Geniffy
Back to Geniffy

Privacy Policy

Last updated 18 October 2026

Geniffy keeps a memory for you: you add notes, files and links, Geniffy learns the facts in them, and you can see, correct, download or erase every one. This page says what we collect, why, where it is kept, and what you can do about it.

Who we are

Geniffy is run by Geniffy Innovations Private Limited (CIN U73100KA2025PTC207213), a company registered in Karnataka, India. We decide how your personal data is used, so under India's Digital Personal Data Protection Act, 2023 we are its data fiduciary. Write to us at privacy@geniffy.com.

What we collect

  • Your account. Your email address. If you sign in with Google, also your name and profile picture from Google. We never see or store a password.
  • What you add. The notes you write, the files you upload, the web pages you send us and their text, and anything you import from ChatGPT or Claude.
  • What your AI apps save. When you connect an AI app (through its sign-in, a plugin or your own key), the conversations and work sessions it sends, including the steps its tools took. Passwords and keys are removed before anything is kept, and you can pause all saving at any time.
  • What Geniffy learns. Short statements (your memories), each with the sentence it came from, when it was learned, and any older value it replaced; short accounts of what happened, where your work stands, the promises and plans you made, and rules and lessons, each tied to what it came from.
  • Questions you ask your memory, and the answers.
  • Payments. Your plan, your invoices and the billing details you give us. Card and UPI details go to Razorpay, who process the payment; we never see or store them.
  • Technical records. Sign-in times, the address and browser a request came from, and errors, kept to secure the service and fix problems.

How we use it

  • To keep your memory: store what you add, learn from it, and answer your questions from it.
  • To sign you in, keep your account safe, and stop abuse.
  • To find and fix problems.

We do not sell your data. We do not show ads. We do not use what you add to train AI models, and nobody at Geniffy reads it unless you ask us to (for example, to help with a problem) or the law requires it.

The AI that reads it

To learn memories and to answer questions, the text involved is sent to Anthropic's Claude models, through Anthropic's API, and when those are unavailable to Google's Gemini models on Google Cloud (Vertex AI). Neither uses it to train its models. Anthropic keeps what it receives on its systems in the United States for up to 30 days, to check for misuse, and then deletes it, unless it must keep it longer to enforce its usage policy or to comply with the law; its models may run in other countries. Google runs Gemini on its global endpoint, so the text may be processed in any country where Google runs it. Their data processing terms with us include the European Commission's standard contractual clauses. What is stored stays where this page says.

Where it is kept

Your account and your memory are stored in India, in AWS Mumbai (ap-south-1). Backups stay in the same region and are kept for up to 35 days. Data is encrypted in transit and at rest. As Geniffy opens in more regions, each account will be kept in its own region, and this page will say so.

Who else handles it

  • Amazon Web Services: hosting, storage and sign-in (Amazon Cognito), in India, and Amazon SES as a backup for our emails.
  • Resend: the emails we send you, such as sign-in codes. It sees your email address and the message.
  • Anthropic: the Claude models that learn from and answer about your memory.
  • Google Cloud: the Gemini models, when Claude is unavailable, and Sign in with Google if you use it.
  • Sentry (European Union): error reports: what broke, where in our code and on which page, linked to your account number only, never to what you add.
  • PostHog (United States): the pages you open, linked to your account number only, never to what you add.
  • Google Workspace: our email. A message you send support arrives there, with your email address and what you wrote.
  • HubSpot (United States): where we answer support messages: your email address, your name and what you wrote to us.

Each works for us under a contract and may use the data only to provide their service to us.

What you can do

  • See every memory and the sentence it came from, on the Memories page.
  • Correct a memory that is wrong, or forget it.
  • Forget a person or topic, or erase all memory, in Settings.
  • Download everything Geniffy remembers about you as one file, in Settings.
  • Delete your account, with everything in it, in Settings.

You can also write to us to use your rights under the law where you live, including your rights under the DPDP Act to access, correct and erase your data, to name someone to act for you, and to have a complaint answered. We reply within 30 days.

How long we keep it

Until you delete it. What you forget, erase or delete is removed from Geniffy at once and from backups within 35 days. Technical records are kept for up to a year.

Children

Geniffy is not for anyone under 18.

Changes

If this policy changes, we update this page. If a change matters, we tell you by email before it takes effect.

Questions and complaints

Write to our Grievance Officer at privacy@geniffy.com. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Geniffy Innovations Private Limited · CIN U73100KA2025PTC207213 · Karnataka, India