Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains what personal data Gienie ("we", "us") collects when you use gienie.ai, app.gienie.ai, and dash.gienie.ai (the "Service"), how we use it, where it is stored, and the choices you have. We collect as little as we can to run the product.

1. Data we collect

Account data (only if you sign in)

Gienie uses GitHub for sign-in. When you sign in, we receive your GitHub profile basics: username, display name, avatar URL, and email address. We do not receive your GitHub password, and we do not request access to your repositories.

Your designs

Designs you save to your account — canvas layouts, component configurations, connections, titles, and any requirements documents you attach — are stored so we can show them back to you and to collaborators you invite. If you use Gienie without an account, designs stay in your browser's local storage and are not sent to our servers.

Usage telemetry

We collect limited usage telemetry — such as which features are used, error reports, and coarse performance metrics — to keep the Service reliable and to understand what to improve. Telemetry is tied to your account where you are signed in and is not sold or shared for advertising.

Support communications

If you email support@gienie.ai, we keep the correspondence so we can help you and keep a record of the request.

2. Where your data is stored

The Service runs on Cloudflare infrastructure. Account data and saved designs are stored in Cloudflare D1 and KV, replicated across Cloudflare's global edge network for performance and availability. Data in transit is encrypted with TLS.

3. AI processing

When you use Gienie Architect, your chat messages and the relevant canvas state are sent to Anthropic's Claude API to generate responses and design changes. This is required for the AI features to work.

We do not use your chat messages, designs, or documents to train AI models. Data sent to the Claude API is processed to generate your response and handled under Anthropic's commercial API terms.

If you attach a requirements document (PDF or markdown) for the AI to read, its contents are likewise sent to the Claude API for processing.

4. Cookies

We use a single session cookie to keep you signed in. That's it — no advertising trackers, no third-party analytics cookies, no cross-site tracking.

5. Payments

Paid subscriptions are processed by our merchant of record, which acts as the seller for the transaction. Your payment card details are collected and processed by the merchant of record — we never see or store your payment card information. We receive only what we need to provision your plan: confirmation of the purchase, the plan purchased, and the subscription status. The merchant of record's own privacy policy applies to the checkout transaction.

6. How we use data

To provide the Service: authenticate you, store and render your designs, enable sharing, and power Gienie Architect.
To operate and improve the Service: debugging, abuse prevention, capacity planning, and product decisions based on aggregate usage.
To communicate with you: service notices, security alerts, and replies to your support requests. We do not send marketing email without your consent.
To comply with legal obligations.

We do not sell personal data, and we do not share it with third parties except the service providers described in this policy (Cloudflare for hosting, Anthropic for AI processing, GitHub for authentication, and our merchant of record for payments), or where required by law.

7. Retention and deletion

Designs: you can delete any design at any time from the app or dashboard; deletion removes it from our primary storage promptly, with residual copies in routine backups expiring on a rolling basis.
Account: you can request account deletion by emailing support@gienie.ai from your account email. We will delete your account data and saved designs, subject to records we must keep for legal or accounting reasons.
Telemetry: retained in identifiable form only as long as needed for operations, then aggregated or deleted.
Local designs: designs stored in your browser without an account are under your control; clearing your browser storage removes them.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict the processing of, or delete your personal data, and to object to certain processing. You can exercise these rights by emailing support@gienie.ai. We will respond within a reasonable time and in accordance with applicable law. You also have the right to complain to your local data-protection authority.

9. Security

We use industry-standard measures to protect your data: TLS encryption in transit, encrypted storage at rest on Cloudflare infrastructure, scoped access controls, and least-privilege access for operations. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you as required by law.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or an in-app notice before they take effect. The "Last updated" date at the top reflects the latest revision.

12. Contact

For privacy questions or requests: support@gienie.ai.