Last updated: 2026-11-07
This Privacy Policy explains how personal data is handled when you use Genie (“Genie AI”, the “Service”) through genie-ai.app and the Genie clients for macOS, Windows, iOS and Android when they are connected to the Global server. Accounts on the Global server are separate from accounts on the China service (genie-ai.com.cn), which has its own policy.
The Service is operated by Maitansi Inc., the English name of 广州麦坦思信息科技有限公司, a company registered in Guangzhou, Guangdong, People’s Republic of China (“we”, “us”). We are the controller of the personal data described in this Policy. Contact details are in Section 13.
The Service is currently not offered to people in the European Economic Area, the United Kingdom or Switzerland (see Section 1.3 of the Terms of Service). We have not yet put in place the measures those regions’ data protection laws require of services offered there, such as an appointed local representative.
Account data. Email address, username, password (stored only as a one-way hash), and profile data you add, such as a nickname or avatar.
Device data. An app-generated device identifier (a random ID created after install; not an advertising ID), platform, client type, app version and an optional device name, sent with sign-in and API requests.
Content you provide. Depending on the features you use: chat messages and agent context; files you create, import or sync in Vault; images you attach to chats or feedback; feedback, bug reports and screenshots.
Usage and technical data. Credits consumed per request (model, token counts, cost), upload/download byte counts for quotas, IP address, timestamps, and server logs used for security and reliability. These records do not contain your chat text or file contents.
Data we do not collect. We do not collect payment card data (paid features, when offered, will be processed by a payment provider), precise location, contacts, or advertising identifiers.
We do not sell personal data, do not share it for cross-context behavioral advertising, and do not use your conversations or Vault content to train our own models. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
Vault Content belongs to you. We process it only to store and sync it for you and to run features you use. Access requires your signed-in session; object-storage access uses short-lived signed URLs; different users’ Vaults are logically isolated; our staff access systems only to troubleshoot, secure the Service or handle your request, under access controls and audit. Our team is based in the People’s Republic of China and accesses the servers remotely from there.
AI agents and Vault are not fully separate. When you use chat or agents, the AI may read or write Vault files to complete the task, but only within the read/write permissions you grant, which you can limit to specific files and folders and change at any time. Content that the AI reads into a conversation becomes part of that conversation’s input (see Section 5).
To answer a chat or run an agent, your inputs (prompts, conversation context, attached files or images) and the model’s outputs are sent to our servers and then to one or more third-party AI model providers for processing. Some of these providers are located in the People’s Republic of China (see Section 6).
Our servers are in the United States (Ashburn, Virginia). Database backups are kept on a second server in the same region.
We share data only with service providers that process it on our behalf to run the Service:
The current list of providers, with their purpose and location, is on the Subprocessors page, which we update when a provider is added or replaced.
Other disclosures. We may also disclose data when required by law, to protect the rights and safety of users or others, or as part of a merger or acquisition, subject to this Policy. Content you choose to share, such as a shared chat, is visible to the people you share it with.
International transfers. Wherever you are, your data is processed in the United States, Hong Kong SAR and the People’s Republic of China as described above, and our team accesses it from the People’s Republic of China to operate and support the Service (Section 4). The laws there may differ from those where you live. We protect it with the measures in Section 8. Because the Service is not offered in the EEA, the United Kingdom or Switzerland, we have not put in place the transfer mechanisms specific to those regions (such as the European Commission’s Standard Contractual Clauses); if you use the Service from there, you do so on your own initiative.
We use TLS for all traffic between clients and our servers, hash passwords, keep user data logically isolated, restrict and audit staff access, encrypt stored secrets that you save in the app, and keep backups on a separate server. No system is perfectly secure; if a breach affects your personal data, we will notify you and authorities as required by law.
Depending on where you live, you have the right to:
California residents have the right to know what personal information we collect and how we use and disclose it, to delete and correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we do not use sensitive personal information to infer characteristics about you.
To exercise a right, email privacy@genie-ai.com.cn from the email address on your account. We reply within one month (45 days for California requests) and may need to verify your identity. You may use an authorized agent where the law allows.
We use only cookies and browser storage that the Service needs to work or that store a choice you made:
We do not use advertising cookies, third-party analytics, or tracking pixels, and we do not load third-party scripts that set their own cookies. Because these items are strictly necessary or store your own settings, we do not show a cookie consent banner. If we ever add optional cookies, such as analytics, we will ask for your consent first where the law requires it. You can block or delete cookies in your browser settings, but you may then need to sign in again and some settings will not be kept.
The Service is intended for adults. You must be at least 18 years old (or the age of majority where you live, if higher) to create an account. If we learn that we have collected data from someone under 18, we will delete it and close the account.
We will post updates on this page with a new “Last updated” date. For material changes, for example new purposes or new categories of recipients, we will also notify you in the app or by email before they take effect.
This English version is the governing text of this Policy. Translations are provided for convenience.