Privacy Policy

1. Who we are

Genix (“Genix”, “we”, “us”, or “our”) is a personal peptide-journey tracking application operated by Genix Labs (“the Company”), based in Bali, Indonesia. This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have. If you have any questions, contact us at hello@getgenixlabs.com.

By creating an account or using Genix, you agree to this Privacy Policy together with our Terms of Service.

2. Information we collect

Account information

When you sign up — including with “Continue with Google” — we collect your name and email address. If you use Google sign-in, Google shares your basic profile (name, email, and profile picture) with us; we never receive your Google password.

Health-related entries

Genix exists to track your protocol, so you may provide health-related information such as the peptides and dosages you log, body weight, symptoms and how you feel, goals, and inventory. This is sensitive personal data (referred to as “specific personal data” under Indonesia’s Personal Data Protection Law, UU No. 27 of 2022) and we process it only with your explicit consent.

Technical and usage data

We collect limited technical data needed to run the service — for example device and browser type, and, if you enable notifications, a push-notification token. We use cookies and similar local storage to keep you signed in and remember your preferences. On our public marketing and sign-up pages (not inside the app itself), we and Meta (Facebook) also set advertising and analytics cookies — such as _fbp and _fbc — to measure how our ads perform. These advertising partners are described in section 6.

3. How we use your information

• To provide, maintain, and secure your account and the Genix service.
• To display your logs, charts, progress, and goal guidance.
• To send transactional messages and, if enabled, reminders and notifications.
• To respond to your support requests.
• To improve and troubleshoot the service.
• To comply with legal obligations and enforce our Terms.

4. AI assistant

If you use the in-app assistant, the content you submit (which may include health-related entries) is sent to our AI provider to generate a response. We do not use your data to train third-party AI models. Genix is not a medical device and the assistant does not provide medical advice — always consult a licensed healthcare professional.

5. Legal bases for processing

Where applicable law requires a legal basis, we rely on: your consent (especially for health-related data and notifications); performance of a contract to provide the service you request; and our legitimate interests in operating, securing, and improving Genix. You may withdraw consent at any time (see “Your rights”).

6. How we share information

We do not sell your personal data. We share it only with service providers (“processors”) who help us operate Genix, under contracts that require them to protect it:

• Supabase — database, authentication, and storage hosting.
• Google — sign-in (only if you choose Google sign-in).
• Resend — sending transactional and account emails.
• OpenRouter — routing requests to AI model providers for the assistant.
• Meta (Facebook) — advertising and conversion measurement. On our public pages we load the Meta Pixel, and when you register we send a server-side event via the Meta Conversions API that includes a one-way hashed (irreversible) version of your email address together with your IP address and device/browser information, used only to measure and attribute our advertising. We do not send your health-related entries to Meta.
• Klaviyo — email marketing. If you opt in to marketing emails, we store your email, name and language in Klaviyo to send tips, updates and offers. You can unsubscribe at any time, and we never enrol you without that opt-in.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users, the public, or Genix.

7. International transfers

Our providers (including Supabase, Meta, Klaviyo, Resend and OpenRouter) may process data on servers located outside Indonesia. Where we transfer personal data internationally, we rely on your consent and on contracts with those providers that require them to protect your data to a standard consistent with applicable law.

8. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymise your personal data promptly (typically within 30 days), except where we must retain limited records (such as order and payment records) to meet legal or accounting obligations.

9. Security

We use technical and organisational measures — including encryption in transit, access controls, and row-level security — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of any breach as required by law.

10. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• correct or update inaccurate data;
• delete your account and data;
• withdraw consent at any time;
• export your data in a portable format;
• object to or restrict certain processing; and
• lodge a complaint with the relevant data-protection authority.

To exercise any of these rights, email hello@getgenixlabs.com or message us on WhatsApp.

11. Children

Genix is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above; material changes will be communicated to you as required by law.

13. Contact us

Genix Labs
Bali, Indonesia
Email: hello@getgenixlabs.com
Web: getgenixlabs.com