Privacy policy

Applies to Brisk and Brisk Agent Kit. Last updated 7 November 2026.

In short: Brisk never connects to the internet on its own. The only thing it ever sends is a support report, and only when you send it, after showing you exactly what's in it. It has no account, no analytics and no advertising, and it doesn't track you. Your files stay on your Mac, and a report never holds their contents. Brisk Agent Kit talks only with Brisk.

Who is responsible

The data controller is Piotr Panasewicz, reachable at piotr@codice.pl. Write to that address about anything in this policy, including the rights listed below.

What Brisk keeps, on your Mac

• Your files. Brisk reads and saves the files and folders you open, and only those. It works inside the App Store's sandbox, which keeps it from anything you haven't opened or given it.
• Recent files and folders, with when you opened each, so the welcome window can list them and you can open them again.
• Your settings and themes, including themes you import.
• Spotlight. Brisk adds the names of your documents to Spotlight on your Mac, so you and Siri can find them. Never their contents.

None of it leaves your Mac unless you send a report, described below.

Support reports (only when you send one)

Settings › Support can send a report to the developer. Nothing is sent until you click Send Report, and you can preview the exact text first: a report you previewed is sent exactly as shown. A report contains:

• what you write in the report, including an email address if you add one;
• your Mac's model and chip, its macOS version, your language and region, and Brisk's version;
• Brisk's settings;
• how many documents and folder windows are open, and in which languages, such as Markdown or Swift;
• Brisk's own log since it opened, with your home folder and account name taken out of its paths;
• crash and hang reports from Brisk, only if you choose to include them.

A report never holds your files' contents, or the names of your files and folders. Reports go over HTTPS to the developer's server at codice.pl, are read only to fix the problem you reported, are never shared or sold, and are deleted automatically after 90 days.

With each report the server also notes when it arrived, its size, and the app version, macOS version, Mac model and language Brisk sends with it. It doesn't keep your IP address. The address is used only while the report arrives, to limit how many reports one sender can upload in an hour. For that hour, the count is filed under a keyed hash of the address, which can't be turned back into it, and then deleted.

After sending, Brisk shows the report's reference. Quote it if you want the report deleted sooner, or want a copy of it.

The HTML preview

Previewing web pages requires macOS's network permission, but the preview makes no connections. It uses WebKit, the engine Apple's Safari uses, and inside the App Store's sandbox WebKit doesn't start without that permission. In the preview, Brisk blocks every remote address and runs no scripts, so a page shows only the file and what's next to it in the folder you opened, such as its images and styles. Nothing is loaded from the internet, and nothing is sent.

iCloud Drive

If you save documents in Brisk's folder in iCloud Drive, macOS syncs that folder through your iCloud account like any other in iCloud Drive. Brisk itself sends nothing: Apple's iCloud service does the syncing, under Apple's privacy policy. Documents saved anywhere else stay where you put them.

Siri, Shortcuts and Writing Tools

When you ask Siri or run a shortcut, Siri or Shortcuts calls Brisk's actions, and Brisk answers with what you asked for, such as a file's text or what changed in it. Writing Tools work on the text you select. These are Apple's features, and what happens to your request in them is covered by Apple's privacy policy. Brisk sends nothing anywhere in either case.

Brisk Agent Kit and Ask AI

Brisk Agent Kit is an optional, free companion app that lets Brisk's Ask AI run an AI agent you already use, Claude Code for now. It talks only with Brisk, over a connection on your Mac that only the two of them can use. It opens no network connection, listens on no port, and has no updater, analytics or crash upload.

• It changes no agent's settings. It remembers, in its own preferences, which agents you connected, so Brisk may run them for Ask AI.
• It keeps a small status file saying which agents are installed and connected, and logs only what it did, never your prompts, your files' contents or paths with your account name.
• Brisk keeps an Ask AI conversation in memory only while its window is open, and lists what agents did since it opened in Window › Agent Activity, without any file contents.

What you ask goes to the agent. When you send a request with Ask AI, the agent receives it, with your selection and what it reads through Brisk to answer, and sends that to its own service, as it does with anything else you give it. That's between you and the agent's maker (Anthropic, for Claude Code), under their privacy policy. The agent sees only the folder of the window you asked in, or the single file in a window with one file, and files that usually hold secrets, like .env files and keys, are never shown to agents. None of it reaches the developer.

Crash reports through Apple

If you chose to share analytics with app developers in macOS, Apple may pass Brisk's crash reports to the developer. They don't identify you. You can change this in System Settings › Privacy & Security › Analytics & Improvements.

Email

If you write to the developer, your message and address are used only to answer you, and aren't shared or used for anything else. You can ask for your messages to be deleted at any time.

Legal basis

A support report is processed because you choose to send it: that is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by asking for the report to be deleted; this doesn't affect anything done with it before. The short-lived rate-limit count relies on the legitimate interest in keeping the upload service from being abused (Article 6(1)(f) GDPR).

Reports are stored on a server in Poland. They aren't passed to any processor or other recipient, and aren't transferred outside the European Economic Area. No decision about you is made automatically, and nothing is used for profiling.

Your rights

For a report or an email you sent, you can ask for access to it and a copy (Articles 15 and 20 GDPR), its correction (Article 16), its deletion (Article 17), or the restriction of its processing (Article 18). You can also object to the rate-limit processing (Article 21). Write to piotr@codice.pl, with the report's reference for a report. You'll get an answer within one month. You also have the right to complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or to the data protection authority where you live or work.

Children

Brisk collects no data from anyone, children included. A support report holds only what is described above.

Changes and contact

If this policy changes, the new version will be published here with a new date. Questions: piotr@codice.pl.