Privacy Policy
X00APP100X LTD · Company Number 16931020 · Last Updated: September 2026
1. Who We Are & 2. Scope
Gen AI X App ("the Service", "we", "us", "our") is operated by X00APP100X LTD, 128 City Road, London, EC1V 2NX, United Kingdom (Company Number: 16931020).
X00APP100X LTD is the data controller for personal data processed through genaixapp.com and the Gen AI X App platform. This policy explains how we collect, use, store, share, and protect personal data when you visit our website, register an account, or generate, compile, preview, download, or sync mobile applications.
3. Data We Collect
Name, email address, password hash, and profile data; prompts, instructions, images, and files submitted to the AI generation engine.
Billing name, address, and card last 4 digits. Full card details are processed directly and securely by Stripe; we never store card numbers.
Application code, edit history, and metered action records (token counts, build durations, and credit deductions or refunds).
IP address, browser, device, build logs, and GitHub tokens (only if you connect a repository to sync your code).
Third-party API keys, tokens, and configuration variables (e.g. OpenAI, Gemini, Anthropic, Supabase, Stripe) entered to power your applications. Stored in your private account vault, strictly encrypted in transit and at rest, and accessible only by you.
4. How and Why We Use Your Data
| Purpose | Examples | UK GDPR Legal Basis |
|---|---|---|
| Providing the Service | App generation, container builds, metering credits | Performance of a contract |
| API Key & Secrets Management | Compiling and executing your app's AI/backend integrations | Performance of a contract |
| Billing & Payments | Subscriptions, upgrades, refunds via Stripe | Contract / Legal obligation |
| Security & Fraud Prevention | Detecting abuse, rate limit breaches | Legitimate interests |
| Service Diagnostics | Troubleshooting compiler errors & stability | Legitimate interests |
Zero Data Selling & Zero AI Training: We do not sell personal data to third parties. We do NOT use your user-entered API keys, application secrets, prompts, or proprietary codebase to train artificial intelligence models.
Your environment variables and API keys are strictly purpose-limited to executing the integrations you explicitly configure and can be permanently deleted by you at any time.
5. Automated Processing & 6. Sub-Processors
The Service uses AI (via Google's Gemini API) to assist you in creating software. It does not make legal or significant automated decisions about you (Article 22 UK GDPR). We share data only with verified infrastructure processors:
7. Transfers, 8. Cookies & 9. Retention
- International Transfers: Where data is processed outside the UK (e.g. US data centres), we rely on recognized safeguards including the UK International Data Transfer Addendum and the UK-US Data Bridge.
- Cookies: Essential session cookies required for authentication and security. No advertising tracking cookies.
- Retention: Account and financial ledger records are retained for up to 6 years for UK statutory tax compliance. Generated apps are kept while your account is active.