Legal

Privacy Policy

Last updated: July 20, 2026 · Covers all live Neurolayer Labs products

The short version

Neurolayer Labs products are built local-first and bring-your-own-key. Your content — pages you summarize, notes you write, keys you store — stays on your device. Your AI requests go directly from your browser to the AI provider you chose, using your own API key. We don't run your data through our servers, we can't read it, and we don't sell it. This website sets no tracking cookies and uses no analytics identifiers — that's not a legal hedge, it's the product philosophy.

1. Who we are

Neurolayer Labs is operated by David Strahan in the Indianapolis area, Indiana, USA. Questions about this policy: hello@neurolayerlabs.com.

2. What we collect (and what we don't)

We do collect

  • Account info — the email address you create your Neurolayer account with — whether you sign up with email and password or with Google sign-in — and your entitlement record (which tier you're on, whether you're trialing or active, and when your billing period ends). This lives in our account database, hosted on Supabase. Google sign-in shares only your basic profile email with us, nothing else.
  • Payment records — handled by Stripe. We never see or store your full card details; we receive only the subscription state Stripe reports back.
  • Emails you choose to send us — including newsletter sign-ups, which store exactly one thing: the address you typed. We send at most one update a week, and every email includes an unsubscribe link.

We do not collect

  • The content of pages you summarize, notes you take, or prompts you write
  • Your API keys — they're stored locally in your browser's extension storage
  • Your browsing history
  • Tracking cookies, advertising identifiers, or cross-site analytics of any kind

3. Where your data lives

There are exactly two places, and they hold very different things:

  • Your device — everything the products create or touch: summaries, the Knowledge Hub, notes, voice memos, API keys, settings. Product data is local-first; it is not synced to us.
  • Our account database (Supabase) — your account email and subscription/entitlement state, so the products know what you've paid for. Nothing else.

4. Your API keys and AI providers

Our products work with API keys you create directly with AI providers (such as OpenAI, Anthropic, or Google). Your keys are stored locally on your device. With your explicit consent, locally stored API keys can be shared with other Neurolayer apps; nothing is transmitted to our servers. When you use an AI feature, your request goes directly from your browser to that provider under their terms and privacy policy — we are not in that path. We encourage you to review the privacy policy of any provider whose keys you use.

5. Product-specific details

NeuroBrowse

Summaries, the Knowledge Hub, tags, collections, and generated media stay locally in your browser. Page content is sent only to the AI provider you selected, only when you trigger an action, using your own key. Signing in checks your subscription state against our account database — that check carries your account email and entitlement status, never your content.

NeuroNotes

Notes — including images and voice memos — are stored locally on your device and never leave it. There is no cloud sync. NeuroNotes shares the same sign-in as NeuroBrowse, so the same subscription-state check (and nothing more) applies.

NeuroLearn

NeuroLearn follows the same formula as its siblings: lessons and learning data are local-first on your device, AI requests for lesson generation go directly to your chosen provider on your own key, and our account database holds only your account email and entitlement state.

NeuroFit is in development and not yet offered; this policy will cover it when it launches.

6. Website analytics: none that follow you

neurolayerlabs.com sets no tracking cookies and assigns you no analytics identifier. We previously used Google Analytics; it has been removed permanently. If we measure traffic at all, it's with Cloudflare Web Analytics, which is cookieless — it counts page views in aggregate without fingerprinting you, identifying you, or following you across sites. There is nothing to opt out of, because nothing tracks you.

7. Payments

Subscriptions are processed by Stripe. Stripe handles your payment details under its own privacy policy; we receive only what we need to know your subscription is active.

8. Deleting your data, and your other choices

  • Delete your account data: email hello@neurolayerlabs.com from your account address and we'll delete your account record — email and entitlement state — from our database. That's the complete list of what there is to delete on our side.
  • Uninstalling a product removes its locally stored data from your browser.
  • You can revoke or rotate your API keys with your providers at any time.
  • You can ask us for a copy of what we hold about you — we'll export it to you on request; the honest answer will be short.

9. Changes to this policy

If this policy changes in a way that matters, we'll say so plainly — on this page and in the changelog of the products affected.