Privacy Policy

Effective 1 November 2026

1. What we collect

• Account details: your name, email address, profile picture and how you sign in (Google, GitHub or email). Sign-in is handled by Google Firebase.
• Age check: when you sign up we ask your date of birth to confirm you're old enough to use Genexts. We keep only the result ("age confirmed") and when, not the date itself.
• Birthday and country: the birth date and country you give us once, so Genexts can wish you a happy birthday on the right day in your country and give you a gift of credits. We use it for nothing else and we never share it. It is deleted with your account.
• What you create: chats, projects, saved memories, Genexts Build projects, and files and pictures you upload. Chats you choose to share and bots you publish to the gallery are public to anyone with the link.
• Payments: handled by our payment processor; we never see or store your full card details. We keep a record that you agreed to a plan's renewal terms.
• Reports: if you report content or send a copyright notice, what you write and the email you give us.
• Plan and usage: your plan, Genexts credits, how many requests you make each day, and basic security logs (for example failed sign-ins) to stop abuse.
• Connected apps: if you connect Google Drive, GitHub, GitLab, Canva or your own connectors, the files, repositories or designs you ask about.

2. How your messages are answered

Genexts doesn't run its own AI models. When you send a message, it goes to the provider of the model you picked, which runs it on its own servers:

• Groq for GPT-OSS and Qwen models.
• Google for Gemini models.
• OpenRouter, which passes the message to the company that makes the model (for example Anthropic, OpenAI, NVIDIA, Poolside or Cohere).
• Cloudflare Workers AI for free images (FLUX.1 and Leonardo Lucid Origin): the picture description is sent to Cloudflare.
• Puter for images and videos when Cloudflare isn't used. These are billed to your own Puter account.
• Tavily for web search: the search words are sent to Tavily.
• Fish Audio for reading answers aloud: the text being read is sent to Fish Audio.

Free models: some providers of free models may store or use the messages they receive to improve their models. Please don't share passwords, ID numbers, health or money details, or anything you wouldn't want stored.

Cookies, fonts and tracking

• Strictly necessary only. Genexts uses your browser's storage to keep you signed in, protect against bots (Google reCAPTCHA / Firebase App Check) and remember settings like dark mode. These can't be switched off.
• No analytics or session replay today. We don't record your screen, clicks or keystrokes. If we add analytics or session replay later, they stay off until you choose Accept in the privacy banner, and anything you type stays hidden. Change your choice any time with Cookie settings at the bottom of the page. We treat a browser's Global Privacy Control signal as "Reject".
• Fonts are served from Genexts itself, not from Google Fonts, so loading a page doesn't send your IP address to Google.
• Some code libraries load from jsDelivr and cdnjs, and image tools from Puter. Like any website, these services see your IP address when your browser downloads from them.

Emails

We send account emails (confirm your email, reset your password, payment receipts and subscription terms). Report emails, such as your bots' weekly report, and any newsletter have a one-click Unsubscribe link, and we stop as soon as you use it.

3. Connected apps

• Google Drive: Genexts only reads files when you ask about them, and only creates folders you approve. The Google sign-in token stays in your browser and expires after about an hour.
• GitHub, GitLab and Canva: the sign-in token is stored encrypted on the Genexts server and never sent to your browser. Issues, comments, repositories, files and designs are only created after you press the button on the card.
• Connectors you add yourself (MCP servers and web APIs): Genexts sends them what the AI asks for on your behalf, so only add services you trust. Their keys are stored encrypted and never shown again. Anything that could change data waits for your click.
• You can disconnect any app in Settings → Connectors.

4. Where your data is stored

• Your account, chats, projects and memories are stored in Google Firebase. Firebase security rules mean only you can read them.
• Genexts Build projects, credits and plan details are stored on the Genexts server.
• Some of these services may store data outside India.

5. What we don't do

• We don't sell or rent your personal data.
• We don't use your chats for advertising.
• We don't read your emails, files or repositories unless you ask Genexts to.

6. How we protect it

• Secure sign-in with Firebase, and Google reCAPTCHA checks against bots.
• Every request to Genexts is checked to make sure it really comes from you.
• Connected-app tokens are encrypted, and anything that changes your files or sends something needs your approval.

No system is perfectly secure, but if we ever find a breach that affects you, we'll tell you.

7. How long we keep it

We keep your data while your account is open. When you delete chats or your account, we delete that data from Genexts. Records we have to keep by law, such as payment receipts, may be kept for as long as the law requires.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023, and similar laws, you can:

• See and download your data (Settings → Your data → Export).
• Correct your details (Settings → Account).
• Delete your chats or your whole account (Settings → Security & privacy).
• Withdraw consent by disconnecting apps or deleting your account.
• Complain to us, and if you're not happy with our answer, to the Data Protection Board of India.

9. Children

Genexts is not for children under 13, and we don't knowingly collect personal information from them. Everyone is asked for their date of birth when they sign up. If someone is under 13, we don't create the account, and if an account turns out to belong to someone under 13 we delete it and all its data straight away. We don't keep the date of birth either way.

If you're between 13 and 17, please use Genexts only with permission from a parent or guardian. If you're a parent or guardian and think your child under 13 has given us information, email [email protected] and we'll delete it.

10. Changes and contact

If we change this policy, we'll update the date at the top and tell you in Genexts if the change is important. Questions or requests: email [email protected].