Security & Privacy
Genie 007 is a voice typing and voice command assistant for Chrome, Windows and Mac. It was built so that nothing you say is kept: your audio is processed in real time and discarded. This page is the plain-English overview; the full legal detail is in the Privacy Policy (version 1.2, 24 October 2026).
How your voice is processed
- Audio is captured only while you hold or toggle the shortcut or press the microphone button, and an indicator shows while recording is active.
- The recording travels over an encrypted connection (TLS) to our backend on Google Cloud and on to our speech-recognition partner, which returns the text. In Genie mode, your instruction and the context you asked Genie to work with are sent to our language-model partners, which write the result.
- The finished text is returned to your device and placed where you were writing. Genie 007 then discards the request.
- Genie 007 stores no recordings, no transcripts and no generated text, and keeps no history of what you dictate. Operational logs record sizes and outcomes only, never audio or dictated text.
What we hold about your account
Your email address, name and sign-in method; your plan and credit usage; your personal dictionary words, voice snippets and settings; and pseudonymised product analytics. Payment details are held by Stripe, never by us. Account data is encrypted at rest and is deleted within 30 days when you delete your account (in-app deletion is immediate).
Security measures
- TLS encryption for all traffic; encryption at rest (AES-256, Google Cloud) for stored account data.
- Sign-in through Firebase Authentication with Google, Microsoft, Apple or a verified email address; our backend accepts only valid sign-in tokens.
- Rate limits and abuse controls on every sensitive endpoint; per-user credit limits.
- Access to account data restricted to the founder; no third-party staff.
- The Chrome extension loads no remote code, reads a page only when you activate Genie, and disables itself on payment and banking pages.
Compliance
- GDPR (UK and EU): Genie 007 is the data controller. You can access, correct, export and delete your data at any time; our processing partners act under their API data-processing terms and do not use your data to train their models. A current list of sub-processors is available on request.
- HIPAA: Genie 007 is not a HIPAA product and does not sign Business Associate Agreements. Please keep protected health information out of it.
- Certifications: Genie 007 holds no SOC 2 or ISO 27001 certification of its own; the infrastructure providers (Google Cloud, Stripe) hold theirs.
Questions
Email support@genie007.com. The founder answers security and privacy questions himself, normally within one business day.
