Privacy Policy

When you create an account on beliefgenomeproject.org, we collect:

• Email address
• Password (hashed and salted. We never store plaintext passwords.)
• Display name (optional)

When you respond to belief probes, we collect:

• Your response values (0–9 scale per dimension)
• Timestamps of when responses were submitted
• The resulting 265-character Belief Genome serial (16-character demographic prefix, a - separator, and 124 dimensional pairs encoding amplitude and coherence per dimension)
• Internal probe metadata that links each response to its dimension and framing-pair partner. The analysis layer uses this to compute amplitude and coherence per dimension. This metadata describes the probe, not you, and contains no personal information.

You may choose to submit your Belief Genome anonymously (no account required) or linked to your account for personal tracking and history. Anonymous submissions cannot be traced back to any individual.

The Mission Control desktop app may optionally collect:

• Birth year, month, and day
• Biological sex indicator
• Country code and postal code
• Personal interests and research topics

This metadata is used solely to generate a DNA prefix for your Belief Genome string. It is stored locally on your device and is never transmitted to our servers without your explicit action.

Mission Control allows you to enter API keys for third-party AI services (Anthropic Claude, OpenAI, Google Gemini, ElevenLabs, and others). These keys are:

• Stored locally on your device in your settings file
• Never transmitted to Belief Genome Project servers
• Used only to make direct API calls from your machine to the respective services
• Exportable with your settings (you choose whether to include or exclude keys)

BGP works fully without a Google account. If you choose to connect one, BGP asks only for what its features use, and everything happens on your device. BGP has no server and never receives your Google data.

• Gmail (gmail.modify): reads the sender, subject, date, and short snippet from your recent inbox messages to build Your Day Ahead and the Email widget. It moves a message to Trash only when you click Trash. It never sends mail, never stores message bodies, and never shares your mail with anyone.
• Calendar (calendar.readonly, calendar.events): reads your upcoming events for the Calendar widget and Your Day Ahead, and creates events only when you add one from BGP.
• Google Drive (drive.file): only if you turn on Full private sync or encrypted backup, stores one encrypted file in a folder BGP creates in your own Drive (see 3.7). BGP cannot see your other Drive files.
• Account email (userinfo.email): shown in Settings so you know which account is connected.

OAuth tokens are stored only on your device. Disconnect at any time in Settings, which deletes the stored token; you can also revoke BGP's access at myaccount.google.com/permissions.

BGP's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

BGP DNA Mission Control (the new-tab dashboard):

• Stores your content (probe responses, notes, tasks, memories, settings) in local browser storage / IndexedDB, not on our servers
• Does not read or monitor your browsing history or web activity. It runs no scripts on the web pages you visit
• Contacts external services only for features you opt into and trigger: your own AI provider, Google (see 3.5), Microsoft (Outlook mail and calendar via OAuth, under the same principles), the weather and news sources you choose, and optional encrypted sync/backup to your own Google Drive (see 3.7)
• Can import your data from the BGP desktop app on the same computer only when you ask it to (a local connection; nothing leaves the machine)

BGP DNA Anywhere (the overlay extension): see 3.8.

If you enable it, the extension can back up your settings and memories to a "BGP Backups" folder in your own Google Drive. The data is encrypted on your device (AES-256-GCM, key derived from a passphrase only you know) before upload, so Google and BGP only ever hold an unreadable blob plus minimal metadata (file name, size, counts, timestamps). Access is limited to files the app creates (the drive.file scope), never your other Drive files. We never receive your passphrase or keys, and no BGP account is involved. If you lose the passphrase, the backup cannot be recovered. This is by design. Encryption on your device does not protect a compromised or monitored computer. Do not enter your passphrase on a work or shared machine. We also cannot guarantee erasure across your provider's own retention layers (e.g. Drive trash and version history). Deletions there are governed by your provider.

The companion overlay runs only on websites you add to its allow-list, one site at a time, with Chrome asking your permission for each. On those sites it shows the belief-probe strip and your genome view; it does not read the page. On the AI chat sites it supports (Claude, ChatGPT, Grok, Perplexity, Gemini) it offers a Save to Brain button: only the chat turn you explicitly choose to save is stored, locally, in the overlay's own on-device brain. Nothing is sent to BGP.

Account information and belief responses submitted through the website are stored in a secured PostgreSQL database with encrypted connections. Passwords are hashed using industry-standard algorithms.

All Mission Control data, including settings, API keys, widgets, agent logs, media files, and belief responses, is stored locally on your device in your user documents folder. No desktop app data is sent to our servers unless you explicitly submit your genome to the website.

Certain AI agents (File Organizer, Desktop Cleanup) access specific folders on your machine (Downloads, Documents, Desktop). These agents only operate when you manually run them and require your explicit action each time.