Privacy Policy

1. Data Controller

The data controller for ScreenGeany AI is Ayelite Technologies Private Limited ("we", "us", "our"), a company incorporated in India.

For any privacy-related enquiries, you can reach us at hi@screengeany.ai.

2. What Data We Collect

2.1 Account Information

When you create an account (via Google Sign-In or email/password), we collect and store in Firebase Auth and Firebase Firestore:

• Your email address
• Display name (Google Sign-In only)
• Account creation timestamp
• Your subscription plan (free, lite, or pro)
• Monthly query usage count (resets each calendar month)
• Subscription status and related identifiers (if subscribed)

Email/password accounts require email verification before access is granted. We do not collect or store your password — Firebase Auth handles password hashing on their infrastructure.

2.2 Conversations

We do not store the content of your questions or AI responses. Your conversations exist only in your app's local memory during the current session. When you close the app or start a new session, conversation content is discarded.

Screenshots are never stored. The screenshot captured when you send a query is held in device RAM for the duration of one API call, then immediately discarded — it is never written to Firestore, disk, or any other persistent storage.

2.3 API Keys (BYOK)

If you choose to add your own API key (Bring Your Own Key — available on the Pro plan), the key is:

• Encrypted with AES-256-GCM before being saved to your device
• Stored locally via electron-store in your OS user-data directory (e.g. ~/Library/Application Support/ScreenGeany AI/ on macOS)
• The encryption key is held server-side in Cloudflare Workers KV, tied to your Firebase account — your API key is only decryptable when you are signed in

Your API key is never transmitted in plaintext and is never stored by us in any readable form. You can delete your BYOK key at any time from within the app.

2.4 App Settings

Local preferences such as your chosen AI model, hotkey, screenshot mode, window opacity, and launch-on-startup setting are saved locally via electron-store on your device. These settings are never uploaded to our servers.

2.5 Usage Data

For each AI query, we record minimal metadata under your account in Firestore:

• Timestamp and month of the request
• AI model used
• Token count (input/output)
• Whether BYOK was used
• Active app name (for context, sanitised and truncated)
• Number of screenshots sent with the request

This data is used solely for enforcing usage quotas, internal analytics, and cost tracking. It does not include the content of your questions, AI responses, or screenshots.

2.6 Error Reporting

In production builds, the app uses Sentry for crash and error reporting. Sentry may collect:

• Error stack traces and exception details
• App version and operating system
• A random Sentry-generated device identifier

Sentry reports do not include your screenshots, questions, conversation content, or API keys. You can review Sentry's privacy policy at sentry.io/privacy.

2.7 Payment Information

Payments for the Pro plan are processed by our third-party payment processors, currently Razorpay and/or Paddle. We do not collect or store your credit card number, CVV, or banking details. Our payment processors provide us only with your subscription status (active, cancelled, etc.) and transaction identifiers via webhooks, which we use to update your plan in Firestore.

Where Paddle acts as the Merchant of Record, Paddle is the seller of the subscription and handles all billing, tax collection, invoicing, and refund processing on our behalf. Paddle's processing of your payment data is governed by Paddle's Privacy Policy. Razorpay's processing is governed by Razorpay's Privacy Policy.

2.8 Website Analytics & Live Chat

Our website (https://screengeany.ai) uses the following services:

• Google Analytics — collects anonymised usage data (pages visited, session duration, referral source). See Google's Privacy Policy.
• Microsoft Clarity — collects session recordings and heatmaps (anonymised). See Microsoft's Privacy Statement.
• Tawk.to — provides live chat support. See Tawk.to's Privacy Policy.

These services may use cookies or similar technologies. You can control cookies through your browser settings.

3. How Your Data Flows When You Use the App

When you press the hotkey and send a query, the following happens:

1. Your screen is captured into device RAM as a compressed image
2. The image and your question are sent over HTTPS to our Cloudflare Worker proxy
3. The proxy validates your Firebase ID token, checks your usage quota, and increments your usage count
4. The proxy forwards your request (image + question + recent conversation context) to the AI provider (Anthropic or OpenAI)
5. The AI provider streams a response back through the proxy to your app
6. The screenshot is discarded from RAM; only anonymous usage metadata (token counts, model, timestamp) is recorded in Firestore — no question text or AI response content is stored

The Cloudflare Worker proxy does not log, store, or persist the content of your screenshots, questions, or AI responses. It processes each request in-flight and does not write request payloads to any database or log file.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing your account data and usage metadata is necessary to provide the Service you signed up for.
• Legitimate interest: Error reporting (Sentry), usage analytics, fraud prevention, and service improvement.
• Consent: Where required (e.g. cookies, marketing), we obtain your consent and you may withdraw it at any time.
• Legal obligation: Retaining payment/transaction records as required by applicable tax and accounting laws.

5. Third-Party Services

The app and website integrate with the following third-party services:

6. International Data Transfers

Your data may be processed by third-party services located outside your country of residence, including in the United States (Firebase, Cloudflare, Anthropic, OpenAI, Sentry). These transfers are necessary to provide the Service. Where applicable, we rely on standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms to ensure your data is protected.

7. Data We Do Not Collect

We explicitly do not collect or store:

• Your questions or the text of any query you send to the AI
• AI-generated responses or conversation content
• Your screenshots or screen captures (ever — they exist only in RAM during a single API call)
• Your API keys in plaintext
• Your password (handled by Firebase Auth)
• Your browser history, clipboard contents, keystrokes, or any app data beyond what is visible on screen at query time
• Your IP address or device fingerprint (Cloudflare may see your IP in transit but we do not log it)
• Payment card details (handled entirely by our payment processors)

8. Your Rights

Depending on your jurisdiction (including under GDPR, India's DPDP Act, and other applicable privacy laws), you may have the following rights:

8.1 Access & Portability

You can request a copy of your personal data held by us (account info, usage metadata). Since we do not store conversation content, there is no conversation data to export. For a full data export, email hi@screengeany.ai.

8.2 Rectification

You can update your account information (display name, email) through Firebase Auth settings or by contacting us.

8.3 Deletion

To delete your entire account and all associated data (account info, usage metadata), email hi@screengeany.ai with the subject "Delete My Account". We will process your request within 14 business days. Conversation content is never stored by us, so there is nothing to delete on that front.

8.4 Remove Your API Key

You can remove your BYOK API key at any time via Settings within the app. This deletes the encrypted cipher from your device. The plaintext key was never stored by us.

8.5 Cancel Your Subscription

Pro subscribers can cancel their subscription at any time from Settings within the app. You retain Pro access until the end of the current billing period.

8.6 Object & Restrict Processing

You may object to processing based on legitimate interest or request restriction of processing by contacting us at hi@screengeany.ai.

8.7 Withdraw Consent

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

8.8 Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with your local data protection authority.

9. Data Retention

• Conversation content: Never stored — exists only in local app memory during the session
• Usage metadata: Retained for up to 24 months for analytics, then aggregated or deleted
• Account data: Retained until you request account deletion
• Payment/transaction records: Retained for up to 8 years as required by applicable tax and accounting laws
• Sentry error reports: Retained per Sentry's default retention policy (90 days)
• Screenshots: Never retained — discarded from device RAM after each API call

10. Security

We implement the following security measures to protect your data:

• All data in transit uses HTTPS / TLS 1.3 encryption
• Firebase Auth tokens are short-lived JWTs validated on every API request
• BYOK keys are encrypted with AES-256-GCM; the encryption key is stored server-side with no public access
• Firestore security rules restrict each user to reading and writing only their own data
• The Cloudflare Worker proxy rejects any request without a valid Firebase ID token
• Rate limiting (10 requests per 60 seconds per user) to prevent abuse
• Input sanitisation and prompt injection detection on all API requests

No system is 100% secure. If you discover a security vulnerability, please report it responsibly to hi@screengeany.ai.

11. Children's Privacy

ScreenGeany AI is not directed at children under the age of 13 (or 16 in jurisdictions where a higher age of consent applies). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hi@screengeany.ai and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you via email or in-app notification at least 30 days before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions, data requests, or concerns, contact us at:

Ayelite Technologies Private Limited
Email: hi@screengeany.ai