Terms of Service
Last updated: September 2026
§ 1 Provider and Scope
These Terms of Service govern the use of the SecBrain web application, operated by:
Philipp Brosig (FIL)
Bahnhofstr. 11
27383 Scheeßel
Germany
Email: fil@secbrain.io
By registering, the user agrees to these Terms of Service.
§ 2 Service Description
SecBrain is a software-as-a-service platform for personal time tracking, activity management, and productivity organization. The service is accessible via web browser or mobile application.
SecBrain is offered in two plans. The Free plan is permanently free of charge and limited in the number of items that can be stored as well as in its feature set. Premium is a paid subscription that removes these limits. Which features and limits apply to which plan can be viewed at any time in the plan comparison inside the application.
The provider reserves the right to develop the feature set further. Material changes to the scope of a paid plan will be communicated at least 30 days in advance.
§ 3 Registration and User Account
Registration is required to use SecBrain. All information provided during registration must be truthful and complete. The service may only be used by natural persons.
The user is responsible for the security of their account and all activities associated with it. Login credentials must not be shared with third parties. In case of suspected unauthorized access, the provider must be notified immediately.
§ 4 Contract Formation and Duration
Use of the Free plan begins upon successful registration and continues indefinitely.
Premium is purchased as a subscription with a term of one month or one year. The contract is concluded upon completion of the purchase.
The subscription renews automatically for the selected term unless it is cancelled at least 24 hours before the end of the current period.
§ 5 Prices and Payment
The Free plan is free of charge. No fees apply to it.
The current prices for Premium are shown before purchase, both in the purchase flow inside the application and on the product page in the Apple App Store and on Google Play. The price displayed there at the time of purchase, including statutory VAT, is the one that applies.
Billing follows the channel through which the subscription was purchased. For an in-app purchase in the Apple App Store or on Google Play, the respective store charges the payment method stored there and also handles renewals. For a purchase made on the web, billing runs through RevenueCat Web Billing with Stripe as the payment processor.
Where a free trial is offered, its length is shown before purchase. If the subscription is not cancelled before the trial ends, it converts into the selected paid term.
Price changes for running subscriptions will be announced at least 30 days before they take effect. If a due payment cannot be collected, Premium access remains available for a short grace period so that the payment method can be updated. After that, the account moves to the Free plan.
§ 6 Right of Withdrawal
Consumers have the right to withdraw from a contract for paid plans within 14 days without giving reasons. The withdrawal period begins on the day the contract is concluded. Withdrawal must be declared by email to fil@secbrain.io.
If the subscription was purchased as an in-app purchase in the Apple App Store or on Google Play, that store handles the payment. Refund requests must in this case be directed to the store. The provider will assist with this on request.
§ 7 User Obligations
The user agrees to use SecBrain solely in accordance with applicable law and these Terms. In particular, the following is prohibited:
- creating or storing unlawful content
- placing excessive load on the provider's infrastructure
- attempting unauthorized access to the provider's or third-party systems
- reselling, transferring, or sublicensing the service
- running automated queries that impair operations
- storing confidential information or trade secrets of third parties without the required authorization
- storing personal data of third parties without a valid legal basis for doing so
§ 8 User Data and Content
The user retains ownership of all content they create. The provider stores and processes user data solely for the purpose of operating the platform. User data is not sold and not shared with third parties without the user's explicit consent.
Users are encouraged to keep their own backup of important content.
SecBrain is a tool for organizing one's own personal life and is not intended as a company's operational documentation or reporting system. The user is solely responsible for the content they store in SecBrain and warrants that they are entitled to store and process such content and that doing so does not infringe the rights of third parties.
Where the user stores work-related information, in particular about their employer or client, its customers or its staff, they do so on their own responsibility. The user independently ensures that they have obtained any approvals, consents, or contractual bases required for this. The provider does not enter into a data processing agreement with the company concerned for such use. Companies wishing to use SecBrain operationally should contact the provider for a separate contractual arrangement.
For content the user stores in the course of a purely personal or household activity, the exemption under Art. 2(2)(c) GDPR applies. Where the user processes personal data of third parties for purposes other than purely personal ones, the user is the controller within the meaning of Art. 4(7) GDPR and bears the associated obligations themselves.
The provider protects stored content through appropriate technical and organizational measures, in particular encryption at rest. There is no end-to-end encryption, because content must be processable in plaintext on the server to provide certain features such as the optional AI integration. The user takes this into account when choosing the content they store.
§ 9 Availability
The provider strives to operate SecBrain without interruption but does not guarantee a specific level of availability. Planned maintenance will be communicated in advance where possible.
§ 10 Limitation of Liability
Philipp Brosig (FIL) is fully liable for damages arising from injury to life, body, or health, as well as for damages based on intentional or grossly negligent conduct.
In cases of simple negligence, the provider is only liable where essential contractual obligations (cardinal duties) are breached, and only up to the amount of foreseeable, typical damage. All other liability is excluded.
In particular, the provider is not liable for data loss arising from use of the platform, unless caused by intentional or grossly negligent conduct.
If the user breaches their obligations regarding stored content under § 7 and § 8, they shall indemnify the provider against all third-party claims asserted against the provider as a result of the unauthorized storage or processing of such content by the user, including reasonable costs of legal defense. Any further statutory claims of the provider remain unaffected.
§ 11 Termination and Account Deletion
A Premium subscription is cancelled where it was purchased. For a purchase through the Apple App Store, in the subscription management of the Apple ID; for a purchase through Google Play, in the Google Play subscriptions; for a purchase on the web, through the customer portal. The application links to the appropriate place under Manage subscription in the settings.
After cancellation, Premium remains usable until the end of the term already paid for. After that, the account moves to the Free plan. Deleting the user account does not automatically end a subscription purchased through a store, that subscription must additionally be cancelled with the respective store.
The user may delete their account at any time via the account settings or by emailing fil@secbrain.io. Following deletion, all stored user data will be irreversibly deleted within 30 days, unless statutory retention obligations apply.
The provider reserves the right to suspend or delete accounts in the event of serious or repeated violations of these Terms.
§ 12 Changes to Terms
The provider reserves the right to amend these Terms with 30 days' notice. Users will be informed of material changes by email. If the user does not object within the notice period, the changes are deemed accepted. In the event of an objection, the user relationship ends.
§ 13 Governing Law and Jurisdiction
The laws of the Federal Republic of Germany apply, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).
For merchants and legal entities under public law, the place of jurisdiction is the provider's registered office in Scheeßel. For consumers, statutory provisions on jurisdiction apply.
§ 14 Severability Clause
If any provision of these Terms is or becomes invalid, this does not affect the validity of the remaining provisions. The invalid provision shall be replaced by the legally permissible rule that most closely reflects the economic purpose of the invalid provision.