Privacy Policy

Last updated: April 2026

Geyma is designed to keep your data private — your inventory information is never sold or used for advertising.

1. Who We Are

Geyma is developed and operated by Audun Karlsen (hello@geyma.app). For users in the European Economic Area (EEA), Audun Karlsen acts as the data controller under GDPR.

2. Data We Collect

Data	Purpose	Required
Email address	Account creation and authentication	Yes
Password (hashed)	Secure sign-in	Yes
Room names and types	Organising your inventory	No
Box names, descriptions, positions	Inventory management	No
Item names, quantities, notes	Inventory management	No
Photos of box contents	AI-powered item recognition; visual reference	No
LiDAR room scans (USDZ files)	3D room visualisation	No
NFC tag identifiers	Linking physical tags to boxes	No
Estimated item values	Insurance export PDF generation	No
Language preference	Displaying the app in your preferred language	No

We do not collect location data, contacts, browsing history, or advertising identifiers.

3. How We Use Your Data

To provide and maintain the Geyma app and its features
To authenticate your account and keep it secure
To sync your inventory across your devices
To analyse photos of box contents using AI (only when you explicitly trigger a scan)
To generate insurance inventory PDF documents on your request

4. Legal Basis for Processing (GDPR)

Contract performance — processing your account data is necessary to provide the service you signed up for.
Legitimate interests — ensuring security and preventing fraud.
Consent — for optional features such as camera access, NFC, and photo library access, which you can revoke at any time in your device settings.

5. Third-Party Services

Supabase — database, authentication, and file storage. GDPR-compliant. Supabase Privacy Policy.

Anthropic (Claude AI) — when you use the AI scan feature, photos are sent to Anthropic's API for analysis. Images are not stored or used to train models under standard API terms. Anthropic Privacy Policy.

No third-party analytics, advertising SDKs, or tracking libraries are included.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, your personal data and inventory content will be deleted from our systems. Backups may retain data for up to 30 days. Insurance export PDFs are generated on-device and are not stored on our servers.

7. Your Rights (GDPR)

Access — request a copy of your personal data
Rectification — request correction of inaccurate data
Erasure — request deletion of your personal data
Restriction — limit how we process your data
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interests

8. Contact

For any questions: hello@geyma.app