Privacy Policy

1. What We Collect

We collect only the minimal data needed to provide the service:

• Account data — email and name (only if you sign in via GitHub, Google, or email)
• Usage data — number of generations per day (anonymized user ID + date)
• Generated code — stored temporarily to serve your session; not permanently stored unless you explicitly save/publish

2. What We DO NOT Collect

• Your prompts or generated code are never used for training AI models
• We do not sell, rent, or share personal data with third parties
• No tracking cookies, no fingerprinting, no behavioral ads

3. API Keys

If you provide your own Groq API key:

• The key is encrypted (AES-256-GCM) before being stored in your browser's localStorage
• The decryption key is derived from your user ID — no one else can decrypt it
• The key is never sent to our servers except to Groq's API directly
• We never log your API key on the server side

4. Third-Party Services

• Groq — AI inference. Your prompt is sent to Groq when you generate. See Groq Privacy Policy.
• Supabase — authentication and database. See Supabase Privacy Policy.
• Vercel — hosting and analytics (anonymized). See Vercel Privacy Policy.

5. Data Retention

Usage logs are kept for 90 days. Account data is retained until you request deletion. You can delete your account at any time by contacting support.

6. Contact

For privacy inquiries: support@genui.app