Security & privacy
NeuroMyelin Security
Your notes, files and saved work deserve care. Here are the protections and choices available when you use NeuroMyelin.
Access and ownership
- Private files
- Permission-controlled access
- Data export
- Memories and attached files
- Saved-memory recall
- No AI provider required
You choose what to share.
Access to your workspace
Membership and permissions determine who can open and change content in a workspace. Access checks apply to saved memories and attached files. Sharing an item publicly is a separate choice.
Encryption in transit
Information sent between your browser and NeuroMyelin is encrypted using HTTPS with Transport Layer Security (TLS). This protects the connection while you use the web app.
Encryption for saved connection credentials
Saved AI provider API keys and connected-email access and refresh tokens use authenticated encryption (Fernet): AES-128-CBC combined with HMAC-SHA256. AES encrypts the credentials; HMAC checks that the encrypted data has not been altered. CBC encryption alone does not detect tampering. Fernet performs this check before decrypting and rejects data that fails it. Together, these protections keep stored credentials confidential and detect tampering.
Your sign-in, your devices
Sign in with an email code or a registered passkey. In your security settings, you can review active sessions and revoke access from a device you no longer use.
Password-protected memories
Add a password to a memory when you want an extra access check before its content can be opened. Its title remains visible in the memory list, so choose a title that does not reveal sensitive details.
Sharing on your terms
Public links let people view a shared item without an account. You can set a password, expiry and view limit, then review or revoke your links from the Sharing page.
Your connected email stays personal
Connecting Gmail or Microsoft email lets you search your own mail in Recall. Other members of your workspace do not gain access to your connected mailbox by joining the workspace.
Understand when AI is used
Saved-memory Recall works without an AI provider. AI-enabled features may send your question and relevant context to the configured provider. In Ask AI, you choose whether to include your search results. We do not use your saved content to train AI models.
Take your work with you
Export your memories and attached files using the available export tools. Permissions and the export option determine what is included; password-protected memories and their linked content are excluded. Account deletion is available from Settings.
Have a security question before using NeuroMyelin? Contact the team.