Privacy Policy
What Briefly knows about you, who else sees it, and how to get rid of it.
The short version
Briefly is a small app made by two people, Camden Brown and Kasen Afflerbach. We collect what the app needs to work, and nothing else.
No ads. No analytics. Nothing in the app follows you around or reports back on what you looked at. We have never sold anyone’s information and we are not going to start.
You can delete your account, and everything attached to it, from inside the app whenever you want. It takes two taps and there is no "are you sure you want to lose all this" guilt trip.
The rest of this page is the detail. It is longer than the summary because being specific is the only way to be honest, not because there is a catch buried in it.
Who we are
Briefly is run by Camden Brown and Kasen Afflerbach, based in Texas, in the United States. Write to us at gro.foundation26@gmail.com — it reaches both of us, and the same address is on the You tab in the app.
We decide what happens to your information, which also makes us the two people responsible for it. There is no team behind us and no support desk. If something is wrong, you are emailing the people who can fix it.
What you give us
When you make an account:
- Your email address — so we can send you a sign-in code, let you reset your password, and reach you if something about your account needs saying.
- A password, which we never see. It is stored as a cryptographic hash by our sign-in provider. We could not tell you what it is, and neither could anyone who got hold of our database.
- Your name, as you type it. This shows on your profile, your comments and your posts, so pick something you are happy for other people to read.
When you answer the two questions after signing up:
- What you are chasing, and the version you typed yourself if none of the options fitted.
- Roughly where you are with it.
- Your phone’s time zone, so the app knows when your day starts.
If you choose to add them:
- A short bio.
- A profile photo.
As you use the app:
- Comments you write.
- Posts you like, and people you follow.
- People you block, and reports you send us.
- If you are one of the two accounts allowed to post: the posts — the photos and clips, a still taken from the first frame of a video, the caption, the tags, and the date the card runs.
And created automatically as you go:
- An account number, so your rows can be told apart from everyone else’s.
- The date and time things were made.
- A flag recording whether an account is one of the two administrator accounts.
What happens without you doing anything
Two things are worth naming even though we do not use them for anything, because "we collect nothing else" would not be quite true.
Our hosting and email providers keep ordinary server logs — the kind every service on the internet keeps. Those include the IP address your phone connects from and what it asked for. They exist so that outages can be debugged and abuse can be stopped, they are kept for a limited period set by those providers rather than by us, and we do not use them to build any picture of you. We do not connect them to your account for any purpose of our own.
That is the whole of it. We do not know where you are — the app never asks for your location and there is no code in it that could work it out. We do not read your contacts, your calendar, your photo library beyond the files you pick, or anything else on your phone.
What Briefly keeps on your phone
Three small things live on your device rather than on our servers:
- A sign-in token, so you are not asked for your password every time you open the app.
- Whether you turned on the "One a day" switch in the posting form.
- Copies of images the app has already shown you, so it does not download them twice.
None of that is sent anywhere. Signing out clears the token, and deleting the app clears the lot.
Who can see what
Anyone signed in to Briefly can see your name, your photo, your bio, your comments and — if you are one of the two accounts that post — your posts. Treat all of that as public, because it is.
Your email address is never shown to another user. Your password is never shown to anyone, us included. The answers you gave when you signed up are not on your profile.
None of it is visible without an account. There is no public web page with your profile or your posts on it, and search engines have nothing of yours to find.
The companies that help us run it
We use a handful of services to run Briefly. Each one gets only the part it needs, is not allowed to use it for anything of its own, and is required by its agreement with us to protect it at least as well as this policy promises.
- Supabase — runs the database, the sign-in system and the file storage. It holds everything listed above. The data sits in the United States, in Amazon Web Services’ Oregon region.
- Resend — sends the account emails. It gets your email address and what is in the message, such as a sign-in code.
- Expo — delivers the app and its updates to your phone. It does not get your account data.
- Apple and Google — distribute the app through their stores. What they collect as the shop you downloaded it from is covered by their policies, not ours.
That is the complete list. Nobody else gets your information: no advertisers, no data brokers, no "partners". We do not sell it and we do not trade it.
If Briefly is ever sold or handed on, whoever takes it over would be bound by this policy until they told you otherwise, and we would tell you before it happened.
We do not track you
Nothing in Briefly links what you do here to anything you do anywhere else. There are no advertising identifiers, no tracking pixels, no analytics tools, and no data brokers involved at any point.
That is why the app never shows you the "allow tracking?" prompt. There would be nothing to ask about.
Where your information lives
On servers in the United States. If you are using Briefly from somewhere else — the United Kingdom, the European Union, anywhere — your information is being sent to and stored in the US, where the privacy laws are not the same as the ones at home.
We do not have a legal office or an international data transfer department. What we can tell you is exactly what is collected, exactly where it goes, and how to remove it, which is what this page is for.
Why we are allowed to hold it
If you live somewhere that asks this question — most of Europe and the UK — here is the answer in plain terms:
- Most of it is because you asked us to run the app for you. We cannot show you a feed or keep your account without an account to keep.
- Your email address is also how we keep the account secure — verifying it is yours, and letting you get back in.
- Reports, blocks and the word filter exist because we have a genuine interest in the app not becoming a place people get abused, and so do you.
- Anything optional — your bio, your photo — is there because you chose to add it, and you can take it away again at any time.
How long we keep it, and how to make it go away
We keep your information for as long as your account exists. There is no separate archive, no analytics copy, and no backup of you sitting somewhere we forgot about.
To delete it: open the You tab and choose Delete my account. It asks you to type a word first, because there is no undo.
Deleting your account removes:
- The account, and your ability to sign in.
- Your profile — name, bio, photo, time zone and the answers you gave when you joined.
- Every comment you have written.
- Your likes, the people you follow, the people you blocked, and the reports you sent.
- If you are one of the two accounts that post: every post, and its place in the feed.
- The files you uploaded.
Nothing is kept afterwards. If a file will not delete for some technical reason we still remove the account, and that file is then unreachable — no account, no profile and no post point at it.
You do not have to go that far, either. You can delete a single comment or post, and change your name, bio and photo any time, under Edit profile. Withdrawing your consent to any of this means deleting the thing, or the account.
The one exception, and we would rather say it than have you find it: server logs at our hosting providers age out on their own schedule, which those providers set and we do not control. We cannot reach in and delete a line from them, and they contain none of your posts, your profile or your messages.
What you can ask us for
- A copy of everything we hold about you.
- A correction, if something is wrong.
- Deletion — of one thing, or of all of it.
- An explanation of anything on this page that is not clear.
Email gro.foundation26@gmail.com from the address on the account and we will sort it within 30 days, usually much sooner. We will not ask you to justify it, and we will not put a retention offer in front of you first.
Depending on where you live you may have further rights — to object to how we use something, to ask us to restrict it, or to complain to your country’s data protection regulator. You can go to a regulator without talking to us first, though we would rather you told us, because we can actually fix things.
If you live in California
You have the right to know what we collect, to get a copy, to have it deleted, and to correct it. All of that is above and the answer is the same for everyone.
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We never have. There is no "do not sell my info" link because there is nothing to opt out of.
We will not treat you differently for exercising any of this.
If you are under 18
You need to be at least 13 to use Briefly. If you live somewhere that sets a higher age for signing up to something like this without a parent, that age applies to you instead.
We do not knowingly collect anything from anyone under 13. If we find out an account belongs to someone younger, we delete it and everything attached to it. If you think a child has an account here, email gro.foundation26@gmail.com and we will deal with it quickly.
Links to other places
A profile can carry a website link, and posts can mention things. Tapping one takes you off Briefly and onto somebody else’s site, which has its own rules and its own privacy policy. We have no control over those and we are not responsible for them.
Keeping it safe
- Everything between your phone and our servers travels encrypted.
- Passwords are stored as hashes and cannot be read by us or by anyone who obtained the database.
- The database refuses reads and writes it has not been explicitly told to allow, row by row, rather than trusting the app to only ask for the right things.
- Only the two administrator accounts can read reports. Nobody can read another person’s email address through the app at all.
No system is perfect and we are not going to pretend ours is. If something goes wrong that affects your information, we will tell you what happened, when, and what to do about it — and we will not wait until it is convenient.
When this page changes
Last updated September 9, 2026. If we change it, that date changes and the copy inside the app updates at the same time — they come from the same file, so they cannot drift apart.
If a change actually affects what we collect or who sees it, we will say so plainly rather than quietly editing the page and hoping.
Talk to us
gro.foundation26@gmail.com. Questions, requests, or something you have seen in the app that needs looking at. It reaches both of us and we read it.
This website
The waitlist and brieflysite.com
Everything above is about the Briefly app. This part is about this website, which is not the app and does not need an account.
- The waitlist. If you join, we keep your email address and nothing else. It is stored as a contact with Resend, the same company that sends the app's account emails. You get one confirmation straight away, and one more email when Briefly opens.
- Feature requests. What you type is emailed to us at gro.foundation26@gmail.com, sent through Resend, along with your email address if you chose to give one so we can reply.
- How it gets there. Both forms go through a small program we run on Cloudflare, which passes them to Resend. Cloudflare sees your IP address and uses it to limit how often the forms can be sent, so they cannot be used for spam. The site itself is hosted by GitHub Pages, which keeps ordinary server logs like any host.
- Nothing else. No analytics, no cookies, no ads, no tracking, and the fonts are served from this site rather than from Google. After you join, your browser remembers that you did so the form does not ask again. That is a single flag on your device, not your email address, and it is never sent to us.
To come off the waitlist, email gro.foundation26@gmail.com from the address you signed up with and we will delete it.