Genee Privacy Policy

Effective date: 9 October 2026. This Privacy Policy replaces any earlier privacy policy published for Genee.

Version: 1.0

At a glance.

Genee uses your data to run the Service for you: AI practice, coaching, bookings and payments.
We don't sell it or use it for advertising. Our providers may not train their AI models on it. We use it to improve Genee only through "Help improve Genee": on by default for AI Practice in the United States (for people who already have an Account, from 11 November 2026), switched off in one tap in Settings, and off elsewhere unless you turn it on (Section 4.5).
We never store emotion data or biometric identifiers.
From 12 October 2026, Genee records Coaching Sessions only in its recording pilot, and only when both you and your Coach agree, every time. It does not record any other Coaching Session.
You can see, download, correct and delete your data, wherever you live.
Questions: privacy@genee.coach.

Who we are. Genee Coaching, LLC ("Genee", "we", "us") provides the Genee coaching service at genee.coach and genee.app. Genee is the controller of the Personal Data described in this Privacy Policy, which means we decide why and how it is used. You can reach us at privacy@genee.coach. We have not yet appointed representatives in the European Union and the United Kingdom under Article 27 of the GDPR and the UK GDPR. Until we do, write to privacy@genee.coach.

Scope. This Privacy Policy applies to clients, Coaches, visitors to our websites, people trying Genee without an Account, and Guests who join a recorded Coaching Session (recording is available from 12 October 2026, in Genee's recording pilot). It is part of our Terms of Service. The Session Recording and AI Notes Terms give more detail about recorded sessions, which are available from 12 October 2026 only in Genee's recording pilot. Section 13 is our Consumer Health Data Privacy Policy for Washington, Nevada and Connecticut.

How to read it. Each section starts with a plain-English summary in italics; the numbered text gives the detail. Capitalised words have the meanings in the Terms of Service, and:

"Personal Data" means any information about an identified or identifiable person, including "personal information" and "consumer health data" as defined in US state laws.
"Provider" means a company that processes Personal Data for us under contract, as listed in Section 5.
"GDPR" means the EU General Data Protection Regulation (2016/679); "UK GDPR" means its UK version.

1. The Personal Data We Collect

In short: we collect what you give us, what the Service produces when you use it, and a small amount from the services you connect. The table says exactly what, for each part of Genee.

1.1 Data you give us. When you create an Account, complete onboarding, book a Coach, send messages or contact us.

1.2 Data the Service produces. When you practice with an AI Partner, take part in a Recorded Session, or use the Service.

1.3 Data from third parties. From Google, if you sign in with Google or connect your Google Calendar, and from Stripe, when you pay.

Part of Genee	Personal Data	Source
Account and sign-in	Name, email address, password (stored only as a hash by our authentication provider), sign-in times, and a one-time code we email you when you sign up. If you sign in with Google: your Google name, email address and profile picture	You; Google
Profile and onboarding	Phone number (optional), country (detected from your device when you sign up), time zone, languages, your preference for your Coach's gender (optional, with a "No preference" choice), industry, goals and challenges you select, and your coaching preferences	You
Identity preferences (optional)	Whether you would like a Coach who shares an experience with you: working parent, first-generation professional, career changer, immigrant background, LGBTQ+, or woman of color. You can skip the question. Coaches may show their own answers on their public profile	You
AI Practice	Your voice, as audio streamed to our voice providers while you practice; recordings of practice audio; camera video, if you record a solo practice run; the transcript (who spoke, what was said and when); and the feedback, scores and summaries the Service produces	You; the Service
Genee's AI assistant ("Jen")	Your messages to the assistant and its replies, which are kept in your browser and, as a conversation, at our provider OpenAI	You; the Service
Coach marketplace and bookings	The Coaches you view and book, booking times, session notes you or your Coach write or share, action items, goals and reviews	You; your Coach; the Service
Messages	Messages and attachments you exchange with your Coach	You; your Coach
Recorded Sessions (from 12 October 2026, in the recording pilot only)	Your choice on the consent screen, and the time, text version, a keyed hash of your IP address and your browser type. If both participants agree: the session's audio, video (only if you both chose video), the transcript, and Meet display names of anyone else in the call. See the Session Recording and AI Notes Terms	You; the Service
Google Calendar (only if you connect it)	Access tokens; the busy and free times of your calendar, without titles, attendees or descriptions; and the session events we add to your calendar, with the participants' email addresses and a Google Meet link	Google
Payments	Your plan, payment status, amounts, the email address used to pay, and Stripe identifiers. We never receive or store your full card number	You; Stripe
Email	Your email address and the emails we send you. We switch off open and click tracking	The Service
Coaches only	Your application, qualifications and documents you upload to prove them, your public profile (photo, bio video, programs, availability), reviews, and the bank details you give us for payouts	You (as a Coach)
Use of the Service and devices	Pages and features used, error and request logs, approximate country (from your connection, not stored), browser type, cookies and similar technologies (Section 9), and product events recorded as categories and numbers, not content	Your device; the Service
Security	A one-way hash of your IP address, where we store it, for rate limits and abuse protection; the IP addresses and request logs that our authentication and hosting providers keep; and, for staff actions, an audit log	The Service
Trying Genee without an account	A temporary guest identifier, a 30-day cookie and the practice run's audio, transcript and scorecard	You; the Service

2. What We Never Collect or Store

In short: Genee doesn't build emotion profiles or biometric templates from you, and doesn't sell your data.

2.1 No emotion data. We do not store any inference about your emotions, mood or affect from your voice, your face or what you say in practice conversations and sessions. Our voice provider computes voice-emotion scores while you speak; the Service neither reads nor stores them. Our database refuses to save emotion fields in the main practice and feedback tables.

2.2 No biometric identifiers. We do not create or store voiceprints, face geometry, face templates or any other biometric identifier, and we do not identify people by voice or face. Since 29 September 2026, in the try-it-out practice, camera cues (where you look and when you turn away) are computed on your own device; no image, landmark or number from your camera leaves it. Recordings and photos you choose to provide are stored as recordings and photos only.

2.3 No sale or sharing for advertising. We do not sell Personal Data, share it for cross-context behavioral advertising, or use it for targeted advertising.

2.4 No payment card numbers. Stripe handles card details; we never receive them.

2.5 Data from before 29 September 2026. Some practice feedback records created before 29 September 2026 still contain emotion scores from an earlier version of the Service. We will delete those fields by 31 December 2026, and we never use them.

3. How We Use Personal Data, and Our Legal Bases

In short: we use your data to provide what you asked for, to keep Genee safe, to meet legal duties and, with your agreement, to record sessions. For people in the EU and UK, each use has a legal basis, shown here.

Purpose	Data used	Legal basis (EU and UK)
Create and run your Account, and sign you in	Account and profile data	Contract (Art. 6(1)(b))
AI Practice: run the conversation, transcribe it and give feedback and scores	Voice, practice audio and video you record, transcripts, feedback	Contract (Art. 6(1)(b))
Match you with Coaches, including by the identity preferences you choose	Profile, goals, identity preferences	Your explicit consent (Art. 6(1)(a) and 9(2)(a)), given when you select a preference; you can remove it at any time in your profile
Book, hold and remind you of Coaching Sessions; sync calendars	Bookings, Google Calendar data	Contract (Art. 6(1)(b))
Record Coaching Sessions in the recording pilot and transcribe them; prepare AI Notes once they are offered	Recordings, Transcripts, AI Notes (when offered), Consent Records	Your consent, given on the Consent Screen for each session (Art. 6(1)(a)); where a session reveals health information, your explicit consent (Art. 9(2)(a))
Keep Consent Records as proof of agreement	Consent Records	Legal obligation and legal claims (Art. 6(1)(c) and (f); Art. 9(2)(f))
Take payments, prevent fraud and keep accounts	Payment data	Contract and legal obligation (Art. 6(1)(b), (c))
Send service emails (codes, bookings, receipts, changes to terms)	Email address	Contract (Art. 6(1)(b))
Keep the Service secure, prevent abuse and enforce our Terms	Security logs, hashed IP addresses, audit logs	Legitimate interests in security (Art. 6(1)(f))
Measure and improve the Service with counts and categories, not content	Product events, usage counts	Legitimate interests in improving the Service (Art. 6(1)(f)), with a right to object (Section 9.2)
Answer you and handle requests about your rights	Your messages, Account data	Legal obligation and legitimate interests (Art. 6(1)(c), (f))
Meet legal duties and defend legal claims	Any relevant data	Legal obligation; legal claims (Art. 6(1)(c), (f); Art. 9(2)(f))

3.1 No other purposes. We do not use Personal Data for advertising, profiling for marketing, or selling. We use it for a new purpose only if that purpose is compatible with the original one, or with your consent.

3.2 Human review. Genee staff do not read your practice conversations or listen to your recordings, except to help you at your request, to investigate abuse or a security incident, where the law requires it, or, where "Help improve Genee" applies to your data, for the quality checks and labelling described in Section 4.5. Staff access to practice transcripts in our admin console requires a written reason and is logged. In the try-it-out practice, the notice shown before you start tells you if the Genee team may review the conversation to improve the Service.

3.3 Improving Genee. We use Personal Data to improve Genee only through the setting "Help improve Genee", on the rules in Section 4.5. It covers AI Practice data: your conversations with an AI Partner, their transcripts, and the feedback and scores. In the United States it is on by default for a new Account, with a notice, and for an Account that already existed on the day the switch is live from 11 November 2026, and you can switch it off in one tap. "In the United States" means that the country on your Account is the United States; if it is unknown or missing, you are treated as outside the United States. In the European Union, the European Economic Area, the United Kingdom and everywhere else outside the United States it is off unless you turn it on, and our legal basis is your consent (Art. 6(1)(a)); content that reveals health information is used only with your explicit consent (Art. 9(2)(a)). Health information and full recordings of Coaching Sessions are not used for this purpose, except that a Recording or Transcript made in Genee's recording pilot may be used for quality checks, labelling and evaluations where both Participants have opted in (Section 4.5(c)).

4. AI Processing and Automated Decisions

In short: AI powers practice and helps draft notes. It never makes decisions about you on its own, and our providers never train their AI models on your data.

4.1 What the AI does. AI models, run for us by the Providers in Section 5, generate AI Partners' replies, voices and faces, transcribe speech, produce feedback and scores, and power the AI assistant. When those features are available, they will also summarise notes your Coach shares and draft session notes for Coaches. Recording is available from 12 October 2026 in the recording pilot, but AI-drafted session notes are not available yet: during the pilot, Coaches write session notes themselves, and Genee's software does not read the Transcript to draft notes.

4.2 No training by our providers. Our contracts with our AI Providers prohibit them from using your data to train their models. The recording provider (Recall.ai), which we use for the recording pilot from 12 October 2026, has confirmed that it does not train on customer data; its retention is set per recording, and Genee will set it to a maximum of 48 hours; and its deletion is permanent, with no backups or archives. Genee's account with HeyGen (LiveAvatar) has opted out of training, and training on Genee's data is switched off in its account with Hume (live voice, until 13 November 2026). We use a Provider's service only under terms that prohibit it from training on your data, and we will use LiveKit, Cartesia or Deepgram directly only under such terms. HeyGen's data processing addendum (heygen.com/data-processing-addendum) applies. Genee itself uses data to improve Genee only as Section 4.5 says.

4.3 No significant automated decisions. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you (GDPR Art. 22). Practice scores are feedback for you; they are not shared with anyone else, including an employer, unless you share them. Once AI-drafted session notes exist, they reach a client only after the Coach confirms them.

4.4 Accuracy. AI output can be wrong. You can correct your data and ask us to correct any output stored about you (Section 8).

4.5 Help improve Genee. This is how Genee itself uses your data to get better: quality checks and labelling (marking what happened in a conversation so we can measure how well Genee works) by Genee staff, and evaluations (testing Genee's own tools and scoring). It uses AI Practice data: your conversations with an AI Partner, their transcripts, and the feedback and scores. It is never used to train any provider's AI models. The setting, which you control in Settings, starts on the day its switch is live, which we plan for 12 October 2026. Until then Genee does not use your data to improve Genee, except that a Recording or Transcript made in Genee's recording pilot may be used where both Participants have opted in, which pilot participants are asked about directly (see (c)). The setting follows these rules, and applies to clients and Coaches alike:

(a) United States: if you open your Account on or after the day the switch is live, it is on by default for AI Practice data. It is disclosed in this Privacy Policy, you acknowledge a notice about it when you sign up, and you can switch it off in one tap in Settings ("Help improve Genee"), or by emailing privacy@genee.coach. If your Account already existed on that day, we email you first. For you it is off until 11 November 2026 unless you turn it on yourself in Settings, and from 11 November 2026 it is on by default until you switch it off. "In the United States" means that the country on your Account is the United States; if it is unknown or missing, you are treated as outside the United States.
(b) Outside the United States, including where the country on your Account is unknown or missing: it is off unless you turn it on in Settings. Until you do, Genee does not use your data to improve Genee. You can turn it off again at any time.
(c) Health information and recordings of Coaching Sessions: practice content that reveals health information, including mental-health information, is not used unless you explicitly agree to that. Genee does not use full recordings of Coaching Sessions, or health or mental-health content from Coaching Sessions, to improve Genee, whatever your setting says. The one exception is a Recording or Transcript made in Genee's recording pilot, which may be used to improve Genee (for quality checks, labelling and evaluations) only where both Participants have opted in to "Help improve Genee", which pilot participants are asked about directly. Such a Recording or Transcript is never used for this in any other case, and no Recording, Transcript or AI Notes is ever used to train any provider's models. Otherwise, Genee will do so only if we later offer a separate, explicit consent for it and you give it.
(d) Not retroactive: the setting applies only to data collected on or after the day it starts for you. That is the day you turn it on yourself or, where it is on by default for you, the day that default starts: the day you open your Account (or the day the switch is live, if later), or 11 November 2026 for an Account that already existed on the day the switch is live. Data collected before that day is never used, except the pilot recordings described in (c).
(e) Switching it off stops any new use at once. It never affects your Plan or your access to the Service.

5. Who We Share Personal Data With

In short: only with the companies that run parts of Genee for us, your Coach, and authorities where the law requires. Never with advertisers or data brokers.

5.1 Providers. These companies process Personal Data on our behalf, under written contracts that limit them to providing their service to Genee, require them to protect it, and prohibit them from selling it or using it to train their own models.

Provider	What they do for Genee	Personal Data involved	Where it is processed
Supabase, Inc.	Database, sign-in and file storage	All data stored in your Account	United States
Vercel Inc.	Website and app hosting	Requests, logs, approximate country	United States
Hume AI, Inc.	Live voice for AI Practice, until Hume closes on 13 November 2026	Your voice while you practice, and the conversation text	United States
OpenAI, L.L.C.	AI models for AI Partners in the practice rooms (written from your transcribed words), feedback, summaries, the AI assistant and speech-to-text for solo practice; if we use OpenAI's real-time voice service, it also hears your voice	Conversation transcripts, practice audio you submit for feedback, messages to the assistant (which OpenAI keeps linked to the conversation), shared notes, and the resumes, LinkedIn text, decks and assessment or onboarding answers you submit to Genee's tools	United States
Anthropic, PBC	AI models for AI Partners in the try-it-out experience, run through Hume (written from your transcribed words); also, once AI Notes are offered (not yet), for drafting session notes	Conversation and session transcripts	United States
HeyGen Technology Inc. (LiveAvatar)	The animated face of an AI Partner	The AI Partner's audio in the try-it-out experience, which uses Lite mode, where HeyGen keeps no session data; in the practice room today, which uses Full mode: your speech and the conversation, which HeyGen processes (with Deepgram for speech-to-text and an ElevenLabs voice) and keeps as a transcript	United States
ElevenLabs Inc.	AI Partner voices in the practice room, through HeyGen	AI Partner text and audio	United States
Deepgram, Inc.	Speech-to-text inside HeyGen, in the practice room	Your voice while you practice, and the words transcribed from it	United States
Stripe, LLC	Payments	Payment details, email, amounts	United States and globally
Twilio SendGrid	Sending our emails	Email address and email content	United States
Google LLC	Sign-in with Google; Google Calendar and Google Meet for Coaching Sessions	Google account name and email; calendar events and busy times; Meet participation	United States

Today all live voice conversations run through Hume, which hears your voice and passes the words to language-model providers (OpenAI and Anthropic); in the practice room, HeyGen (with Deepgram) also hears it. Hume closes on 13 November 2026, and after that date it is no longer used.

Providers not in use yet. These companies do not process your Personal Data today. We list them now so that you have notice of them. We will start using each of them only from the date shown, and only under written terms that prohibit selling your data and training on it:

LiveKit, Inc. (LiveKit Cloud), Cartesia, Inc. and Deepgram, Inc. (directly), from a switch of live voice that we plan to make between 26 October and 13 November 2026. LiveKit carries your voice between your browser and the AI Partner and hosts the voice agent that runs the conversation; its session recording and monitoring will be switched off, so it keeps nothing. Cartesia turns the AI Partner's replies into speech in the try-it-out experience, from the text of each reply, never your voice. Deepgram turns your voice into text.
PostHog, Inc. (EU cloud, Frankfurt), from 12 October 2026, for product analytics (Section 9.2). It will receive a pseudonymous identifier computed from your Account, event names and categories, the page or feature, and the app version; no IP address, names, emails or free text, and nothing about sessions that touch health topics.
Recall.ai (Hyperdoc Inc.), from 12 October 2026, as the Notetaker for recorded Coaching Sessions in the recording pilot, and as the provider of their Transcripts. It will receive session audio and video and Meet display names, and it produces the Transcripts, in the United States.

We will update this list before we start using a Provider that is not listed here. For such a change we will notify you by email at least 30 days in advance, except where a change is urgent for security or continuity, in which case we notify you promptly.

5.2 Your Coach. Your Coach sees your name, profile, goals, the bookings and messages with them, and the session notes for your sessions. If a session is recorded, your Coach will be able to use its Recording and Transcript to prepare notes once Genee shows them in the app; it does not yet. Coaches are bound by confidentiality and data-protection duties in the Coach Agreement.

5.3 Other users. Coaches' public profiles (name, photo, bio video, programs and identity preferences they choose to show) are visible to everyone. Clients' data is never shown to other clients.

5.4 Legal reasons. We disclose Personal Data where the law requires it, for example in response to a valid court order, and only what is required. Where the law allows, we tell you first.

5.5 Business transfers. If Genee is merged or acquired, Personal Data may pass to the new owner, who must keep this Privacy Policy's promises for it. We will tell you before that happens.

5.6 No selling or sharing for advertising. We do not sell Personal Data, and we do not "share" it for cross-context behavioral advertising as California law defines those terms. We have not done so in the past 12 months.

5.7 How Genee uses Google user data.

(a) What we access. If you sign in with Google, we receive your name, email address and profile picture. If you connect Google Calendar, we ask Google for the permissions "calendar.readonly" and "calendar.events", and we access: the list of your calendars, to find your primary calendar and the ones you show; the busy and free times on your primary and shown calendars for about the next 60 days, never titles, descriptions, attendees or locations; and the events Genee itself creates on your primary calendar for your Genee sessions, with the participants and a Google Meet link.
(b) How we use it. Sign-in data creates and secures your Account. Calendar access is used only to show clients the times a Coach is free; to add each booked session, with its Google Meet link, to the Coach's calendar and invite the client; and to update or remove that event when the session is moved or cancelled. We do not use Google user data for advertising, to build user profiles for others, to determine credit-worthiness, or to train or improve generalized artificial intelligence or machine learning models.
(c) How we store and protect it. Google access tokens are stored in our database, under database rules that allow only your own Account and our servers to read them. We store busy intervals, with no titles, attendees, descriptions or locations, and the identifier of each event Genee created. Our admin tools show Genee staff only whether your calendar is connected and when it last synced, not what is in it.
(d) Sharing. We do not sell Google user data or share it with third parties, except the service providers listed in Section 5.1 that host Genee or process it for us under contract only to run Genee, and where the law requires it. We never send Google user data to AI providers.
(e) Retention and deletion. When you disconnect Google Calendar in Genee, we ask Google to revoke Genee's access and delete your tokens, calendar list, busy times and notification channels right away; if Google does not confirm the revocation, we tell you. When you delete your Genee account, we delete your tokens, calendar list and busy times, but we do not revoke Genee's access at Google, so disconnect Google Calendar first or remove Genee's access at https://myaccount.google.com/permissions. You can remove Genee's access there at any time.
(f) Limited Use. Genee's use of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

6. International Transfers

In short: Genee is based in the United States, and your data is stored and processed there. For people in the EU, UK and Switzerland, we protect it with the European Commission's standard contractual clauses and their UK and Swiss versions.

6.1 Where your data goes. Genee and its Providers store and process Personal Data in the United States. If you use Genee from outside the United States, your data is processed in the United States, where data-protection law differs from your country's.

6.2 Safeguards for the EU, EEA, UK and Switzerland. When a Provider receives Personal Data of people in these places, we rely on: (a) the Provider's certification under the EU-US Data Privacy Framework, its UK Extension or the Swiss-US Data Privacy Framework, where it is certified; and in every case (b) the standard contractual clauses approved by the European Commission (Decision 2021/914), with the UK International Data Transfer Addendum and the Swiss amendments, in our contracts with each Provider. We assess each transfer and add measures such as encryption in transit and at rest where needed.

6.3 Copies. You may request a copy of the safeguards for a Provider by writing to privacy@genee.coach.

7. How Long We Keep Personal Data

In short: we keep data only as long as we need it. Recordings, in the recording pilot, have fixed periods; most Account data stays while your Account is open and is deleted within 30 days after you ask us to close it.

The rows for Session video, Session audio and Transcript, Recall.ai's copy, and Consent Records and the notetaker log apply to recordings made in the recording pilot, from 12 October 2026.

Personal Data	How long we keep it
Account, profile and preferences	While your Account is open; deleted within 30 days after you ask us to close it
AI Practice transcripts, feedback, scores and practice audio or video	While your Account is open, unless you ask us to delete them sooner; deleted within 30 days after you close your Account
Messages with a Coach	While your Account is open. After you close it, messages you already sent stay in the Coach's copy, without your profile
Bookings and session notes	While your Account is open. When it is deleted, notes are deleted and booking records needed for accounting are kept in de-identified form. AI summaries of notes your Coach shared are not yet deleted with your Account; write to privacy@genee.coach to have them deleted
Session video (Recording)	90 days after the Recording stops
Session audio and Transcript	12 months after the Recording stops
Recall.ai's copy of a Recording	Until it is transferred to Genee, never more than 48 hours
Consent Records and the session's notetaker log	6 years from the Consent Record
Google Calendar access tokens	Until you disconnect your calendar or close your Account
Payment records	At least 7 years after the end of the tax year of the payment, as tax and accounting law requires; your email is removed when your Account is deleted
Security logs and hashed IP addresses	Up to 12 months. None is that old yet, and until automatic deletion is built we delete them by hand
Staff audit log	400 days. None is that old yet, and until automatic deletion is built we delete them by hand
Product event and cost logs (counts of features used and of AI use, linked to your Account)	Kept after you close your Account, linked only to your Account's internal identifier and not to your name or email; we have not yet set a deletion period for them
Try-it-out practice without an Account	Until you or the person who invited you asks us to delete it
Deletion records (proof that we deleted your data)	6 years
Backups	Overwritten within 30 days, so deleted data leaves our backups within 30 days of deletion

7.1 Deletion. When a period ends, or when you ask us to delete data, we delete it or irreversibly de-identify it. We do not yet send deletion requests to our Providers automatically; on your request we ask them to delete their copies, and they do so under their contracts, normally within 30 days.

7.2 Exceptions. We keep data longer only where the law requires it, or to establish, exercise or defend legal claims, and only for as long as needed.

7.3 The practice room today. In the practice room, which uses HeyGen's Full mode, HeyGen keeps the transcripts of sessions until they are deleted there, and keeps audio and transcripts for 30 days after an account is deleted. In the try-it-out experience (Lite mode) HeyGen keeps nothing. From 30 October 2026 we will move the practice room to Lite mode, or delete each session's transcript at HeyGen when it ends.

8. Your Rights

In short: wherever you live, you can see, get a copy of, correct and delete your data, and withdraw consent. Some places give you more rights; they are listed here. We answer within 30 days and never charge you or treat you worse for asking.

8.1 Rights for everyone. Whatever the law where you live, you may ask us to:

(a) tell you whether we hold Personal Data about you, and give you access to it and a copy, in a common machine-readable format;
(b) correct inaccurate data;
(c) delete your data, subject to Section 7.2;
(d) stop or limit a use of your data, or object to it;
(e) withdraw any consent you have given, at any time, without affecting what was done before; and
(f) explain how a piece of Output about you was produced.

8.2 How to ask. Use "Delete my account" in your profile, which sends us your request, or "Download my data", which gives you a file of your profile details, or write to privacy@genee.coach from your Account email for everything else. We may ask you to confirm your identity. An authorised agent may ask for you with your signed permission. We answer within 30 days. Where the GDPR or UK GDPR applies and a request is complex, we may extend by up to two more months and will tell you why within the first month. We do not charge a fee, and we never discriminate against you for using your rights.

8.3 European Union, EEA, United Kingdom and Switzerland. You also have the rights in Articles 15 to 22 of the GDPR and UK GDPR, including the right to data portability and the right not to be subject to solely automated decisions (Section 4.3). Where we rely on legitimate interests, you may object, and we will stop unless we have compelling legitimate grounds. You may complain to the data-protection authority where you live or work. In the UK that is the Information Commissioner's Office. We would appreciate the chance to resolve your concern first.

8.4 California. Under the California Consumer Privacy Act, as amended, you have the right to know what Personal Data we collect, use and disclose; to access, correct and delete it; to opt out of sale or sharing (we do neither); and to limit the use of sensitive personal information. We use sensitive personal information (Account sign-in details, the contents of your messages and recordings, and identity preferences you choose) only to provide the Service you request, so the right to limit does not change how we use it. We do not sell or share Personal Data, so there is nothing for a Global Privacy Control signal to opt you out of; we do not read such signals. The categories of Personal Data we collected in the past 12 months are those in Section 1, from the sources there, for the purposes in Section 3, disclosed only to the recipients in Section 5.

8.5 Other US states. If you live in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia or another state with a consumer privacy law, you have the rights that law gives you, including access, correction, deletion, portability and opting out of targeted advertising, sale and profiling (we do none of these). We process sensitive data only with your consent. If we refuse a request, you may appeal by writing to privacy@genee.coach with "Appeal" in the subject; we answer within 45 days, and if you remain unsatisfied you may contact your state attorney general.

8.6 Washington, Nevada and Connecticut health data. See Section 13.

9. Cookies and Analytics

In short: we use cookies to sign you in and run Genee. We measure how Genee is used with our own event log. We don't use advertising cookies or pixels.

9.1 Cookies we use.

Cookie	Purpose	Kept for	Type
sb-…-auth-token	Keeps you signed in	Until you sign out, up to 400 days	Strictly necessary
signup_otp	Checks the code we email when you sign up	Minutes	Strictly necessary
genee_gcal_oauth	Protects the Google Calendar connection against forgery	Minutes	Strictly necessary
gn_join_…	Ties a session's joining link to your device (only on the joining link of a session in the recording pilot)	Until the session's link expires	Strictly necessary
genee_practice_anon	Lets you practice without an Account	30 days	Strictly necessary
alloc_invite, alloc_invited_now	Remembers an invitation to try Genee	Up to 60 days	Strictly necessary
gn_vid	A random visitor identifier that keeps the version of the website you see consistent	13 months	Functional
gn_arm, gn_arm_cp, gn_arm_hm	Remember which version of a page or feature you see	Until you close your browser	Functional
gn_ovr, gn_ws	gn_ovr: a version of a page chosen for you by a Genee test link. gn_ws: the workspace you chose, once workspaces are available	gn_ovr up to 7 days; gn_ws up to 13 months	Functional
genee_onboarding_funnel	Remembers where you are in onboarding	Up to 7 days	Functional
__stripe_mid, __stripe_sid	Set by Stripe, on pages that take payment, to prevent fraud and process the payment	Up to 1 year; 30 minutes	Strictly necessary

Browser storage. The app also keeps some settings and answers in your browser's own storage (for example your name, your assistant conversation and your onboarding answers) and uses a service worker to load faster. These stay on your device.

9.2 Product analytics. We measure how Genee is used with our own event log, which records categories and numbers, never the words said in a session. From 12 October 2026 we will also measure it with PostHog, hosted in the European Union. PostHog events will be recorded from our servers and, on pages other than session and feedback pages, through our own domain, so your browser talks only to Genee. PostHog will set no cookies and write nothing to your browser's storage; any identifier its browser code uses will live only in the page's memory and disappear when you close the page. Each event will carry a pseudonymous identifier that we compute from your Account with a secret key, so it is not your name or email; it is still Personal Data. Events will contain categories and numbers (for example "session joined" and the page or feature used), never the words said in a session, names, emails or free text. We will not record screens or sessions, we will not use autocapture, we will send nothing about sessions that touch health topics, and we will not send your IP address to PostHog. You may object to this analytics at any time by emailing privacy@genee.coach. We stopped using Google Analytics before the effective date of this Privacy Policy.

9.3 No advertising tracking. We use no advertising cookies, pixels or similar technologies. No analytics script runs on session or practice feedback pages.

10. Security

In short: we protect your data with strong technical and organisational measures, and we tell you if something goes wrong.

10.1 Measures. These include: encryption in transit (TLS) and at rest by our Providers; database rules that let each user read only their own data; private storage for recordings and practice audio, accessible only through links that expire within an hour; one-way hashing of IP addresses; two-factor authentication and written reasons for staff access to personal data, with an append-only audit log; rate limits; and signed, verified messages between Genee and its Providers.

10.2 Breaches. If a breach of security affects your Personal Data, we notify the authorities and you as the law requires, and in any case without undue delay.

10.3 Your part. Keep your password private and tell us at support@genee.coach if you suspect misuse.

11. Children

In short: Genee is for adults only.

11.1 Genee is for people aged 18 and over. We do not knowingly collect Personal Data from anyone under 18. If we learn that we have, we close the Account and delete the data within 30 days. If you believe a minor has given us data, write to privacy@genee.coach.

12. Changes and Contact

In short: if we change this Privacy Policy in a way that matters, we tell you 30 days before.

12.1 Changes. We will notify you by email and in the Service at least 30 days before a material change takes effect. We will ask for your consent where the law requires it. Earlier versions are available on request.

12.2 Contact. Genee Coaching, LLC. Privacy questions and requests: privacy@genee.coach. Support: support@genee.coach. We have not yet appointed EU and UK representatives (see the start of this Privacy Policy).

13. Consumer Health Data Privacy Policy (Washington, Nevada and Connecticut)

In short: coaching can touch on your health. If it does, we treat that information as consumer health data, use it only to provide coaching, never sell it, and let you see and delete it.

13.1 What we may collect. Information you share in AI Practice, Coaching Sessions, Recordings, Transcripts, messages and notes may reveal your physical or mental health, for example stress, burnout or wellbeing, or a social, psychological or behavioural intervention. We do not ask for health information, and we do not diagnose or infer health conditions from your data. Topics you choose, such as burnout, and the personality-style traits that an assessment you take produces, are not health diagnoses.

13.2 Sources and purposes. We collect it from you and your Coach, only to provide the AI Practice and coaching you request and, only if you explicitly agree, to improve Genee under Section 4.5.

13.3 Consent. We collect consumer health data only to provide the Service you request, and to improve Genee only where you have explicitly agreed under Section 4.5, and record Coaching Sessions (from 12 October 2026, in the recording pilot) only with your consent on the Consent Screen. We do not share it with anyone except the Providers in Section 5, who process it only for us, and your Coach. We never sell it, never use it for advertising, and use no geofencing.

13.4 Your rights. You may confirm whether we hold consumer health data about you, access it, get a list of everyone we have shared it with, delete it (including from backups), and withdraw consent, by writing to privacy@genee.coach. We answer within 45 days. If we refuse, you may appeal by replying with "Appeal", and we answer within 45 days.