App privacy policy

In short

• The app works offline. Most of what you make stays on your device: courses, quizzes, notes, alarms, calendars, business records and chats with Miguel.
• We do not sell your data. The app shows no ads and contains no advertising, analytics or tracking software.
• Data leaves your device only in the cases listed below, and almost always only when you take an action that needs it.
• Signing in is optional. Accounts are for people aged 18 and over; anyone can use the app as a guest.

1. What stays on your device

Unless a section below says otherwise, what you create in the app is stored only on your phone or computer and is never sent to us. This includes:

• course and quiz progress, and certificates, which are rebuilt from your progress;
• courses and exams you author;
• notes, plans, calendars, alarms, trips and saved places;
• records in the work tools (for example sales, stock, customers, payroll and grades);
• your conversations with Miguel, the in-app assistant;
• code, projects and files in the code studios.

Passwords, API keys and sign-in tokens are kept in your device's secure storage. Some records are also encrypted with a password you choose, such as the Health Logbook and password-protected notes. We cannot open them.

Backups are files you create yourself, and you can encrypt them with a password. The app saves the file where you choose, or hands it to another app through your device's share sheet. The app does not upload backups anywhere on its own.

2. Accounts and Sign in with Google

Accounts are optional, and some builds of the app do not offer them yet. When they are offered:

Guest

If you continue as a guest, Google Firebase Authentication creates a random guest identifier. It is not linked to your name, your email or your device's hardware IDs.

Signing in (18 and over)

Before you sign in, the app asks for your birth month and year to check that you are 18 or over.

• If you are under 18, the date is not kept, and you continue as a guest.
• If you are 18 or over, only the year is kept, on your device.

You can sign in with:

• Email and password. Firebase Authentication stores your email address and a protected form of your password. It sends a verification email and, when you ask, a password-reset email.
• Google. Google shares your name, email address and profile picture with the app (the openid, email and profile permissions). Firebase Authentication stores these with your account. The app also keeps your name and email on your device to show who is signed in.

If you sign up after using the app as a guest, the guest identifier is linked to your new account, so what you earned as a guest is kept.

To confirm a transaction, Google accounts set a 6-digit PIN. Only a protected form of the PIN is stored, in your device's secure storage. Signing out removes your sign-in tokens and the PIN from the device.

3. How we use Google user data

The app asks Google for two kinds of access.

Account sign-in

This is your name, email address and profile picture. We use them only to:

• create and sign in to your GenXYZ Lab account;
• show you which account is signed in;
• contact you about your account, when needed.

Optional Google AI sign-in

In Miguel's AI settings, you may choose to use Google's Gemini or Vertex AI through your own Google Cloud project. Google then asks you to allow access to Google Cloud (the cloud-platform and generative-language.retriever permissions).

• The app uses this access only to send the AI requests you make to Google, and to receive the answers.
• The access token is kept in your device's secure storage, and is never sent to us.
• You can remove the app's access at any time in your Google Account, under Security → Third-party apps with account access.

GenXYZ Lab's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. In particular, we:

• do not sell Google user data;
• do not use it for advertising;
• do not use it to train AI models;
• do not let anyone read it except to provide and secure the features above, to comply with the law, or with your permission.

4. Quiz results and certificates

Some courses are connected to a GenXYZ Lab results server, so that the teacher who made the course can see how the class did. When you finish a quiz in one of these courses, the app sends the following to that server:

• the quiz;
• the name you entered;
• your score and the number of correct answers;
• the time you spent on each question;
• how many times you left the quiz or tried it;
• how many answers were unusually fast or slow;
• when you finished.

If you are offline, the result waits on your device and is sent once you are back online. Your score is based on correct answers only; the other figures are shown to the teacher and never change it.

• Who can see results: only someone holding that course's private teacher key can read its results.
• Verified courses: if you pass a course that GenXYZ Lab has verified, anyone who types your exact name into the public certificate check can see your name, the course title and the date you finished. They cannot see your score or any of the other figures. Use a name you are comfortable having found this way, or ask us to remove a record (see section 10).

5. Miguel and other AI features

Miguel works without any AI service, as an offline guide built into the app. If you connect an AI service:

• What is sent: what you type or say to Miguel, plus the app information needed to answer, goes directly from your device to the AI provider you choose. Examples are Anthropic, OpenAI, Google, Groq, Mistral, DeepSeek, OpenRouter, NVIDIA, Cloudflare, Hugging Face, Moonshot, Cerebras, Z.ai, or a server you set up yourself. Those providers handle it under their own privacy policies.
• What Miguel reads: he reads your records in a tool only when your request is about that tool. Secrets and encrypted records are never included.
• What Miguel changes: he changes nothing without showing you the change and getting your approval.
• During exams: Miguel and every AI feature are switched off while an exam is open.
• Voice: if you turn on Miguel's voice, your speech is turned into text by your device's speech recognition or by the provider you chose. Call audio is kept in memory only, and is never saved to your device.
• Pictures: pictures you attach to a chat are sent to your chosen provider only when you send them.

Where accounts are offered, AI features are available only to signed-in adults.

6. Camera, microphone, location and other permissions

The app asks for a permission only when you use a feature that needs it, and you can refuse. Unless stated otherwise, the data is processed on your device and is not sent to us.

• Camera: scanning answer sheets, documents, QR codes and barcodes; reading text from photos; camera effects; and video capture. Text recognition and translation run on your device (Google ML Kit).
• Microphone: voice input, calls with Miguel, meeting recordings that you start (saved on your device) and Private Chat calls.
• Location:
  • location alarms that ring when you arrive somewhere;
  • the "use where I am now" button;
  • stamping a photo with where it was taken, when you ask for that;
  • reading where a photo was taken, when you import it into Trips.
  For location alarms, your device checks your position in the background, but only while such an alarm is switched on. Your location is never sent to us.
• Notifications, alarms and "display over other apps": alarms, reminders and Miguel's optional floating bubble, which stays off until you turn it on.
• Bluetooth, Wi-Fi, USB and the local network: connecting to printers, boards, cameras and smart devices you choose. Device passwords are kept in secure storage.
• Clipboard: when you open the app, it may check copied text to offer something useful (for example, turning a copied schedule into alarms). Copied text is sent to an AI provider only if you ask Miguel about it.

Private Chat messages are end-to-end encrypted for each person in the chat. The person hosting the room cannot read them, and neither can we.

7. Other times the app goes online

• Online courses and templates are downloaded from public Google Drive folders, and AI projects from file storage, when you open or download them.
• Update check: the app reads a small version file from genxyzlab.org to see whether a new version is available.
• Translation and text-recognition language packs are downloaded from Google when you add a language.
• Services you set up: tools such as API Tester, Deploy, DB Connect, Pipelines and the code runners contact the servers you configure, only when you run them.
• Messages, emails and payments: the app prepares them, but you send them yourself from your messaging or email app.

Each request reaches its service with your network address, as any internet request does.

8. Who we share data with

We do not sell or rent personal data. Data reaches other parties only:

• to service providers that run our services:
  • Google Firebase Authentication, for accounts;
  • Google Cloud, which hosts our services;
  • Cloudflare, for our website and network.
  They process data on our behalf;
• to the teacher of a connected course (section 4);
• to services you choose to connect, such as your AI provider (section 5);
• when the law requires it, or to protect people's safety or our services from abuse.

Some of these providers process data outside the Philippines.

9. Security

Our servers use encrypted connections, parameterised database queries, rate limits and strict access keys. On your device, secrets live in the system's secure storage, and encrypted records and backups use AES-256-GCM with a key derived from your password. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

10. How long we keep data, and deleting it

• On your device: data stays until you delete it in the app, clear the app's data or uninstall the app.
• Your account: kept until you ask us to delete it. We then delete your account and the sign-in details Firebase holds within 30 days.
• Quiz results: kept while the course is in use, so teachers can see their class. Ask us to delete a result, or to remove it from the public certificate check, at any time.
• Google access: remove the app's access at any time in your Google Account settings (section 3).

To make a request, see Contact. We may need to confirm that the request comes from you.

11. Children and students

Students of any age may use the app as a guest, and their courses and progress stay on their device. Accounts and AI features are for people aged 18 and over, and the app does not knowingly create an account for anyone younger.

A student's name and results reach a teacher only through a connected course (section 4). If you believe a child's data was collected by mistake, contact us and we will delete it.

12. Your rights

Depending on where you live, the law may give you rights over your personal data. In the Philippines this is the Data Privacy Act of 2012. These rights include:

• to be told how your data is used;
• to see it and get a copy;
• to correct it;
• to have it deleted or blocked;
• to object to its use;
• to complain.

To use them, contact us. In the Philippines, you may also complain to the National Privacy Commission.

13. Changes and contact

If we change this policy, we will update the date at the top. If a change affects how your data is used, for example when paid features or our own AI service become available, we will tell you in the app before the change applies.

Contact: send a message through the Report a bug form on genxyzlab.org, choose the category Other, start it with "Privacy", and include a way to reach you. Do not include passwords or keys.