Privacy policy

Updated 20 October 2026

Who we are

Bris is an AI assistant in testing, operated by Akkrev Technologies OÜ (Estonian registry code 17519031), registered at Ahtri tn 12, 15551 Tallinn, Estonia. For privacy questions or requests, email contact[at]usebris[dot]com. Akkrev Technologies OÜ is the controller of the personal information described in this policy.

Information we process

To create an account, we process your verified phone number, profile details, invitation or starter-credit payment, and signup status. Historical waitlist records include names, phone numbers, and referral information. We also process account and sign-in records, terms acceptance records, conversations, instructions, attachments, saved memories, drafts, Inbox items, and the sources and status needed to keep your work understandable.

When you connect a service, Bris processes the information needed for the request you make. This can include emails, calendar events, files, documents, spreadsheets, repository data, issues, messages, and account details. For Gmail, Bris also creates a private contact index from correspondent names, email addresses, interaction counts, dates, and message or thread references. The index is used to help find the right people and context.

Connected Calendar, Gmail and Slack can also support bounded background suggestions and email alerts. Bris can keep temporary, quoted relationships between authorized Calendar, Gmail, Drive and Slack items for later chat context. You can pause or forget these relationships in chat; their controls are separate from email alerts and watches you ask Bris to run.

If you connect Oura, Bris can read the wellness data you choose to share, including sleep, readiness, activity, heart rate, workouts and other supported measurements. Relevant data may be processed by AI services to answer your questions or prepare reminders you request, and may remain in your conversation history. Connecting is optional. You can choose data types on Oura’s consent screen and disconnect in Bris at any time. Bris does not provide medical diagnosis or treatment.

Friend invitations, messages and time plans store information intentionally shared between the participating accounts. Friendship does not give another person access to your private memory, files, calendar or connected accounts. If you ask to report a problem, Bris stores the agreed description and account, chat, message, time and version references for private team review. It does not attach your full conversation or files.

If you use Telegram, WhatsApp, or Instagram, we process the messages and account, message, timestamp, linking, and delivery identifiers needed to run those channels. We also process essential session, connection, rate-limit, security, and diagnostic records.

We receive information from you, people who communicate with you through a connected channel, services you choose to connect, and Open-Meteo when Bris looks up a place. Your name and phone number are required to create an account; without them, we cannot provide access. Profile email, saved memory, attachments, channels, and service connections are optional.

Why we use it

We process waitlist, account, profile, conversation, memory, connection, and channel data to take steps at your request and provide Bris under our agreement with you. We process security, rate-limit, delivery, and diagnostic records for our legitimate interests in preventing abuse, protecting accounts, keeping Bris reliable, and showing what happened. We process information when necessary to comply with legal obligations. If we ask for consent for a separate purpose, you may withdraw it at any time. We do not sell your personal information or use it for advertising.

AI and connected services

Bris uses AI services to understand requests and prepare answers. These services may process your messages and the relevant context, saved preferences, attachments or connected information needed for your request. Attachments may be processed to understand their text, images or video. We share the information needed for the work, rather than giving those services unrestricted access to your connected accounts. AI output can be incorrect. Bris does not use AI to make legal or similarly significant decisions about you. Connected-service actions run only when you explicitly request them and the connected account grants the required access.

Service providers and transfers

Bris uses service providers for hosting, storage, AI processing, browser-based tasks, phone verification, and requested weather or location lookups. Depending on the task, these providers may receive relevant messages, context, files, verification details or location queries. Browser-based tasks may involve visiting websites and interacting with them for work or watches you request.

When you choose a connection or messaging channel, Bris exchanges relevant information with that service and the providers that manage its connection. Connected services can include email, calendars, file storage, meeting notes, code repositories, social media, messaging and work-management tools. Those services process information under their own privacy terms.

Some providers may process information outside your country or the European Economic Area. Where data-protection law requires safeguards for a transfer, those safeguards must apply. You can contact us for more information about a relevant transfer.

Storage and retention

Bris stores its records separately for each account. Account and profile records, conversation history, instructions, and associated audit records are kept while your account is active and afterwards only when needed for security, legal obligations, or legal claims. Historical waitlist information is kept while we manage access and until it is no longer needed or you ask us to remove it. Saved memories remain until their chosen expiry or until you ask Bris to forget them.

New Telegram and WhatsApp uploads and saved document extracts expire after up to 30 days unless you ask or confirm keeping the file; older unkept uploads can be removed sooner to make room. Kept files, explicit web uploads and legacy saved files remain until deleted. Voice transcripts remain conversation text after the recording expires. Temporary working summaries expire 10 days after a meaningful update. Provider evidence for context links lasts at most 14 days; the relationships last at most 7 days and never outlive that evidence. Support reports are retained for 90 days. Shared friend messages expire after 30 days and time plans after 15 days.

Drafts expire after 1 to 30 days and Inbox items after 1 to 90 days. Sign-in codes expire after 10 minutes, onboarding sessions after 30 minutes, and normal web sessions after 30 days. Completed WhatsApp job text is cleared when processing ends; settled job records are kept for up to 8 days. WhatsApp quote references become unavailable after 5 days and are removed by the next inbox cleanup; this is separate from conversation history. Hashed waitlist rate-limit records are kept for up to 7 days.

Disconnecting a service stops future Bris access and invalidates context-link recall from that connection. Disconnecting Google removes Bris's connection record and Gmail-derived contact index; the connection provider may retain credentials under its own controls. Information already placed in a conversation, draft, Inbox item, or saved memory remains until that record expires or is deleted separately. A provider may retain its own copies under its privacy terms.

Oura access tokens are encrypted. Disconnecting blocks new Bris reads immediately and requests revocation from Oura; if revocation fails, Bris keeps access blocked and offers a retry. Previously saved conversation or reminder content is not erased by disconnecting.

Cookies

Bris uses essential, secure cookies to complete sign-in and keep you signed in. The current service does not use advertising or cross-site tracking cookies.

Your choices and rights

You can disconnect services, pause email alerts or provider context-link capture, cancel watches, delete files and ask Bris to forget saved information. Forgetting a note or context link does not erase its original conversation or provider item. Depending on the law that applies, you can also ask to access, correct, export, or delete your personal information, restrict or object to processing, or withdraw consent where it applies. These rights may have legal limits.

Email contact[at]usebris[dot]com to make a request. We may need to verify that you own the account. You may complain to the Estonian Data Protection Inspectorate or the supervisory authority where you live or work.

Changes

Bris is under active development. We will update this policy when the service or its data practices change.