1. Who we are (Data Controller)
GenIA Wallet is operated by Ada Sarai Sanchez Pallares, based in California, United States ("we", "us"). We act as the data controller for personal data we collect through the Service. Contact: info@geniawallet.app.
2. Personal data we collect
- Account data: name, email address, login credentials, profile preferences (language, currency, experience type).
- Financial and organizational data you enter: goals, pockets, transactions, planner entries, health metrics, documents you upload to the Secure Vault, family/household relationships.
- Support and communication data: messages you send us, feedback, coach interactions.
- Usage and telemetry: pages viewed, features used, device information, browser type, IP address, approximate location, timestamps, crash and error diagnostics.
- Cookies and similar technologies: strictly necessary cookies to keep you signed in and, where applicable, analytics cookies to understand usage.
3. Purposes and legal bases
- Provide the Service (account creation, delivering features, syncing your data) — performance of contract.
- Security and fraud prevention — legitimate interests and legal obligation.
- Support — performance of contract / legitimate interests.
- Product improvement and analytics — legitimate interests (aggregated / de-identified where possible).
- AI features — performance of contract. Prompts and context are processed by our AI providers solely to generate responses to you.
- Marketing communications — with your consent, which you can withdraw at any time.
- Legal compliance — where required by applicable law.
4. How we share your data
We share personal data only with the following categories of recipients:
- Merchant of Record — Paddle: handles payments, subscription management, invoicing and tax compliance. Paddle collects the payment information necessary to process your order (see Paddle's Privacy Policy).
- Cloud hosting and infrastructure providers used to run the Service (databases, storage, authentication, application hosting).
- AI model providers that power our AI Coach and generative features.
- Analytics and error-monitoring providers that help us keep the Service reliable.
- Professional advisers (legal, accounting) as strictly necessary.
- Authorities where required by law, court order, or to protect our rights.
We do not sell your personal data.
5. International transfers
Your data may be processed in the United States and in other countries where our service providers operate. Where transfers involve regions with different data protection laws, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
6. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service. When your account is deleted, we delete or anonymize your data within a reasonable period, except where longer retention is required for legal, tax, accounting or fraud-prevention purposes.
7. Your rights
Subject to applicable law, you may have the right to:
- Access, rectify or delete your personal data;
- Restrict or object to certain processing;
- Request portability of your data;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with a supervisory authority in your country.
To exercise these rights, contact us at info@geniawallet.app. We respond within the timeframe required by applicable law (typically within 30 days).
California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information (we do not sell or share personal information as defined by the CCPA).
8. Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and regular security reviews. No system is fully secure — please use a strong password and enable multi-factor authentication where available.
9. Cookies
We use strictly necessary cookies to run the Service (for example, to keep you signed in). Where analytics cookies are used, you can manage preferences from your browser.
10. Children
The Family, Teens and Kids experiences may be enabled by a responsible adult (parent or guardian) who provides consent and supervises the minor's use of the Service. Do not create an account for a minor without the required parental consent.
11. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be notified through the Service or by email.