Legal

Privacy Policy

Last updated 4 September 2026.

This policy explains what GenYak collects and why. The controller is GenYak, operated from Iceland, reachable at genyak@genyak.com. EU/EEA users have GDPR rights, including access, correction, deletion, restriction, portability, objection, and the right to complain to the Icelandic Data Protection Authority (Persónuvernd).

What we process

  • Account data: email, name, hashed password or Google login identifiers.
  • Product photos you upload, and generated studio images if you are signed in (saved in your library so you can download them later).
  • Billing identifiers from Polar (customer and subscription ids, plan, period). Polar processes card data — we never see full card numbers.
  • Usage: images used, extra credits, and, if you accept analytics, page paths in our logs plus Google Analytics page views (no advertising profiles).
  • A guest cookie so we can count free generations before you sign in.

Why

Contract: run the generator, accounts, and paid plans. Legitimate interests: security and abuse prevention, and (only with cookie consent) coarse product analytics. Legal obligation: invoices and tax via Polar.

Who we send data to

  • Google (Gemini) processes your upload to create the output. That can mean a transfer outside the EEA under Google’s terms.
  • Google Analytics (tag G-1B89K2PRJR) is on the site; visit measurement cookies run only after you accept optional analytics. Ads stay off.
  • Polar handles checkout, VAT, and receipts.
  • Vercel hosts the app. Neon hosts the database.
  • Generated files may be stored on Vercel Blob or the app server so your library works.

How long

Guest counts last with the guest cookie (up to a year). Library images stay until you delete them or close the account. Billing records follow Polar’s retention. Analytics events are kept to operate the product; we erase them with your account if you ask.

Your rights

Email genyak@genyak.com to access or delete your account and library. You can delete individual shots from Account. You can refuse analytics cookies and still use the generator.

Children

The service is not directed at children under 16.