Privacy notice

This is a translation: the Italian version is the one that applies.

Who processes the data

The data controller is Andrea Falzetti, who runs Geenuga. For any question or request about your data: supporto@geenuga.com.

What data, and why

• Account: name, email, password (stored encrypted), last sign-in. We need these to let you in and to write to you. If you sign in with Apple or Google, we receive from them only an identifier and your email (with Apple it can be an address that forwards to yours).
• Family data in Geenuga Casa, entered by you or your assistant: saved homes (listing details, photos, notes, ratings), searches, the places you go to with their addresses, budget and income, dates of birth, who will live in the home with you (with their names and, for children, their year of birth), work details relevant to the mortgage, bank offers and their information sheets (ESIS, in Italian PIES), viewings, document checklists, the “we're looking for a home” ad. We need these to give you the service you ask for: calculations, comparisons, drive times, reminders.
• A baby on the way, if you mention one: this is health information, and we process it only with your explicit consent, which you give by entering it. It is used only to count bedrooms and we don't give it to anyone, except your assistant when you connect it yourself. You can remove it whenever you like from who will live in the home with you: that withdraws your consent.
• Connected assistants: which assistant you've connected and when you last used it. Of the access tokens we keep only a fingerprint, never the token itself.
• Public ad: people who reply to your “we're looking for a home” ad leave us a contact and a message, which reach only you. On the public page we count visits without cookies and without personal data.
• Visits to the site: on the public pages (home page, guides, sign-up) we count visits without cookies and without personal data. We only store how many there are per day, per page, by source (the site you came from or the link's label) and by type of device. To estimate how many different people there are, we combine IP address and browser with a random key that changes every day and stays only in memory: we never store it, and the next day it can no longer be reconstructed. When you're signed in to your account, we don't count you.
• Technical data: server logs (IP address, time, page requested) for security and to limit abuse. They are deleted automatically after 14 days.

The legal basis is our contract with you (the service you ask for), our legitimate interest in keeping it secure and, for a baby on the way, your explicit consent. We don't sell your data, we don't show ads and we don't profile you.

Who we share it with

• Hetzner (Germany): the server that runs Geenuga and the database.
• Amazon Web Services: sending emails from the United States (Virginia), under the EU-US Data Privacy Framework and the standard contractual clauses; in Frankfurt, incoming mail and safekeeping keys and backups.
• Polar (Polar Software, Inc., United States), only when you activate a paid plan. Polar is the one selling you the plan, as reseller (Merchant of Record): for the sale it handles your email, payment details and billing address as an independent controller, under its own privacy policy. Your data may go to the United States, Canada or other countries outside the European Union, with standard contractual clauses. Payment goes through Stripe, which Polar uses: you enter your card with them and it never reaches us. We give Polar your email and a family code, and from Polar we only receive the status of your payment and subscription.
• Apple and Google, only if you choose to sign in with them: they confirm who you are. If you use the apps, the App Store and Google Play handle download and update data under their own rules.
• Map services for drive times and coordinates (OpenStreetMap with Nominatim, OSRM and, for traffic, the service the family chooses from TomTom, HERE, Mapbox and Google): they receive only the coordinates and addresses of homes and places, never your name.
• Apple Maps (Apple) and OpenStreetMap, to draw the maps on the site: your browser downloads the map of the area you're looking at from them, so they see your IP address and that area, never your name or the details of the homes. We use Apple Maps while it stays within its free limits, then OpenStreetMap.
• Your assistant (Anthropic for Claude, OpenAI for ChatGPT), only if you connect it yourself: it receives the family data it needs to answer you, under the rules of your account with them. With ChatGPT, no bank information sheets, documents, advertisers' contact details or addresses of your places are passed on.

How long we keep it

For as long as you keep your account. You can delete it whenever you like from your account, on the website or in the app (here's how): the account disappears straight away and, if you were the last person in the family, so does all the family's data. If you ask us by email, we'll do it within 30 days. Backups overwrite themselves within a further 14 days. An account that was registered and never confirmed may be deleted after half an hour.

Age

Geenuga is for adults. About minors we keep only what parents write about the children who will live in the home: their name and year of birth.

Cookies

Only the technical ones needed to keep you signed in. No analytics or advertising cookies.

Your rights

You can ask to see, correct, download or delete your data and object to its processing: write to us. You can also download the family's data at any time from your account. You can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).