Genie Privacy Policy

Effective September 15, 2026

This Policy explains how Genie Travel, Inc. (Genie, we, or us) collects, uses, and shares information when you use Genie and our related apps, features, and services (Products). Please read it alongside the Terms of Service. Using Genie means agreeing to the practices described here; it does not replace consent that must be obtained separately. The Consumer Health Data Privacy Policy for Washington, Nevada Consumer Health Data Privacy Policy, Japan Privacy Supplement, and South Korea Privacy Supplement give more specific information where they apply. Their applicable privacy requirements control conflicting general language; they do not replace a consent that must be obtained separately.

Contact: hi@geniegetsme.com; Genie Travel, Inc., 151 SE 1st St., #630, Miami, FL 33131, USA.

The short version

What you tell Genie is not private by default. Genie does its best to decide what to share and what to keep close, but there is no guarantee. It uses information you provide, connected sources, and memories to help you, communicate, and act on your behalf. Ordinary information may be shared automatically with your connections. AI will make mistakes, including incorrect memories, disclosures, and Actions; the Terms explain your acceptance of their consequences.

We do not sell personal information. Eligible Materials may be used for model training unless you opt out, subject to the safety-review exception and restrictions below. Personalization, including sponsored recommendations, is part of Genie. Sections 13-14 explain work with business partners and promotional uses. Personal memory is separate from model training. Accounts are for adults 18 and older.

1. Who we are

Genie Travel, Inc. is the controller of information processed under this Policy. You can reach us using the contact details above.

If you are located in the EU or UK and have questions or concerns regarding your personal data, you may contact our appointed GDPR representative:

EU Representative:
Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork
T23 AT2P
Ireland

Email: gdpr@euverify.com

UK Representative:
Euverify Ltd (UK)
3rd Floor
86-90 Paul Street
London
EC2A 4NE
United Kingdom

Email: gdpr@euverify.com

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal at:

https://gdpr.euverify.com/verify/9e5bbb2b-efea-4c65-9c0f-0e0c5014a588

This link allows you to verify our appointed representative and submit GDPR requests directly. Requests submitted through this portal are logged and tracked to ensure timely response and compliance.

2. Memory and sharing with people you know

Genie may keep facts, preferences, summaries, and inferred interests across conversations as memories, separately from the source content. Inferences may be wrong, incomplete, or outdated.

The assistant uses context, relationships, information, settings, and instructions to judge what to share and what to keep close. It may share ordinary information proactively with connections when that seems relevant and natural, including information told only to Genie, without approval of each item or recipient.

Genie aims to hold back information marked private, confined to a conversation, or otherwise judged better kept close, and to avoid sharing Sensitive Categories without your clear choice. These are design aims, not guarantees of privacy, correct judgment, or a fixed audience. Required consent and restrictions still apply. Terms Section 2 explains the model and error consequences.

What you contribute to a group may still inform responses after you leave. Others can re-share what they receive, and we cannot retrieve their copies. Terms Section 6.3 and Section 13 below explain promotional uses.

3. Information you share with us

We collect account and profile details; messages, photos, files, instructions, and other content; voice interactions; settings; payment and transaction information; and support, survey, and feedback communications. For messaging programs, we may also collect phone numbers and records of enrollment, consent, message delivery, and opt-outs. Stores and processors handle payment credentials, and we receive information needed for billing, records, and support. Inputs and Outputs are collectively Materials under the Terms.

4. Connected and other sources

Integrations you enable may access, copy, index, process, and exchange messages, email, calendars, contacts, photos, calls, and other account information, including information about other people, under applicable permissions. Login integrations may provide profile and contact details. We may also receive information from other users, partners, and other outside sources for the purposes described here; we do not warrant the accuracy of that third-party information.

You can use available controls or contact us to request deletion of indexed information or memories. Disconnecting a source stops future access, but does not itself erase indexed information or memories. We may continue permitted uses until deletion is requested or otherwise required.

Source restrictions override broader uses described here. Information received from Google APIs is handled under the Google API Services User Data Policy, including applicable Limited Use requirements. Google Workspace data and derivations subject to those restrictions are not used for advertising or to train or improve models beyond the specific user's personalized model for an appropriate feature. Human access, transfers, retention, and provider use follow the applicable policies. Other sources' restrictions apply where relevant. Neither the natural-sharing model, promotional license, nor training permission or safety exception overrides these limits.

5. Sensitive information

Depending on applicable law, Sensitive Categories include racial or ethnic origin; social or caste status; religious, philosophical, or political beliefs; union membership; health or disability; sex life or sexual orientation; genetics; identifying biometrics; precise location; citizenship or immigration status; government identifiers; protected account or financial credentials; criminal history or victim status; private communications with people other than Genie; and children's information. Inferences can also be sensitive.

We obtain consent or another required legal basis and apply legally required restrictions. Recording and biometric features have their own notice and consent requirements where applicable; your agreement does not provide another person's required consent. You may withdraw consent as described below.

6. Information about people who do not use Genie

Users and sources may provide information about contacts, correspondents, group participants, and other people. Users must have the rights and authority to provide it. We process it for the purposes described here only as permitted by law and source restrictions. A user's agreement does not replace another person's legally required consent. People who do not use Genie may also contact us to exercise applicable rights.

7. Information collected as you use Genie

We collect device and app details, identifiers, IP addresses, diagnostics, crash information, usage and Action records, and approximate location. Enabled features may collect page activity and interaction events such as clicks, cursor movement, keystrokes, and time spent. Precise location requires permission. Collection follows disclosed purposes, applicable permissions, and data-minimization requirements. Section 10 covers tracking technologies.

8. How we use your information

We use information to operate and personalize Genie and its memory; communicate through the natural-sharing model, carry out Actions, and use licensed promotional content; handle subscriptions; communicate with you; maintain security; prevent abuse; enforce terms; analyze, develop, train, and improve our Products and other products and services; and comply with law. Sections 11 and 13 cover training and commercial personalization.

Recipients include connections and groups, Action counterparties, promotional recipients, and those in Section 14. Applicable permissions, legal bases, and source restrictions determine permitted uses. We may create, obtain, use, retain, and disclose lawfully de-identified or aggregated information for any lawful purpose, including developing our technologies and services. Applicable source restrictions continue; encoding or aggregation alone does not make identifiable information anonymous.

9. Our legal bases in the EEA and UK

We rely on contract for processing objectively necessary for requested features; legitimate interests for appropriate security, support, personalization, recommendations, marketing, analysis, development, and improvement where your interests do not override ours; consent where required; and legal obligations for required processing. Sensitive and criminal-offence data require additional conditions where applicable.

We obtain any separately required consent for sensitive processing, training, marketing, and other regulated uses. Personalization being part of the Products does not replace the legal basis required for a particular use. Choosing not to give, or later withdrawing, a permission may limit some or all Products, subject to applicable law.

10. Cookies and similar technologies

We and third parties may use cookies, SDKs, pixels, and similar technologies for operation, settings, security, analytics, personalization, and offers or promotions. Your browser or device may let you block or delete them, but this can affect how features work. We obtain required consent and honor legally required preference signals and applicable controls; we do not promise to respond to every browser signal. Sections 13-14 govern related disclosures.

11. AI, review, and helping Genie improve

Assistance and review. We process Materials and memories for personal assistance, sharing, and Actions using automated systems, human review, and third-party AI providers. Review may support quality, evaluation, debugging, support, safety, development, and improvement, subject to applicable access and source restrictions. We obtain required permission for third-party AI processing.

Training and your opt-out. We may use eligible Materials and interactions to train, fine-tune, evaluate, and improve models used across users. You can opt out through available settings or by contacting hi@geniegetsme.com. The opt-out applies going forward to model training, not personal memory, permitted review, or non-training improvements, and may limit improvements for your use case. Required consent, sensitive-data restrictions, and source prohibitions still apply; an opt-out does not replace an opt-in where legally required.

Safety review. After a general training opt-out, eligible Materials flagged for safety review may still be used to train systems for harmful-content detection, policy enforcement, or safety research. This exception does not override statutory objection or deletion rights, withdrawal of required consent, source restrictions, or an express feature-specific no-training commitment.

Models already trained. We may keep using models trained, fine-tuned, or improved before your opt-out. Opt-out alone does not require rebuilding or retraining them. Legally required erasure, restrictions, and source obligations still apply. Providers may process eligible Materials for the purposes described here under applicable contractual, legal, and source restrictions.

Significant automated decisions. We use solely automated decisions with legal or similarly significant effects only where lawful, with required safeguards, including human review and an opportunity to contest the decision. You can contact us to request applicable review.

12. Your choices and requests

For help with your information, use available controls or contact hi@geniegetsme.com to adjust sharing, training, or marketing choices; disconnect sources; remove connections; or request access, correction, or deletion.

Deleting a chat and deleting a saved memory are different; you can request both. Saved memories and source imports may remain unless your request covers them or deletion is otherwise required. Applicable erasure rights cover identifiable derived information within scope, not just the original message. Genie may infer similar information again from sources still available to it; we do not guarantee permanent suppression beyond applicable obligations.

Depending on the law, you may access, correct, delete, or obtain a portable copy of information; restrict or object to processing; withdraw consent; limit sensitive-information use; or opt out of sale, sharing, targeted advertising, or certain profiling.

We honor legally required signals, including Global Privacy Control, verify requests, accept authorized agents where permitted, meet applicable deadlines, and provide required appeals. You may also complain to a regulator.

Withdrawing consent affects future consent-based processing, not earlier lawful use or disclosures. It may limit or prevent some or all Products. Where lawful, we may suspend or close affected features or your account if we cannot reasonably provide them without that processing. We do not unlawfully discriminate for exercising rights.

Marketing opt-outs do not stop necessary service notices through another appropriate channel. Section 16 explains retention and deletion. Any affected prepaid period is also subject to the applicable replacement terms in Terms Section 9.

13. Recommendations, sponsored content, and promotion

We do not sell personal information. Genie may earn commissions, placement fees, or click-based fees; we disclose paid relationships where required. A sale includes an exchange for something other than money where applicable privacy law treats that exchange as a sale. The partner permissions below do not override this commitment.

We use eligible information, including connected-source information where permitted, to personalize recommendations, sponsored content, and promoted media. We may work with providers and business partners under Section 14 for offers, promotions, and measurement. They may receive aggregate or anonymized information, or other information where lawful and with required consent. Disclosures are not limited to aggregate information; advertising opt-outs, source restrictions, and the no-sale commitment still apply.

Personalization is part of how Genie works, rather than a separate feature you can turn off unless law requires that choice. You can choose whether this approach works for you: use Genie only if you agree to these permitted uses, and close your account if you no longer agree. We honor applicable objection, opt-out, consent-withdrawal, and non-discrimination rights, including EEA/UK direct-marketing objections. Exercising rights may affect some or all Products only where lawful; we do not promise a non-personalized alternative.

Featuring openly shared content. Terms Section 6.3 licenses public or openly shared content and associated identities for Genie and partner promotion of Genie and the Products, without payment or further approval. The license continues after deletion and account closure, subject to required withdrawal, objection, erasure, and consent. Private content is not licensed contrary to its settings. Source restrictions and the no-sale commitment remain. The license covers only rights the user owns or is authorized to grant; appearing in content does not, by itself, establish another person's consent.

14. Who else may receive information

We may disclose information to affiliates and our corporate group; providers supporting hosting, AI, communications, analytics, payments, and operations; advisers such as lawyers, auditors, and accountants; and third parties with which Genie interacts on your behalf. Providers act under applicable restrictions; independent counterparties have their own notices.

Business partners may use information for their own purposes. We may provide aggregated or anonymized information, or other information in accordance with applicable law, including required consent. Our no-sale commitment and source restrictions continue to apply. This includes the restrictions on partner uses of Google Workspace information in Section 4. Licensed public or openly shared content may also be provided for promotion under Section 13.

We may disclose information in connection with or in anticipation of financing, reorganization, merger, acquisition, assignment, or sale; at your direction; or as lawfully needed for regulatory or law-enforcement inquiries, claims, security, fraud, abuse, or protection of rights and safety. Messaging consent records and program phone numbers remain subject to applicable provider restrictions and program notices; general partner permissions do not override them.

Links and integrations are not endorsements. Please review other services' policies: we do not control their information practices, content, privacy, or security. Others may see or use information you disclose in public or semi-public third-party spaces. Applicable law, this Policy, and source restrictions govern all disclosures.

15. When information crosses borders

Your information may be processed outside your country, including in the United States. Where required, we use recognized safeguards such as adequacy decisions, Standard Contractual Clauses, applicable UK mechanisms, and additional measures. You can contact us for information about the relevant safeguards.

16. How long information stays with Genie

We may keep information during and after your use of an account for the disclosed purposes, taking account of sensitivity, settings, source restrictions, operational needs, security, disputes, and legal requirements. Memories may carry across conversations. Closing, suspending, or terminating an account does not itself erase every Material, memory, or record. An account-deletion request includes associated erasure to the extent required by law, platform rules, and the deletion flow's disclosed scope.

We address deletion requests within applicable legal deadlines. Shared records, restricted backups, and information needed for lawful security, compliance, or claims purposes may remain. Applicable erasure duties cover memories, identifiable inferences, indexes, and provider copies.

We handle deletion under the requirements above, but can't promise one deletion period for every situation, immediate removal from every system, or automatic rebuilding of trained models. Legally required deletion and restrictions still apply. We delete or lawfully anonymize information when retention is no longer justified.

17. Keeping information secure

We use technical and organizational measures designed to protect information, but no system is completely secure. We cannot guarantee security or error-free handling, including during transmission. Connected content or other people may include misleading instructions that influence the assistant into unintended communications, transactions, or disclosures. Please review important Actions and avoid insecure channels for confidential information. We respond to incidents and give notices as law requires. The Terms explain contractual risk allocation without waiving mandatory duties.

18. Adults and information about minors

Accounts are for people 18 and older. We address underage accounts and associated information as law requires. Sources adults lawfully connect may incidentally contain information about minors; we apply required restrictions and address applicable deletion rights. Genie is not offered for profiling children.

19. Changes to this Policy

We may update this Policy and its effective date from time to time. Updates take effect when posted or on the specified later date. We provide legally required notice and obtain required consent for changed uses. Continuing to use Genie does not replace consent where required. Expanded uses of information already collected remain subject to the applicable original commitments and any notice or new consent the law requires.

20. Questions?

Questions about your information, or something you would like us to review? Please contact hi@geniegetsme.com or our address above with questions, complaints, or requests. You may also contact a regulator.

Additional information for specific regions

A. California and other US states

During the past 12 months, depending on the features used, collected categories include identifiers; customer records; commercial information; internet or network activity; approximate and precise geolocation; audio/visual information; sensitive personal information; and inferences. Sources are you, connected services and participants, devices, and transaction or service providers. Sections 8, 11, and 13-16 explain the relevant purposes, recipients, and retention criteria.

We do not sell personal information. Sections 10, 13, and 14 describe other permitted disclosures. California rights include access, correction, deletion, applicable sale or cross-context-advertising-sharing opt-outs, sensitive-use limits, and non-discrimination. Other applicable state laws may cover targeted advertising, significant profiling, and appeals. Use Section 12 to exercise rights. The Consumer Health Data Privacy Policy for Washington and Nevada Consumer Health Data Privacy Policy explain covered health-data practices and requests. Required sensitive-data consents and any additional feature-specific biometric or other notices still apply.

B. EEA and UK

Genie is the controller. Sections 9, 12, and 15 address legal bases, rights, and transfers. Contact the applicable representative in Section 1 or your supervisory authority. Mandatory privacy rights apply regardless of contractual liability limits.

C. Japan and South Korea

The Japan Privacy Supplement and South Korea Privacy Supplement explain the applicable local rules in Japanese and Korean. Read the relevant supplement alongside this Policy and any feature-specific collection, recipient, processing, or transfer notice. Required consent is obtained separately; these documents do not themselves supply it.