There is no Brownie server. Here is what that means, precisely.

What stays on your Mac

Everything Brownie reads: your messages, mail, notes and files. The small model that reads them runs on your GPU. The notes it writes live in a folder on your disk. The cards, the loops, the recipes you teach Hands — all local, in plain files and a SQLite database you can open.

What leaves, and to whom

If you configure a brain — your own OpenAI or Anthropic key — Brownie sends it summaries the reader wrote: a few sentences per item, never the item. Those go directly from your Mac to your provider under your key; Brownie has no server in between. The “What left your Mac” screen keeps every request, byte for byte, for 30 days. Choose “This Mac only” and the reader doubles as the brain: nothing leaves at all.

Sensitive things

Anything the reader marks sensitive — identity numbers, card numbers, passwords, medical records — is dropped on sight: no note, no card, no log line containing it. A second, rule-based check catches the common formats even when the model misses. You can widen the definition of sensitive in Settings → Privacy.

Other apps reading your notes

Off by default. When you turn it on, MCP apps like Claude Desktop start Brownie themselves and ask it for notes over a local pipe. Nothing listens on a port; nothing is reachable from the internet. Every question and the notes it got are logged for you.

Accounts, telemetry, crash reports

None. There is no sign-up, no analytics, no crash reporting. The only network calls Brownie makes are to the model provider you configured, to Google for Gmail if you signed in, to Telegram if you signed in, and to download the reader model once.

Deleting everything

Panic wipe (Settings → Privacy, or the menu bar) erases the notes, cards, loops, recipes, logs, sign-ins and keys in one hold. Uninstall removes the app, the helper and the model. There is no copy anywhere else to ask about.

Verify it

Brownie is open source under the AGPL-3.0. Each of these statements has a test in the repository, and the send log lets you check the one that matters most every morning.