Privacy Policy
Effective date: 24 October 2026. Version 1.2. This version replaces version 1.1 of 27 May 2025. The main changes: a plain description of how your voice is processed, the correct statement that Genie 007 stores no recordings and no transcripts, a sub-processor section, UK and EU GDPR rights, and the correct contact address.
Who we are
Genie 007 is made and operated by Bill Kiani, trading as Genie 007, in the United Kingdom (“Genie 007”, “we”). We are the data controller for the personal data described in this policy. You can reach us at support@genie007.com.
What this policy covers
This policy covers the Genie 007 Chrome extension, the Genie 007 apps for Windows and Mac, the website genie007.com and your Genie 007 account. It does not cover the websites and applications you use Genie 007 inside (for example Gmail or LinkedIn), which have their own policies.
How Genie 007 processes your voice
- Recording. Audio is captured on your device only while you hold or toggle the shortcut or press the microphone button, and an indicator shows while recording is active. Nothing is recorded in the background.
- Processing. The recording travels over an encrypted connection (TLS) to our backend on Google Cloud and on to our speech-recognition partner, which turns it into text. In Genie mode, your spoken instruction and the context you asked Genie to work with (the text in the field or on the active window, and on the Windows and Mac apps a screenshot of the active window) are sent to our language-model partners, which write the result.
- Result. The finished text is returned to your device and placed where you were writing. Genie 007 then discards the request.
- What we keep: nothing. Genie 007 does not store your recordings, your transcripts or the text Genie writes, and keeps no history of what you dictate. Our operational logs record that a request happened, its size and whether it succeeded; they contain no audio and no dictated text.
- Our processing partners. Our speech-recognition and language-model partners process your data only to produce your result. Under the API terms we use they do not use your data to train their models, and they retain it only for the limited abuse-monitoring periods their terms set out (currently between zero and 55 days). The live-preview service used only during the onboarding demo processes audio in real time under its business terms. A current list of our sub-processors is available on request from support@genie007.com.
Information we hold about your account
- Identity: your email address, your name and which sign-in method you used (Google, Microsoft, Apple or email).
- Plan and usage: your plan, credits used and available, and when you last signed in. If you pay, Stripe holds your payment details; we hold only Stripe’s customer and subscription references, never card numbers.
- Your settings: words you add to your personal dictionary, voice snippets you create, your preferences, and anything you choose to tell Genie about yourself in Settings so it can write in your voice.
- Technical information: which Genie 007 app you use, its version, your browser or operating system version, and an approximate location derived from your IP address, used for security and compatibility.
- Product analytics: usage events such as which feature was used, how often, and errors, processed by our analytics provider in pseudonymised form. The desktop apps send crash reports to our error-monitoring provider; these contain technical details and no dictated text.
- Support and emails: messages you send us and your email preferences.
Why we use it
- To provide the service you signed up for, including processing your dictation and managing your credits (performance of a contract).
- To keep the service secure, prevent abuse, fix problems and improve the product (our legitimate interests).
- To send you service emails about your account, and, with your consent, occasional product emails. Every marketing email has an unsubscribe link.
- To meet legal and tax obligations.
Who we share it with
We share personal data only with providers that help us run Genie 007, under contracts that restrict what they may do with it: our speech-recognition and language-model partners (described above), Google Cloud and Firebase (hosting, authentication and database), Stripe (payments), our email delivery provider (account and service emails), our analytics and error-monitoring providers, and our website host. We do not sell personal data and we do not share it with advertisers. We may disclose data when the law requires it, to protect our rights or users, or as part of a business transfer.
International transfers
Our backend and most of our providers are in the United States. Where personal data leaves the United Kingdom or the European Economic Area, it is protected by the providers’ standard contractual clauses and the UK addendum, or by the UK and EU adequacy decisions for the Data Privacy Framework where the provider is certified.
How long we keep it
- Recordings, transcripts and generated text: not stored.
- Account data: for as long as your account is open. When you delete your account, your data is removed within 30 days.
- Billing records: as long as tax law requires, normally six years.
- Operational logs: up to 30 days, with no audio and no dictated text.
- Analytics: in pseudonymised form for product analytics.
How we protect it
All traffic uses TLS encryption. Account data is encrypted at rest by Google Cloud (AES-256). Sign-in uses Firebase Authentication with Google, Microsoft, Apple or a verified email address. Our backend applies rate limits and abuse controls, and access to account data is restricted to the founder. Payment data never passes through our servers.
Your rights
Under the UK GDPR and the EU GDPR you can ask to access, correct, delete, restrict or export your personal data, object to processing based on our legitimate interests, and withdraw consent at any time. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.
Deleting your account: use “Delete account” inside the Windows or Mac app or the Chrome extension, which removes your account and its data at once, or email support@genie007.com. We answer requests within one month and may ask you to confirm your identity first.
Children
Genie 007 is not intended for children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
The Chrome extension
- It runs under Chrome’s Manifest V3 and Content Security Policy and does not load remote code.
- It reads the content of the page you are on only when you activate Genie, and only what is needed for the result you asked for.
- It does not collect your browsing history, and it switches itself off on payment, banking and other sensitive pages.
- It stores your preferences and sign-in session in the browser’s extension storage on your device.
Cookies and website analytics
genie007.com uses essential cookies and privacy-friendly product analytics to understand which pages are read. You can block or delete cookies in your browser settings.
United States residents
We do not sell personal information. California residents may ask us not to disclose personal data to third parties for their direct marketing (Civil Code Sections 1798.83 to 1798.84). Nevada residents may opt out of sales as defined in Nevada Revised Statutes Chapter 603A; we make no such sales.
Changes to this policy
When we change this policy we post the new version here with a new version number and date. If a change is material, we also email account holders.
Contact
Privacy questions and requests: support@genie007.com
