This Privacy Policy explains what AdGenie collects, why, and who else sees it. It is written to be read by the person it's about, not a lawyer — for the same information in the app itself, see Profile → Privacy & Security.
AdGenie is made by JCS Lasertech, based in India. For any privacy question or request, contact info@jcs-lasertech.com.
Where the GDPR applies to you, our lawful basis for each of these is either performance of a contract (we cannot run your account, generate your adverts, or honour your subscription without them), legitimate interests (keeping the service secure and preventing abuse), or your consent (push notifications, and anything you choose to share such as your name) — which you can withdraw at any time.
| Data | Why we collect it |
|---|---|
| Email address | To create and secure your account. |
| Password (only if you choose one) | You can sign up with an email address and a password, or sign in with Apple, Google, or a one-time emailed code instead — with those three there is no password at all. Where you do set one, it is stored only as a salted hash by our authentication provider (Supabase). We never see the password itself and it cannot be read back out. |
| Your name | Only if you choose to share it when signing in with Apple or Google. It is used to address you in the app, and you can use AdGenie without it. |
| Product photos and briefs you provide | To generate your advert, and so you can reuse a saved product later. |
| Generated adverts | Stored to your account so they're there next time you sign in, and so you can re-edit or re-export them. |
| Setup answers (business type, where you post, goals) | To shape what the assistant writes for you and which ad formats it defaults to. |
| Billing state (plan, credit balance, ledger) | So the app can show your balance accurately and so we can answer you if a number ever looks wrong. Card details are handled by the App Store or Google Play and never reach us. |
| Push notification token (only if you turn notifications on) | A device-level token that lets us tell you when a generation has finished. It is deleted when you turn notifications off or delete your account. |
Photos you bring in to edit for free — not to generate a new advert — are never uploaded. They stay on your device, and editing happens on the device too.
These are every third party your data reaches, and exactly what each one gets. Each is a processor acting on our instructions under its own data-processing terms.
| Service | What it is for | What it receives |
|---|---|---|
| Google (Gemini) | Generating an advert | Your product photo and brief |
| OpenAI | Generating an advert | Your product photo and brief |
| Replicate | Generating an advert, and Enhance | Your product photo and brief, or the image being enhanced |
| Supabase | Account, database and file storage | Your account, adverts, saved products and setup answers |
| Render | Runs this service | Requests in transit; no permanent copy of your work |
| RevenueCat | Managing your subscription | Your account identifier and which plan you bought. No card details |
| Apple App Store / Google Play | Taking payment | Card details go to them directly and never reach us |
| Apple / Google Sign-In | Signing you in | Your email, and your name if you choose to share it |
| Expo | Push notifications, if you turn them on | A device token only — never your photos or adverts |
We do not use your photos or briefs to train any AI model, and we do not sell or share your personal information with anyone for advertising. Which AI provider handles a given request depends on the model chosen for it; the list above is every provider that can receive one.
We keep your account and its data for as long as your account exists. Deleting your account from Profile removes your account, your adverts, your saved products, your setup answers, and every stored photo — immediately, and it cannot be undone.
| Data | How long we keep it |
|---|---|
| Account, adverts, saved products, setup answers | Until you delete your account, then removed immediately |
| Photos sent to an AI provider | Passed through for that request; we do not keep a separate copy beyond the advert stored to your account |
| Photos you edit for free | Never uploaded — they stay on your device |
| Push notification token | Deleted when you turn notifications off, or when you delete your account |
| Purchase and credit records | Retained after account deletion where we are required to keep financial records, and for handling billing disputes |
| Server logs | Short-term only, for reliability and abuse prevention |
| Anonymous free-trial marker | Survives deletion — see below |
That last row is the one narrow exception to "deleting removes everything": an anonymous record that a device has used a free trial survives deletion, specifically so the same device can't claim a first-time offer repeatedly. It is not linked to you or to anything you made once your account is gone.
Wherever you are, you can access, correct, export, or delete your data at any time from Profile, or by writing to us. If you are in the European Economic Area or UK, you additionally have rights under the GDPR (including the right to lodge a complaint with your local data protection authority). If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we hold and to request its deletion. We do not sell or share personal information as defined by the CCPA/CPRA, and we will not discriminate against you for exercising any of these rights.
Most of these you can do yourself, immediately, from Profile — no request needed. Where you do write to us, we will respond to a verifiable request within 30 days.
Traffic between the app and our servers is encrypted (HTTPS). Your data in our database is protected by row-level security, enforced by the database itself, so a signed-in account can only ever read its own rows. Where you have set a password, it is never stored in readable form: our authentication provider keeps only a salted hash, which cannot be turned back into your password.
Our service providers (Supabase, Render, and the AI providers above) may process data in the United States or other countries outside your own. Where required, we rely on those providers' own safeguards (such as Standard Contractual Clauses) for transfers out of the EEA/UK.
AdGenie does not use browser cookies, and does not currently include any third-party analytics or advertising SDK.
AdGenie is not directed at children and is not intended for use by anyone under 13 (16 in the EEA/UK). We do not knowingly collect personal data from a child under that age.
We may update this policy as the app changes. We'll update the effective date above, and where a change is material we'll say so in the app.
Questions about this policy, or a request about your data: info@jcs-lasertech.com.