Privacy Policy for uGenome
Last updated: October 17, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service. Each use rests on a legal basis of the GDPR, named below under Legal Bases for Processing.
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Account means a unique account created for You to access our Service or parts of our Service.
Application refers to uGenome (shown as uGeno.me), the software program provided by Us, on Android and on the web.
Country refers to: Poland
Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Application.
Service Provider means a company that processes Personal Data on Our behalf, as named under Transfer of Your Personal Data.
Usage Data means what Our servers record automatically when the Service is used (see Usage Data below).
We, Us and Our mean Aleksander Wirth, a private person operating the Service: the controller of Your Personal Data (see Contact Us).
You means the person using the Service, or whose data We process under this Privacy Policy, such as a person invited by a user.
While You use Our Service, We process the following Personal Data:
Email address
An email address another user gives Us to invite You (see Invitations below)
The name You type when You join through an invitation
The user name, year of birth, gender, country, city and language You give in Your profile
Your profile photo, if You add one
Your ratings of titles, with their stars and comments, the titles You skip, and Your likes of other users' comments
The users You follow or ignore, and Your compatibility with other users, which We compute from their profiles and ratings and Yours
Your result of the DISCOVER personality test, if You take it
When You were last active
Usage Data
Your email address (through Google sign-in) and a user name are needed to make an Account; without them We cannot provide the Service. Everything else in Your profile, Your photo, the DISCOVER test, the error and usage reports and the on-device suggestions are Your choice.
When You sign in with Google, Google shares with Us Your email address and, as both apps ask Google for them, Your name and profile picture. We keep the email address, which identifies Your Account; the Android app offers the name as the user name You choose when You sign up; and We use nothing else of what Google shares.
Our servers record each request automatically. The web server's log records the IP address and browser of each request. Our API's log records requests and errors with the ID of the Account that made them, never its email address, and, for the Android app's requests, with its platform, version and build time. The database's log can record an unusually slow search together with the email address searched for. These logs are deleted within about a month: Our log store keeps lines for 30 days, and each server's own log is cleared on the first day of every month.
Which app version You use: each request of the Android app names its platform, version and build time. For each version You use We keep when it was built, when You first and last used it and in how many minutes, so that We know which versions are still in use before We stop supporting one, and can tell which version an error comes from. Used in a browser, uGenome names no version or build time, and We keep no record of its versions. This is deleted with Your Account. Basis: Our legitimate interest in keeping the Service working (Article 6(1)(f)).
Your profile photo, if You take or choose one. The Android app uses the camera only with Your permission, which You can withdraw in Your phone's settings. When You take a selfie with the camera, the Android app checks on Your phone, with Google's MediaPipe library, that it shows a live person; the check runs on Your phone alone and sends nothing to Us or to Google. The photo is uploaded to Our server as Your profile photo and goes to no other service; other users see it, as listed below.
Once You have signed in, the Android app asks whether it may send Us error and usage reports. The box starts unticked, and the app collects nothing unless You tick it. If You agree, the app records on Your phone, and sends to Our own server: which of its screens You open; when a request to Our server fails, its error code or the kind of failure; when the app crashes, the kind of error; when it shows You a notice to update or about maintenance; and when You save a rating, invite someone or finish the DISCOVER test — never what You rated, whom You invited, or anything You write. Each report holds the time, the app's version, its build time and the ID of Your Account, never Your email address. We use the reports to find and fix errors and to see which parts of the app are used. They are kept in Our logs and deleted within about a month; no one else receives them. Until they are sent they wait on Your phone (at most 500) and are not backed up. You can withdraw Your consent at any time in Settings, as easily as You gave it: the app then stops collecting and deletes the reports not yet sent; those already sent are deleted as above. Signing out or deleting Your Account also deletes the reports not yet sent.
If You turn them on in the notification settings, the app writes short lines about Your mates' updates with Google's on-device model (Gemini Nano, through Android's AICore). The text is made on Your phone and is not sent to Us or to Google. Google's ML Kit library, which runs the model, runs on Your phone and sends Google nothing. Basis: Your choice to turn them on (Article 6(1)(a)), which You can withdraw by turning them off.
A user of the Service can invite another person by typing that person's email address in the Application. If You were invited, We received Your email address from the user who invited You, not from You.
For each invitation We store the invited email address, the SHA-256 digest of the invited address, in the form We use to recognise it, the inviting user's Account and user name, the invitation's language, the code of its link, when it was last sent, how many times it was sent again, whether its email is still to go out, whether its email is being sent, when it last went out or was refused by Our email provider, and whether it is pending, joined or accepted. If You join on the invitation's page without an Account, We also store the name You type there, and when, until You first sign in. Once an Account accepts the invitation, We store which Account it was.
An invitation is valid for 30 days after it was last sent; the inviting user may send it again, at most once a day, but once only: an invitation is emailed at most twice. Every invitation, with the name typed on its page, is deleted no later than 31 days after it was last sent, and the name sooner, when You first sign in. Copies of the database made for recovery are deleted within 90 days of being made, and may hold an invitation until then. When the inviting user's Account is deleted, its user name is removed from the invitations it sent, and the invitations it sent whose email, as far as We recorded it, never went out are deleted, as are the records kept for it after a removal; when Your Account is deleted, the invitations to Your address are deleted with it.
Invitation emails go out through our email provider, Brevo, which keeps a record of each email it sends, with the inviting user's name and the invited address, for one month. Each invitation email links this Privacy Policy.
For the daily invitation limits We count the invitations each address sent and received that day, and those each address sent to each other one. A count is kept under the SHA-256 digest of the address, or the digests of the two addresses, not under the addresses themselves, and is deleted at the end of the next day (UTC).
We process the invited address on the basis of the legitimate interest of the inviting user, and Ours, in letting a person invite someone they know (Article 6(1)(f) of the GDPR). We consider that this does not override Your interests: the address comes from someone who knows You, We use it for that user's invitation alone and never for Our own marketing, We send it at most one email a day from each inviting user and at most three a day from all of them, and We delete the invitation no later than 31 days after it was last sent. The invitation email itself tells You where Your address came from and how to object. You may object at any time (Article 21(1) of the GDPR), as described below, or decline simply by not joining: the invitation then expires and is deleted as described above.
The name You type on the invitation's page, and when You typed it, We keep because You ask Us to make Your Account with it when You first sign in: it is a step You request before entering into a contract with Us (Article 6(1)(b) of the GDPR). It is deleted when You first sign in, as Your Account then holds it, or with the invitation, no later than 31 days after the invitation was last sent.
If You have no Account and do not want to be invited, write to ugenomeapp@gmail.com from the invited address with the subject “Delete my invitations”, as described at ugeno.me/docs/delete-account.html. Within 30 days We delete every invitation to it, and from then on send no invitation to it while no Account has it. An invitation email already being sent as We act on Your request may still arrive. For that alone We keep, for as long as We offer invitations, one record: the SHA-256 digest of Your address in the form We use to recognise it (for example without capitals, and at Gmail without dots or a +tag). We do not keep the address itself. So that those who invited You before, and those who try to invite You afterwards, are answered as for any other invitation, by the same daily limits and at most two mails, We keep for each of them, under the same digest, their Account, when they last invited You and how often, whether You had joined on their invitation's page, when the last invitation email to You went out, and whether one is being sent, and delete it as We delete an invitation: no later than 31 days after their last try, or when their Account is deleted. A digest is not anonymous: anyone who already knows the address can compute the same digest and match it. We keep it on the basis of Our legitimate interest in honouring Your objection (Articles 6(1)(f) and 21 of the GDPR). Whoever then tries to invite You is answered as for any other invitation, and nothing is sent; Our answer does not tell them of Your request. If You later make an Account at that address, You can be invited as any user is; if that Account is deleted, the address is again not invited.
We may use Personal Data for the following purposes:
To provide and maintain Our Service, and to find and fix its errors, from Our logs and, if You agree, from the Android app's error and usage reports.
To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
To contact You: by email, about Your Account or Your requests, when necessary.
To match You with other users: We compute Your compatibility with other users from Your profile, Your ratings and Your DISCOVER result, and show You the users You match best.
To manage Your requests: To attend and manage Your requests to Us.
We share Your Personal Data only: with Our Service Providers, for what they do for Us (see Transfer of Your Personal Data); with other users, as listed below; with public authorities where the law requires it (see Disclosure of Your Personal Data); with Google, when uGenome loads Google's sign-in in a browser and when Android's AICore downloads the on-device suggestions' model (see Transfer of Your Personal Data); and, when Your device loads a title's picture or plays a song's preview, with the service that publishes it (see Transfer of Your Personal Data).
Any signed-in user of the Service can read about You:
The shared list of recent ratings shows titles and stars without who rated.
We process Your Personal Data only on these legal bases of the GDPR:
We keep Your Account's data until You delete Your Account; it is then deleted at once, except what ugeno.me/docs/delete-account.html lists under “Kept, and for how long”. Invitations are kept as described under Invitations; Our logs and the error and usage reports for about a month; copies of the database made for recovery for 90 days. Copies of the database made during the closed test, before 26 September 2026, hold the accounts of the people who took part in it, but no invitations; We keep them on Our own computer for as long as the Service runs, as the starting point should the Service ever have to be rebuilt from nothing, and remove from them, within 90 days, every account deleted since. We keep anything longer only where a law requires it, for as long as it requires.
We keep Your Personal Data on Our own server; copies of the database made for recovery, and those of the closed test, also on Our own computer. It leaves them only for the providers named below.
Two providers process Personal Data for Us under their own data processing terms: Google, when You sign in with Your Google account, and Brevo, which sends Our emails. Where they transfer it outside the European Economic Area, they rely, as far as We know, on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework (Articles 46 and 45 of the GDPR); We have not verified this. Emails You send to ugenomeapp@gmail.com, and Our replies, are held by Google in Gmail until We delete them, as described at ugeno.me/docs/delete-account.html.
Google also receives data from Your device under its own terms: in a browser, uGenome loads Google's sign-in from Google's servers (accounts.google.com) on every visit, before You sign in, so Google sees Your device's IP address and what Your browser sends with the request. In the Android app, Google's MediaPipe (the selfie check) and ML Kit (the on-device suggestions) run on Your phone and send Google nothing; when You tap “Download AI model” in the notification settings (or “Download anyway” on mobile data, or “Retry download”), Android's AICore downloads the on-device suggestions' model from Google, which sees Your device's IP address.
A few titles show pictures We made Ourselves, served from Our own server. Every other picture of the titles You and others rate, or You search for, is not kept on Our server: it is loaded by Your device directly from the service that publishes it — Simkl (films and series), Deezer (music), Open Library (books) or Steam (games). Loading a picture lets its service see Your device's IP address, as visiting any website does. Playing a song's preview in the Android app loads it from Deezer in the same way.
To delete Your uGenome account and the data that belongs to it, in the app, on the web or by email, and to see what is kept and for how long, follow the steps at ugeno.me/docs/delete-account.html.
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.
What stays after a deletion, and for how long, is listed on that page.
Under the GDPR You have the right:
To use them, write to ugenomeapp@gmail.com; We answer within one month (Article 12(3) of the GDPR).
You also have the right to lodge a complaint with a supervisory authority (Article 77 of the GDPR): in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or the authority of the EU country where You live or work.
Under certain circumstances, We may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
We may also use or disclose Personal Data where this is necessary to establish, exercise or defend legal claims (Article 6(1)(f) of the GDPR).
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.
Our Service is for adults only: as the Terms and Conditions say, You must be at least 18 years old to use it. We do not knowingly collect Personal Data from anyone under 18; if We learn that We have, We delete that Account and its data. If You are a parent or guardian and You know that Your child has given Us Personal Data, please contact Us.
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We mark every change with a new "Last updated" date at the top of this Privacy Policy; We do not announce it by email. When a change is to what You accepted, the app asks You to accept it again from its next release.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
The controller of Your Personal Data is Aleksander Wirth, a private person, ul. Wiązowa 158, 43-100 Tychy, Poland; email: ugenomeapp@gmail.com.
If you have any questions about this Privacy Policy, You can contact us:
By email: ugenomeapp@gmail.com