Privacy

Short version. I do not want your data. There are no accounts, no passwords, and no tracking pixels. Your library stays on your computer, apart from the specific pages the AI has to read to build a card.

What the website collects

This site is static and has no analytics, no advertising trackers, and no cookies of its own. Cloudflare serves it and keeps routine traffic logs (IP address, user agent, requested path) the way any web host does. Nothing on this site profiles you.

What happens when you buy

Checkout is handled entirely by Whop as the merchant of record for every Brassmark sale, meaning Whop is the seller on your receipt and collects and stores your payment details on its own systems under its own privacy policy. I will never see, handle, or store your card number.

What I receive from a completed order is the minimum needed to give you what you paid for: your order identifier, the product bought, and the email address on your Whop order, which is where your key goes. I use that email to send you your key and, if you write to me, to answer you. I do not sell it, rent it, or add you to a marketing list. The key email itself goes out through Resend, a transactional email provider, and a copy of each key email lands in Brassmark's own inbox so I can help if yours goes missing.

There is no account

Your license key is your identity. There is no sign-up, no password, and no profile to breach. The key is stored on my server only as a one-way hash, so a copy of my database would not let anyone use your key or work out what it is.

Your books and your cards

The app runs on your machine, and your files live on your machine. Your library is not uploaded anywhere, not indexed on a server, and not readable by me.

The exception is the part that has to leave: to write a card from a page, the AI model has to read that page. When a generation runs, the specific pages being worked on are sent to the AI provider for that purpose. Nothing else from your library is transmitted, and the library search makes no model call at all.

Finished decks are written to your disk in Anki's own format. They are yours, they work without me, and they keep working if this company disappears.

Usage events, and how to switch them off

I want to be specific here rather than vague, because this is the one thing the app sends that you did not ask it to send.

The app keeps a local record of what it did, and it uploads a thin anonymous version of that record to a server I run at elephant.brassmark.co. It is switched on by default. What goes up is the shape of a run and not its contents: a random install identifier that is not tied to your name or email, which step ran, how long it took, how many cards came out, roughly what it cost, and whether it failed. What never goes up is the text of your cards, the names or contents of your files, your API key, or anything you typed.

I use it for one thing, which is finding out which parts of the pipeline break on real machines that are not mine. If you would rather send nothing, email me and I will switch your install off. I would also rather be told that this should be a checkbox in the settings, because it should be, and it is on my list.

Children

These are study tools for medical students and physicians. They are not directed at children under 13, and I do not knowingly collect information from them.

Your requests

Email hello@brassmark.co and ask me what I hold on you, ask me to delete it, or ask me a question about any of the above. A real person reads it, because there is only one of us.

Last updated 4 September 2026