Privacy Policy

Brevum is an Infral Labs LLC app that helps adults understand official documents such as Medicare notices, insurance letters, hospital bills, benefits letters, and similar paperwork in plain English. This policy explains what the Brevum iOS app and backend service collect, how document explanations are processed, what stays on your device, and what remains if you delete your Brevum service profile.

The public Brevum website is hosted at brevum.app. Support is available at brevum.app/support.

Quick Summary

Original images and PDFs stay on this device. Only extracted words may be sent for an explanation. Saved explanations stay on this device.

Document Text You Choose To Explain

When you choose a photo, image, or PDF, Brevum reads the document on your device first using on-device text reading and PDF text extraction. Brevum does not send the original image or PDF file to the backend for analysis.

To create an explanation, Brevum may send extracted document text to the Brevum backend and to OpenAI through the secure Brevum service. The app may also send Brevum service profile identifiers and request metadata needed to enforce quotas, protect the service, and troubleshoot reliability.

Before Brevum sends extracted document text for analysis, the app asks for consent. You can reset that choice in Settings by choosing to ask again before sending text. If you do not want a document's extracted words sent for explanation, choose not to send that document.

Local Data On Your Device

Brevum stores saved explanations, onboarding preferences, the ask-before-sending choice, and app settings on your device. Saved explanations are stored locally with SwiftData and include the explanation sections Brevum returns, not the original photo, image, or PDF file.

You can clear saved explanations from Settings. Clearing saved explanations does not delete your Brevum service profile, change your ask-before-sending choice, reset scan limits, or cancel a subscription.

Anonymous Service Profile And Usage Records

Brevum does not require a personal account to start. The app creates a Brevum service profile so the backend can run explanations, enforce free and Premium scan limits, prevent abuse, and keep subscription access working across service sessions.

This service profile uses random technical identifiers, including a service subject identifier, a quota principal identifier, a quota credential, access tokens, refresh tokens, and App Attest proof values used to confirm requests come from an authentic Brevum app. The app stores service credentials and the App Attest key reference in the iOS Keychain. The backend stores server-side hashes and related service records.

The backend stores limited service records linked to the quota principal identifier, such as free scans used, Premium monthly scan usage, entitlement tier, entitlement lookup time, subscription expiration status when available, deleted-profile count, service-session timestamps, and server-side App Attest key information used for abuse prevention.

Brevum may also use rate limiting and Railway operational logs to protect the service, investigate errors, and prevent abuse. Brevum does not use these records for advertising or tracking across other companies' apps or websites.

Product Analytics

Brevum uses TelemetryDeck for privacy-focused product analytics so Infral Labs can understand which parts of the app are used, where people need help, and whether the app is working as expected.

TelemetryDeck receives limited behavior signals, such as app sessions, onboarding progress, scan-flow choices, paywall views, purchase-flow outcomes, history and settings opens, saved-explanation actions, and whether a scan completed or failed. These signals may include a privacy-preserving installation identifier, a session identifier, a rounded timestamp, app version and build, build channel, device model, operating system version, language or region, screen characteristics, and similar technical context added by the TelemetryDeck SDK.

Brevum does not send extracted document text, original photos or PDFs, filenames, saved explanation text, generated explanation content, service profile identifiers, access tokens, refresh tokens, App Attest proof values, support-message content, or other user-provided document content to TelemetryDeck. Brevum does not use TelemetryDeck for advertising or tracking you across other companies' apps or websites. It also does not use TelemetryDeck for replay, screen recording, or keystroke recording.

Crash And Error Diagnostics

Brevum uses Sentry for crash reports, serious app hang reports, watchdog termination diagnostics, and limited non-fatal error diagnostics so Infral Labs can find and fix app stability problems.

Sentry may receive diagnostic details such as a stack trace, app version and build, build channel, timestamp, operating system version, device model, session status, and technical event identifiers. Brevum configures Sentry without default personal information, user identity, screenshots, view hierarchy capture, session replay, profiling, performance tracing, logs, metrics, network failed-request capture, or network URL/header breadcrumbs.

Brevum does not send extracted document text, original photos or PDFs, filenames, saved explanation text, generated explanation content, service profile identifiers, access tokens, refresh tokens, App Attest proof values, support-message content, or other user-provided document content to Sentry.

Purchases And Subscriptions

Purchases are handled by Apple, with RevenueCat used to confirm Premium access and help Brevum apply the correct scan limits. Brevum includes 5 free scans to start. Premium is $4.99 per month for 50 scans each month if you need more.

Deleting your Brevum service profile does not cancel Apple subscriptions. If you have an active subscription, manage or cancel it through Apple Subscriptions.

Service Profile Deletion And Retained Records

You can delete your Brevum service profile from Settings. Deletion removes the active service profile and active sessions used for explanations. It does not delete saved explanations, onboarding preferences, the ask-before-sending choice, or other local settings on your device. It also does not cancel an Apple subscription.

After service profile deletion, the Railway-hosted Brevum backend retains limited quota, subscription, rate-limit, and service-protection records linked to the retained quota identifier or server-side App Attest records. These retained records are used to help keep included scans fair, enforce monthly Premium limits, preserve active Premium access, resolve entitlement or billing support issues, comply with legal or accounting obligations, and protect the service.

When retained records are no longer needed for those purposes, Brevum deletes or de-identifies them. If you continue using Brevum after deletion, the backend creates a new Brevum service profile linked to those retained records.

Photos, Files, And Camera

Brevum requests camera access only when you choose to take a photo of a document. It requests photo library access only when you choose an image from Photos. It uses Files access only when you choose to attach a document. PDFs, JPEG, PNG, and HEIC images work best.

Third-Party Services

Brevum uses OpenAI for document explanations, Apple for in-app purchase processing, RevenueCat for subscription entitlement handling, TelemetryDeck for privacy-focused product analytics, and Sentry for crash and error diagnostics. Brevum uses Railway for backend hosting, managed Postgres database storage, managed Redis rate-limit storage, and operational logs needed to run and protect the service.

No Sale Or Tracking

Brevum does not sell your information. The app does not use collected data for third-party advertising or cross-app tracking.

The retained service records described above are not intended to include your original document files or saved explanation history.

Children's Privacy

Brevum is not directed to children under 13, and we do not knowingly design the service to collect personal information directly from children through a registration or account-creation flow.

International Users

Brevum is offered by a U.S.-based company, Infral Labs LLC. If you use the app or website from outside the United States, your information may be processed in the United States or other countries where Brevum or its service providers operate.

Data-protection laws may differ from those in your home country. By using Brevum, you understand that information may be transferred and processed as needed to provide the service.

Policy Changes

Brevum may update this Privacy Policy as the product, vendors, or legal requirements change. If we make a material change, we will post the updated policy on brevum.app/privacy with a revised effective date.

You should review the public policy page periodically for the latest version.

Contact

For privacy questions, support requests, or deletion requests that cannot be completed in the app, visit Brevum support.