About the app you just visited

Someone you know — a town hall, an association, a small business, a community project — wanted a piece of software. They used a platform called Bricks to build it. Bricks uses AI to help with the building.

That's all the icon is saying. It is not a warning. It is a label, the same way a “made in [somewhere]” tag is a label. The European Commission introduced these labels so that you, the person using the software, can see at a glance how the software was made.

The people who built the app — let's call them the operator — went through three steps:

1. The operator decided what they wanted — what forms, what pages, what the app should do.
2. AI drafted the result — the code, the layout, the words on the page. The AI worked from what the operator asked for. It did not invent the project.
3. The operator checked the result and decided what to ship, what to change, and what to throw away.

• The app you visited is the result of that chain. AI helped shape it. A human decided to ship it.

This is the part people most often want to know about. Three things matter here.

• Bricks holds your data only as the operator's processor — never for its own purposes. When you fill in a form, send a message, or upload a file in the app you visited, that data is stored on Bricks-operated infrastructure, but it belongs to the operator and is governed by the operator's privacy policy. Under the GDPR the operator is the data controller and Bricks is its processor: we can technically access the data in order to run and maintain the platform, but we only ever do so on the operator's documented instructions, and we never use it for our own purposes. How we hold, secure and isolate that data is set out in our Data Processing Agreement and Terms, and we are bound by them as a Belgian company under EU law. The AI provider never sees your data — the AI helped build the app, it was not hired to run it.
• AI does not process your interactions, unless the operator explicitly added an AI feature. If the app you visited has an AI feature — a chatbot, an automatic summary, a translation tool — that feature would be visibly labelled. If you didn't see any such label, the AI is in the history of the app, not in its operation.
• The operator decides who can see what. Access rules in the app are defined by humans, not by AI. The platform we built (Bricks) makes those rules visible to the operator and enforces them; AI does not bypass them.

The operator is responsible for the app's content, its rules, and what it does with your data. Their own privacy notice tells you how to reach them, exercise your rights under the GDPR, and ask questions specific to the app you visited.

We — Bricks — are responsible for the platform: the construction tooling, the AI features available to the operator, the data sovereignty guarantees, and the marking layer that brought you here. What we are accountable for as a provider — and how to reach our data protection contact — is set out in our Data Protection Notice. If you have a question about how the platform works, you can reach us. If you have a question about what the operator does with your data, the operator is the right address.