Brook Launcher Privacy Policy

Last updated: October 4, 2026

This policy describes how Brook Launcher, published by Waybound Strategies LLC, handles information on Android. Brook is a launcher and personal media and calendar interface. It does not require an account.

Information Brook accesses and stores

• Launcher preferences: favorite and hidden apps, groups, recent launches, selected visualizer and Now Playing settings, and other UI choices are stored locally in the app's private preferences.
• My Card: if you enter them, your name, phone number, email address, URL, organization, and title are stored locally so Brook can show a card, generate a QR code, or provide the optional NFC card feature. NFC is enabled only while that card screen is active.
• Voice capture: when you choose the microphone feature, Android's selected speech-recognition service receives audio for transcription. Brook stores a transcript locally only when you save it. You choose whether to place a transcript in a calendar event, clipboard, local capture list, or Android share sheet.
• Calendar: after you grant calendar access, Brook reads visible calendar event titles, locations, calendar names, times, and colors to render an agenda. Brook does not create or edit events directly; event creation is handed to the calendar app through Android.
• Media sessions: after you enable Notification access, Brook reads active media-session metadata and playback state (including app/package, title, artist, album, duration, position, and album art) for the Now Playing interface. Brook does not read or store notification text. In the Play release, the optional Segue listening-history uploader is disabled and no media rows are uploaded by Brook.
• Purchases: the optional one-time skin unlock uses Google Play Billing. Google Play handles the purchase flow and payment information. Brook receives only the Play purchase state needed to show whether the unlock is available; Waybound Strategies LLC does not receive payment card details and has no purchase server.
• Imported skins: skins and embedded artwork you import are stored locally in Brook's private skins directory. Brook does not execute imported skin files or load remote URLs.

Sharing and network use

The Play release does not send the information listed above to Waybound Strategies LLC or to an analytics, advertising, or tracking service. Brook has no account system, advertising SDK, or Waybound server. Google Play Billing communicates with Google Play to process the optional purchase. A transcript or contact card leaves the device only when you explicitly use Android's share, clipboard, calendar, QR, or NFC feature; the destination then applies its own privacy policy.

Internal debug builds retain a developer-only Segue integration that can upload locally buffered media-play rows to an endpoint configured by the developer. Segue is guarded by BuildConfig.DEBUG and cannot be enabled in the Play release. This debug integration is not a Play feature.

Retention and deletion

Brook keeps local preferences, saved transcripts, and imported skins until you edit or delete them, clear the app's storage, remove an imported skin, or uninstall Brook. Calendar data, active media-session data, and purchase records remain in their source Android/Google Play services; Brook does not maintain a Waybound server copy. Because Brook has no account, there is no account data to delete. User-initiated sharing is governed by the receiving app.

Security and backup

Brook stores its preferences and imported skins in Android app-private storage. The preferences file containing card details, transcripts, recent media, and other personal settings, plus the imported skins directory, are excluded from Android cloud backup and device-to-device transfer. No security method is perfect, so keep Android and the apps receiving shared content up to date.

Privacy contact

Waybound Strategies LLC's privacy contact is mike@wayboundstrategies.com. The public policy is available at https://brook-privacy.pages.dev/. Publication remains a release step: verify that URL is live, public, non-geofenced, and serves this policy before entering it in Play Console.