Your data, plainly.

This policy explains what personal data BROMIGOS INC collects, why, who we share it with, and how you can see, change or delete it. It covers bromigos.org, the BRODEC app and brodec.ai, and bromigOS. The short version: we collect what the products need to work, we don't sell personal data, and we don't show ads.

Who we are

BROMIGOS INC (“we”, “us”) is a California corporation based in Lancaster, California, USA. We are the controller of the personal data described here. Questions about this policy or your data go to contact@bromigos.org.

bromigos.org

You can read bromigos.org without an account. If you sign in, we collect:

Your account. Sign-in is with Google, through Firebase Authentication. We receive your name, email address and profile photo, and use them to create and secure your account.
Your profile. The callsign, specialty, bio, skills and portrait you enter. What you mark public appears on your dossier at /u/your-callsign; you can change or clear it on your profile at any time.
A linked Minecraft account. If you link one, your Minecraft username, so your membership follows you onto the EchoCraft server.
Memberships. Paid Clearance memberships are billed by Stripe. We keep your membership level and its status; Stripe handles your card, and we never see or store your card number.
Server logs. Our hosting (Google Firebase Hosting) records standard request logs, such as IP address, browser and the page requested, to serve the site and keep it secure.

The site has no analytics or advertising trackers. The live member count on some pages is fetched by your browser from Discord's public invite service, which sees your IP address as any website you visit does.

BRODEC

BRODEC is our encrypted messenger, with the VECTOR AI assistant and the FIELD OPS game; brodec.ai is its website and mission console. It uses the same Bromigos account as this site. The app's full policy is at brodec.ai/privacy; in summary:

Encrypted messages.Messages, photos, files and voice notes on BRODEC's encrypted line are end-to-end encrypted: only the people in the conversation hold the keys, and we can't read them.
Content you give the game and VECTOR.Mission chat, voice transmissions and anything you ask VECTOR or the game's AI characters are processed by AI services to produce replies and voices.
Microphone.Used only while you speak, for calls and speech-to-text. The app doesn't listen in the background.
Location.Some missions check your device's location against a mission's waypoints. We don't build movement profiles or sell location data.
On your phone only.Catch-ups, reply suggestions, translation, transcripts and other on-device AI features run on your phone's own models; what they read never leaves the phone for them. Motion and health readings are off until you turn them on, and are never uploaded.
Device and diagnostics. Push-notification tokens and basic crash and performance data, to deliver alerts and keep the app working.
Payments. Subscriptions are processed by Google Play, Apple or Stripe. We never see your card number.

bromigOS

bromigOSruns on your own computer and needs no account. It doesn't send us usage data. Its packages download from pkgs.bromigos.org, whose host keeps standard request logs. The services it connects to, such as your home servers or an AI model provider, are ones you choose and set up; they handle your data under their own terms.

How we use data

We use personal data only to:

provide, secure and improve our products, and keep your account working across them;
run features you ask for, such as public profiles, messaging, calls, AI replies and missions;
process subscriptions and memberships;
answer you when you write to us, and send notices about your account or these policies;
prevent abuse and meet our legal obligations.

We don't sell or rent personal data, we don't “share” it for cross-context behavioural advertising, and we don't use it to show ads.

We share personal data only with the service providers that run our products, each receiving only what its job needs: Google (Firebase sign-in, database, storage, hosting and messaging; Gemini AI), Stripe (billing), Apple and Google Play (in-app purchases), LiveKit (live voice), Fish Audio (voice synthesis), Cloudflare (package and map downloads), and OpenStreetMap's place search (asked by our servers with only the place you look up). We disclose data beyond this only when the law requires it, or to protect people from harm. If the company is ever sold or merged, this policy will continue to apply to data collected under it.

Cookies and storage

We use no advertising or analytics cookies. When you sign in, Firebase keeps your session in your browser's storage so you stay signed in; signing out removes it. The BRODEC app keeps its encryption keys and on-device data in the app's private storage on your phone.

Keeping and deleting it

We keep your data while your account is active. You can ask us to delete your account and its data at any time by emailing contact@bromigos.org from the address you sign in with; the steps are also at brodec.ai/delete-account. We complete deletion within 30 days, except for records the law requires us to keep, such as billing records.

Your rights

Wherever you live, you can ask us to tell you what personal data we hold about you, give you a copy, correct it or delete it. California residents have these rights under the California Consumer Privacy Act, and the right not to be treated differently for using them; people in the European Economic Area and the United Kingdom have them under the GDPR, plus the rights to object, to restrict processing and to complain to their data protection authority. To use any of them, email contact@bromigos.org from the address on your account. We respond within the time the law sets.

Security

Data travels over encrypted connections (HTTPS/TLS) and is stored with providers that encrypt it at rest. Access to our systems is limited to the people who run them. BRODEC's encrypted messages are encrypted end to end, so they can't be read on our servers. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Children

Our products are not directed at children under 13, and we don't knowingly collect their data. If you believe a child has given us data, write to contact@bromigos.org and we will delete it.

Changes and contact

If this policy changes, we will update this page and its effective date. Questions: contact@bromigos.org, or BROMIGOS INC, Lancaster, California, USA. See also the terms of use and how to reach us.