Who we are
Gengency (“Gengency”, “we”, “us”) makes the Gengency mobile app for iOS and Android and runs this website (together, the “Service”). This policy explains what information we collect when you use the Service, how we use it, who we share it with and the choices you have. For the purposes of data protection law, Gengency is the controller of the personal information described here. You can reach us at any time at support@gengency.app.
Information we collect
Account information
When you create an account we collect your email address. If you sign in with Apple or Google, we receive the email address (which may be an Apple “Hide My Email” relay address) and a unique account identifier from that provider, and, if they share it, your name and profile picture. If you sign in with an email code, we temporarily store a hashed version of the code to verify it.
Your videos and the media we create
When you use Gengency we collect the videos you record or upload (including their audio), the prompts and feedback you type, and the things we create from them to deliver your result: still frames extracted for analysis, a transcript of what is said, a short summary of what we understood, generated reference images (for example your new outfit or background) and your final generated video (together, “Generated Media”). Your videos naturally include your appearance and voice, and may include anyone else who appears in them.
Purchase information
Payments are processed by Apple (App Store) or Google (Google Play). We use RevenueCat to manage subscriptions and token purchases. We receive information such as the product you bought, transaction identifiers, purchase, renewal and expiry dates, price and currency, and store country. We never receive your full payment card details. We also keep a record of your token balance and how tokens were added, spent or refunded.
Device and usage information
We collect limited technical information needed to run the Service: app version, device type, operating system and platform, a push notification token if you allow notifications, IP address and server logs, and in-app events (for example “video submitted” or “generation failed”) that help us keep the Service reliable, prevent abuse and fix problems.
Support and website
If you contact us, we keep your message and our reply. If you use the account deletion form on this website, we collect the email address and any note you enter. Our website does not use advertising or analytics cookies.
How we use your information
- To provide the Service: analyze your video, transcribe its audio, design the new look for you to review, generate your final video, and keep your videos in your library.
- To run your account: sign you in, keep your account secure, and send service messages such as sign-in codes and important updates.
- To handle purchases: add tokens for subscriptions and packs, charge tokens when you submit a video, and refund them automatically when a generation fails.
- To keep Gengency safe: enforce our Terms of Service, prevent fraud and abuse, and investigate reports. Our AI providers may automatically screen content for safety, and we may review specific content when needed to investigate abuse or respond to a report.
- To support you: answer questions and fix problems you report.
- To improve reliability: understand, mostly in aggregate, how the Service performs, so we can make it faster and more dependable.
- To comply with the law: meet legal, tax and accounting obligations and respond to lawful requests.
What we don’t do: we don’t sell your personal information, we don’t use it for advertising, we don’t use advertising SDKs or track you across other companies’ apps and websites, and we don’t use your videos or Generated Media to train our own AI models.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you (providing the Service and handling purchases), our legitimate interests (keeping the Service secure, preventing abuse and improving reliability), your consent (for example push notifications, which you can withdraw at any time), and compliance with legal obligations.
AI and service providers
We work with trusted providers who process information on our behalf, only to provide their services to us. Our current key providers are:
| Provider | What they do for us | Information involved |
|---|---|---|
| Higgsfield | AI video and image generation | Your video, frames, generation instructions and reference images |
| Anthropic | AI understanding of your video and prompt, planning the edit | Frames, transcript, prompt and feedback |
| OpenAI | AI transcription, analysis and image generation | Audio, frames, prompt and feedback |
| Convex | Backend database and file storage | Account information, videos, Generated Media, token balance |
| Vercel | Website and API hosting | Technical and request data |
| RevenueCat | Subscription and purchase management | Purchase information and an app user identifier |
| Resend | Sending sign-in codes by email | Email address |
| Apple and Google | App distribution, payments, sign-in and push notifications | As described in their own privacy policies |
These providers may only use your information to provide services to us, under their business or API terms. Some may keep data for a short period for security and abuse monitoring under their own policies. Apple and Google act as independent controllers for payments and app store accounts. We may change providers over time; we’ll update this list when we do.
When we share information
We share personal information only:
- with the service providers described above, so they can perform services for us;
- when you choose to share — for example when you save a Generated Media video and post it elsewhere;
- when required by law, or when we believe in good faith it’s necessary to protect the rights, property or safety of our users, the public or Gengency — including reporting child sexual abuse material to the appropriate authorities;
- as part of a merger, acquisition or sale of assets, in which case we’ll notify you before your information becomes subject to a different privacy policy; or
- with your consent.
We don’t sell personal information, and we don’t “share” it for cross-context behavioral advertising as those terms are defined under California law.
How long we keep it
- Account information is kept while your account is active.
- Videos and Generated Media are stored while your account is active so you can access them in your library, until you delete them. When you delete a video in the app, we delete the original video and the files created from it.
- When you delete your account, we delete your account information, all your videos and Generated Media, and your token history. Copies in backups and in our providers’ systems are removed on their normal schedules, typically within 30 days.
- Purchase records held by Apple, Google and RevenueCat are kept under their policies. We may keep limited transaction records where the law requires it (for example for tax or accounting).
- Logs and security records are kept for a limited period, and records of deletion requests are kept to show we handled them.
We may keep aggregated or de-identified information that can no longer be linked to you.
Your choices and rights
- Delete a video: remove it from your library in the app at any time.
- Delete your account: in the app go to Settings → Delete account, or use our account deletion page.
- Notifications: turn push notifications off in your device settings.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights. To make a request, email support@gengency.app. We’ll respond within 30 days (or sooner if the law requires) and may need to verify your identity first. If you are in the EEA or UK, you can also complain to your local data protection authority.
Security
We protect your information with industry-standard measures, including encryption in transit (HTTPS), access controls, and short-lived signed links for media files. No method of storage or transmission is 100% secure, but we work hard to protect your data and will notify you if a breach affects you where the law requires.
International transfers
We and our providers may process information in the United States and other countries that may have different data protection laws than where you live. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Children
Gengency isn’t directed to children under 13, or under the minimum age required to consent to data processing in your country (for example 16 in some EU countries). We don’t knowingly collect personal information from them. If you believe a child has given us personal information, contact us at support@gengency.app and we’ll delete it.
Changes to this policy
We may update this policy from time to time. When we do, we’ll change the effective date above, and if the changes are significant we’ll let you know in the app or by email before they take effect.
Contact us
Questions or requests about privacy? Email support@gengency.app. We’re a small team and we read every message.