Legal

Privacy Policy

Last updated: January 25, 2026

Overview

BrightNexus is designed with privacy as a core principle. The application does not collect, store, or retain any user data.

What We Do Not Do

• No data collection — We do not collect any personal information, usage data, or analytics from the application.
• No data storage — We do not store user data on your device beyond local configuration, or on any servers.
• No data retention — We do not retain information about your usage or operations.
• No network communication — The application does not transmit data to any external servers or services.
• No third-party integration — The application does not integrate with third-party analytics, advertising, or tracking services.

How the Application Works

BrightNexus operates entirely on your local machine:

1. Local socket communication — All communication between client applications and the macOS app occurs through an encrypted Unix socket file on your device.
2. End-to-end encryption — Messages are encrypted using ECIES (secp256k1) at the application level.
3. Secure Enclave integration — Cryptographic operations use Apple's Secure Enclave, where private keys never leave the hardware.
4. No persistence of session data — Operations occur in memory during the session; no operational data is written to disk except application code and local configuration files.

What Data Stays Private

All of the following remain on your device and are never transmitted:

• Cryptographic keys (stored in Secure Enclave)
• Public keys used for encryption
• Data being signed or decrypted
• Application state and connection information
• All encrypted and decrypted messages

Security Model

• Hardware-backed security — Private keys are generated and stored exclusively in Apple's Secure Enclave.
• Ephemeral keys — Each ECIES message uses a fresh ephemeral keypair.
• Local processing — All cryptographic operations occur locally on your device.
• Zero-trust local transport — Communication is encrypted even over the local socket.

System Permissions

The application may request the following system permissions:

• Microphone / camera — Not used by this application.
• File access — Limited to application-specific directories.
• Network — The application does not establish network connections.

This Website

This documentation site may use standard web analytics (Google Analytics) to understand aggregate traffic. That applies only to browsing this website and is separate from the BrightNexus application, which does not phone home.

User Responsibilities

While BrightNexus does not collect or transmit data, users should:

• Keep the application and macOS updated
• Protect access to your device and the Unix socket
• Use strong authentication in applications that use this bridge
• Review your client applications' privacy practices

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.

Questions or Concerns

If you have questions about this privacy policy or BrightNexus privacy practices, please open an issue on our GitHub repository.

For technical details about the ECIES protocol and data handling, see the EBP/1 specification.