stores an unreadable file.

Everyday data (notes, tasks and so on) is stored locally but not separately encrypted. It relies on your computer's own security.

Connected accounts, precisely

When you connect Google, BGP asks only for what its features use:

• Gmail: reads recent inbox messages (sender, subject, date, snippet) for the Inbox widget and Your Day Ahead. The only change it ever makes is moving a message to Trash when you click Trash. It never sends mail.
• Calendar: reads your upcoming events. It creates events only for the optional Important Dates → phone reminders setting (Settings → Widget Defaults), and removes them if you turn it off.
• Google Drive: only if you use sync or cloud backup, and only the files BGP creates.
• Your account email: shown in Settings so you know which account is connected. Microsoft works the same way for Outlook mail. Everything flows directly between your browser and Google or Microsoft, never through a BGP server. Disconnect any time in Settings → Connected Accounts, or from your Google account's permissions page.

While our Google verification is in review you may see a "Google hasn't verified this app" screen. It's Google's standard notice for apps under review. Click Advanced → Go to BGP to continue, or wait for verification to finish.

AI engines

A cloud engine (Gemini or Claude) receives your request, such as a question or the mail and calendar details used for Your Day Ahead. The provider's terms apply, with usage billed to your own key or free tier. A local engine keeps everything on your machine. Nothing goes to any AI on its own.

BGP DNA Anywhere

Runs only on sites you allow, reads nothing from pages, sends nothing anywhere. Save to Brain stores only the chat turn you click.

The honest limits

• Lost key, lost data. The Important Accounts PIN and the sync/backup passphrases have no recovery, by design.
• A short PIN is convenient, not bulletproof. Use a longer one for sensitive numbers.
• We can't protect a compromised computer. Don't enter passphrases on a machine you don't trust.
• Sync and backup protect the file, not your Google account. Use a strong password and two-factor there.

Your controls

Turn off any widget · disconnect any account · export or reset everything (Settings → Data) · wipe the Important Accounts vault · remove an extension (its local data goes with it, so back up first).