Privacy Policy

Who we are

Qinnovate is a security research company founded by Kevin Qi, focused on brain-computer interface security and open-source tooling. Tools are provided under the Apache 2.0 or MIT license.

Contact: Open an issue at github.com/qinnovates/neurosecurity/issues or reach out through GitHub.

qinnovate.com (this website)

• No analytics. This site does not run any analytics service. No Google Analytics, no tracking pixels, no usage monitoring.
• No cookies. This site does not set any cookies. Your browser may store a theme preference in localStorage (light/dark mode) — this never leaves your device.
• No accounts. No login, no user accounts, no passwords.
• No data collection. We don't collect your name, email, or any personal information through the site.
• Open source. The site code is public at github.com/qinnovates/neurosecurity. You can verify every claim on this page.

Hosting & third-party services

While qinnovate itself collects no data, the infrastructure that delivers this site to you does process some information:

• GitHub Pages hosts this site. GitHub (Microsoft) may collect server access logs including your IP address, browser type, and pages requested per their privacy statement. Qinnovate does not have access to these logs.
• GitHub hosts the source code and issue tracker. If you open an issue or submit a pull request, GitHub collects your GitHub account information per their privacy policy.

Quorum (Claude Code plugin)

Quorum is a plugin for Claude Code and Cowork. Qinnovate never sees your queries, your data, or your results. However, your queries are processed by Anthropic's infrastructure:

Anthropic's role: Your queries are processed by Anthropic's Claude API. Anthropic's handling of your data is governed by Anthropic's privacy policy. Qinnovate has no control over and no access to data processed by Anthropic.

For maximum privacy: /quorum "query" --no-web --no-save

Full technical details: SAFETY.md on GitHub

Engram (AI memory compression plugin)

Engram compresses, indexes, and optionally encrypts your AI assistant's memory artifacts. All processing is local.

• No data leaves your machine. Zero telemetry. No network calls. No cloud dependency.
• Compression: Reads your AI session files, compresses them locally, stores compressed versions alongside or in place of originals.
• Semantic index: Extracts keywords and summaries from your files, stored locally at ~/.engram/semantic-index.json. Never transmitted.
• Encryption (optional): Uses the age encryption tool with ML-KEM-768 post-quantum cryptography. Private keys are stored in your macOS Keychain or your chosen vault — never by Engram, never transmitted, never stored on disk as files.
• Rust crypto sidecar: The engram-vault binary handles all private key operations. Keys enter only the sidecar's locked memory, never Python's address space.
• Audit logging (opt-in, disabled by default): If enabled, logs operation type, tier, and a 6-character hash prefix. Never logs file paths, content, queries, keys, or PII. Regex-based secret detection blocks any log line matching known secret patterns.

Source code: github.com/qinnovates/engram

Other qinnovate tools

All tools run locally with no telemetry and no network calls to qinnovate unless stated otherwise.

• Open Neural Atlas (NeuroSIM): Interactive 3D brain visualization. Runs in-browser. No data collection. No accounts.
• macshield: macOS network-aware hardening. Runs locally. No telemetry. No network calls to qinnovate.
• qtara: Python SDK for TARA registry management. Runs locally. Fetches public JSON data from qinnovate.com API endpoints (no authentication, no personal data transmitted).
• Neurowall: Neural firewall prototype. Runs on local hardware (OpenBCI). No cloud dependency. No data transmitted.
• QIF-LiDAR: iPhone depth sensing for vision prosthesis research. Runs on-device. Camera data stays on your phone. No cloud upload.
• Dogma (in development): Pet wellness tracker. When released, will process data on-device. Privacy policy will be updated before release.
• BCI Security plugin: Claude Code plugin for BCI threat analysis. Same privacy model as Quorum — queries processed by Anthropic, qinnovate never sees your data.

Open source & third-party modifications

All qinnovate tools are open source under Apache 2.0. The privacy commitments on this page apply only to software obtained from official qinnovate sources (github.com/qinnovates and this website).

Qinnovate has no control over and accepts no responsibility for forks, modifications, or redistributions by third parties. If you obtained a qinnovate tool from a source other than the official GitHub organization, verify its integrity before use.

All tools are provided as-is for research and educational purposes, with no warranty. See the Apache 2.0 LICENSE for full terms.

Research & neural data ethics

• All research is open-access under Apache 2.0 or CC-BY-4.0
• AI collaboration is fully disclosed in every publication (see Transparency Statement)
• No human subjects data is collected, stored, or used. All published datasets are synthetic or derived from public sources
• Neural data is treated as the highest-sensitivity data category. If any future qinnovate tool handles real BCI data, it will implement consent-first architecture with explicit opt-in. This commitment is documented in the project's AI Ethics guidelines

Your rights

Under GDPR (EU), CCPA (California), LGPD (Brazil), PIPA (South Korea), and other privacy laws, you have rights including access, correction, deletion, and portability of your personal data.

Since qinnovate does not collect personal data through this site or its tools, there is typically nothing to access, correct, or delete. If you believe we hold any data about you, contact us and we will address it promptly.

You also have the right to lodge a complaint with your local data protection authority.

Changes to this policy

If this policy changes, the "last updated" date at the top will be updated. For material changes (new data collection, new third-party services), the change will be noted in the project's commit history.

Questions

If you have questions about this policy, open an issue at github.com/qinnovates/quorum/issues or reach out through GitHub.