Privacy Policy
Last updated: October 30, 2026
Gemy is an app to share what you wear today. This policy explains, in plain words, what data we use, why, who we share it with, how long we keep it and how you stay in control. Gemy does not sell your data and does not show targeted ads.
01Who is responsible
Gemy (the iOS and Android apps and the gemy.social and app.gemy.social websites) is published by JPTA, SAS, a French company, which is the data controller under the EU General Data Protection Regulation (GDPR).
For any question about your data or to exercise your rights: contact@gemy.social.
02Data we use
What you give us
- Account: email address, password (stored hashed, never readable, including by us), username and, if you add them, profile photo, bio, city, country, date of birth, gender and style preferences.
- Posts: photos and videos of your outfits, captions, the brands, pieces and product links you add, and the people you tag.
- Interactions: comments, mentions, likes, Gems, pins, follows and follow requests, private messages and their attachments.
- Safety: accounts you block, content you report and the reason.
What your use generates
- Views of your outfits (counter), posting days (for the Mon Gemy badge), settings (private account, notifications).
- Technical data: push token if you enable notifications, time zone, device model, app version, server logs (IP address, date, errors).
What Gemy does not collect
- Your GPS location: the city shown is the one you type.
- Your contacts or your whole photo library: only the photos you pick are uploaded.
- Your device's advertising identifier. Gemy uses no ad trackers and no third-party tracking tools.
The camera and microphone are only used while you take a photo or film an outfit.
03Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running your account, showing your outfits and others', messaging, follows, sharing | Performance of the contract (Terms of Use) |
| Finding the product matching the pieces you tagged | Performance of the contract; nothing is added without your approval |
| Push notifications | Your consent, which you can withdraw anytime |
| Optional profile fields (date of birth, gender, style) | Your consent |
| Moderation, fighting abuse and spam, account security | Legitimate interest and legal obligations |
| Aggregated usage statistics to improve the service | Legitimate interest |
| Answering lawful requests from authorities | Legal obligation |
04Artificial intelligence features
Some Gemy features rely on artificial intelligence models:
- Piece thumbnails: when a tagged piece has no product photo available, a thumbnail may be created from the area of the photo where that piece appears.
- Exact product search: when you only name a brand, a crop of the piece may be compared with product images (visual web search) during the 24 hours your outfit is live. The result is suggested to you and only appears on your outfit if you approve it.
- Translation of captions and comments, on request.
These run through the providers listed below, on their business offerings. They act on our behalf and may not reuse your content for their own purposes. No decision with legal or similarly significant effects on you is made by automated means.
05Brand avatars
Gemy runs brand avatars: virtual creator profiles wearing pieces from real brands. Their photos are generated by artificial intelligence and their likes or comments are automated. They do not represent real people, do not read your private messages and collect no additional data about you.
06Who sees what
- Public account: your outfits, pins and profile are visible to Gemy users and through the links you share.
- Private account: only followers you approved see your outfits and pins. Others only see your photo, username and bio.
- Shared profile card: it only shows your pinned outfits, never your history.
- Private messages: readable only by their participants. We only access them following a report or a legal obligation.
- Accounts you block can no longer see your content or message you.
07Our service providers
Your data is never sold or rented. It is only shared with the technical providers needed to run the service, under contract and solely for this service:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, authentication, photo storage | AWS, Paris (France) |
| Vercel | App and website servers, image delivery | Paris (France), global network |
| Expo, Apple, Google (Firebase) | App updates, push notifications | United States |
| Google (Gemini) | Thumbnails of tagged pieces | United States / EU |
| Anthropic (Claude) | Product comparison, translation | United States |
| Bright Data | Visual product search on the web | Israel / United States |
| Photon (komoot) | City suggestions: only the letters typed, through our servers | Germany |
We may also disclose data to authorities when the law requires it, or in the event of a sale of the business, in which case you will be told in advance.
08Transfers outside the European Union
Your account, photos and messages are hosted in France. When one of the providers above processes data outside the European Union, the transfer relies on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or on the Commission's standard contractual clauses. A copy is available on request.
09How long we keep data
| Data | Retention |
|---|---|
| Posted outfit | 24 h in the feed, then in your history until you delete it or your account |
| Private messages | Until you delete them or your account |
| Unapproved product suggestions | Expire with the outfit (24 h) |
| Reports and moderation decisions | 12 months |
| Server logs | 30 days at most |
| Deleted account | Photos, videos and profile erased immediately; backups purged within 30 days |
10Your rights and settings
You can at any time access, correct or delete your data, restrict its use, object to processing based on our legitimate interest, withdraw your consent and ask for a portable copy of your data.
- In the app: Profile → Settings to edit your profile, switch to a private account, manage notifications or permanently delete your account (without the app: delete your account).
- By email: contact@gemy.social. We answer within one month and may ask you to confirm your identity.
- If you believe your rights are not respected, you can complain to the French authority, the CNIL (cnil.fr), or to your local authority.
11Security
Traffic is encrypted (HTTPS), passwords are irreversibly hashed and data access is enforced row by row: each user can only read what their settings and other people's settings allow. Internal access is limited to those who need it. If a data breach creates a risk for you, we notify the CNIL and the people affected within the legal deadlines.
12Minimum age
Gemy is for people aged 15 and over. We do not knowingly collect data from younger children; any account reported as such is deleted.
13Cookies and website
gemy.social uses no advertising cookies and no third-party analytics. Only your language choice is stored in your browser. Shared outfit and profile pages only show what their author made public.
14United States users
Gemy does not sell your personal information and does not share it for cross-context behavioral advertising. Residents of California and other states with privacy laws can exercise the rights to know, correct, delete and port their data described above, without discrimination, by writing to contact@gemy.social.
15Changes
We update this policy as the service evolves. If we make a significant change, you will be told in the app before it takes effect. The last update date is shown at the top of this page.