Privacy Policy
Last updated: 25 October 2026
1Who processes your data
The data controller is The Genesys S.r.l. (sole shareholder), Via Felice Casati 32, 20124 Milan (MI), Italy — VAT and tax code 13675650967. For anything concerning your data, write to dev@thegenesys.tech.
2What we collect, why, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| First name, last name, email address | creating and managing your account, signing you in, replying to you | performance of the contract |
| If you sign in with Google or Apple: name, email address and an identifier of your account with them | signing you in without a password of ours | performance of the contract |
| Profile picture (if you upload one) | showing it on your profile | consent — you upload it, when you want |
| Shipping address and phone number | delivering the physical products you order | performance of the contract |
| Payment details | taking payment for your order | performance of the contract |
| Purchase history | showing you your orders, support, tax obligations | contract and legal obligation |
| Digital wallet address (if you connect one) | issuing and transferring the certificates of your objects | performance of the contract |
| Device identifier for notifications | sending you alerts about your prints | consent |
| Crash diagnostics | understanding why the app closed, and fixing it | legitimate interest in a product that works |
| Hub and printer identifiers (MAC address) | connecting the app to your machines | performance of the contract |
| Images of the print in progress | letting you see what is happening on your printer | performance of the contract |
| Your answer to “Do you already have a 3D printer?” (yes/no), where provided | choosing email content: kits if you answer no, Hermes if you answer yes | legitimate interest; one-click unsubscribe through the link at the bottom of every email |
| Your marketing email choice, date, wording version shown, source and subsequent changes | recording and documenting your choice; the checkbox is not preselected | obligation to demonstrate your choice |
| Email address and registration-path information | sending all registered users a welcome email at registration and reminders after 3 and 10 days, even if the marketing email checkbox is not selected | legitimate interest; one-click unsubscribe through the link at the bottom of every email |
| IP address used temporarily to infer an approximate country and city at registration; country and city are stored in your profile, where available | choosing email language and content | legitimate interest; one-click unsubscribe through the link at the bottom of every email |
| Approximate country and city inferred at registration | counting where registrations come from in an internal, non-public dashboard | legitimate interest |
| IP address, page address and User-Agent in AWS load-balancer logs; IP address in Keycloak sign-in and registration events | security and technical access monitoring | legitimate interest |
If you sign in with Google or Apple, we receive from them your name, your email address and an identifier of your account with them. If you choose to hide your email address with Apple, we receive the forwarding address Apple creates for you. We never receive your Google or Apple password.
If you do not provide an answer about owning a printer, we do not treat it as “no”. This may happen if you sign in with Google or Apple without completing this part of the form.
Emails after registration. Your marketing email choice is recorded, but does not filter the welcome and reminder sequence. Reminders stop if you complete the first step of your path, unsubscribe or close your account.
Country and city at registration. We use the DB-IP “IP to City Lite” database downloaded to our servers. The lookup takes place there: we do not send the user’s IP address to DB-IP or an external lookup service to locate them. Our server uses the IP address only in memory and then discards it. Country and city are not public and are not returned in website or app responses.
3What we do NOT collect
We write it down because it matters just as much:
- no advertising tracking. We do not use your device's advertising identifier and there are no ad networks inside the app;
- no behavioural analytics. There is no analytics tool following what you do inside the app;
- no Wi-Fi network name. The app does not read the name or the identifier of your home network;
- no precise location, and no background location.
- the country and city lookup at registration does not retain the IP address or write it to our server’s logs. It is retained in AWS load-balancer technical logs and Keycloak sign-in and registration events described in section 2.
4Who we share it with
We do not sell your data to anyone. We share it only with those we need in order to run the service for you:
| With whom | What | Why |
|---|---|---|
| Stripe | payment details | taking payment. ⚠️ Card details go straight to Stripe: they do not pass through our systems |
| Apple, Google | purchases made inside the app | handling in-app purchases in their respective stores |
| Google, Apple (signing in with their account) | that you are signing in to Genesys with their account | signing you in: they confirm to us who you are |
| Google (Firebase) | device identifier, crash diagnostics | sending you notifications and fixing defects |
| Amazon Web Services | service data, email addresses, registration data, content needed to send emails and load-balancer access logs | hosts the platform and email systems on our servers; emails are sent through Amazon SES in the Frankfurt region |
| Couriers | name, address, phone number | delivering your parcel |
DB-IP provides a database that we download. It does not receive users’ IP addresses for country and city lookups.
5Where the data goes
Some of the providers listed above (Google, Stripe, Apple) are US companies and may process data outside the European Union: in those cases the transfer relies on European Commission adequacy decisions and/or standard contractual clauses, as declared by the providers themselves.
6How long we keep it
- account data: closing the account disables access but does not delete profile data. This includes the printer answer, path, browser language, registration country and city. After closure we keep it until you ask us to delete it (see section 8);
- email choice history: the choice, date, wording version, source and unsubscriptions remain in the cloud after account closure. We keep them for 24 months after account closure to document and respect your choice;
- AWS load balancer technical logs and Keycloak sign-in and registration events: we keep them for as long as they are needed for the security of the service, to prevent abuse and fraud and to defend our rights in the event of a dispute; at present they have no automatic expiry;
- orders and invoices: ten years, as Italian tax law requires;
- print map location: 24 hours, then it disappears on its own. This period does not apply to country and city inferred at registration;
- crash diagnostics: according to Google Firebase’s retention periods;
- certificates on the blockchain: they are public and permanent by nature: we cannot delete them, and you should know this before connecting a wallet.
When you close your account, we stop the registration email sequence. If you are only on that list, we remove you from the email system. If you also receive the newsletter, you are removed from the registration list and its data, including country, city and sending history, is cleared. The cloud history of your choices remains separate. Any newsletter subscription is handled according to its separate choice.
7Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its use, receive it in a readable format to take elsewhere, and object to processing. Where you have given consent, you can withdraw it whenever you like, without affecting what was done before.
Welcome emails and reminders. You can stop receiving them through the link at the bottom of each email, confirming unsubscription on the page that opens. If your email application offers one-click unsubscribe, you can use it directly. Unsubscribing stops these emails immediately and does not close your account.
The app gives you two direct controls: Profile → Settings → Delete account and the location switch.
For everything else write to dev@thegenesys.tech: we answer within one month. If you believe we handle your data improperly, you can contact the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
8Deleting your account
The Profile → Settings → Delete account control currently deactivates your The Genesys account and access, but does not delete cloud profile data. Retention after closure is described in section 6.
To request deletion of your data, write to dev@thegenesys.tech, even without the app, from your account’s email address. We respond within one month.
In addition:
- registration emails stop, with removal from that list and handling of data in the email system as described in section 6;
- email choice history follows the separate retention stated in section 6;
- orders and invoices are kept for ten years, as Italian tax law requires;
- certificates already written on the blockchain remain: they are public and permanent by nature, and we cannot delete them;
- crash diagnostics stay with Google Firebase, according to its retention periods.
9Children
Genesys is not aimed at children under 16 and we do not knowingly collect their data. If you notice that this has happened, write to us and we will delete it.
10Changes
If we change this document we update the date at the top and, when the change is substantial, we tell you inside the app. The version in force is always the one published here.