Security

HOW GENRY IS BUILT, AND WHAT IT DOES NOT PROMISE

Genry holds the kind of notes you would not want read: what your partner mentioned, what your father is worried about, what to buy someone who matters. The design answer is simple — keep it on the phone, and do the thinking there too.

Where your memories live

On your iPhone. People, notes, voice recordings, imported photos and documents, and every detail Genry learns are stored in a database inside the app's own container, with the media files beside it. iOS file protection encrypts that container with a key tied to your device passcode, so the contents are unreadable while the phone is locked.

No account is needed to use the app. You can create a profile that never touches a server.

That data is deliberately excluded from iPhone backups. It keeps your memories out of any backup you do not control — and it means that if you lose the phone without an exported backup file, they are gone. That trade is intentional, and it is why the export below exists.

Where the thinking happens

Also on your iPhone. Genry is built for the Apple Intelligence personal intelligence system, and the language model that reads your notes runs on the device. So does the text recognition that reads photos, screenshots, scanned PDFs and Word documents, and the speech transcription that turns a voice note into text.

By default there is no cloud model in Genry: your notes are not sent to us, to Apple, or to any model provider to be understood. Nothing you save is used to train anything, whichever model you use. When the app is working through a note you just saved, it says so on screen: organizing on this iPhone.

Apple Intelligence needs a compatible iPhone running iOS 26 or later, with the models downloaded. Without it, saving, searching, text recognition and document reading still work; only the learned details wait.

What actually leaves the device

By default, nothing.

If you choose to create a cloud account and turn on sync, your people, notes, learned details and original files are copied to our hosting provider, Supabase, so they can reach your other devices. That traffic is encrypted in transit, and the provider encrypts it at rest.

A cloud account by itself only syncs. Two further choices send notes beyond our hosting provider, and each is off until you make it:

• The cloud model. If you switch the model in Settings from Apple Intelligence to Cloud, the note being understood, or your question and the notes most related to it, are sent to our server and on to a model run by Microsoft's Azure OpenAI service. The app says so while it is on, and switching back stops it.
• A connected assistant. If you connect ChatGPT or Claude, it can read and search your synced notes and add a note when you ask. What it reads goes to OpenAI or Anthropic. It cannot change or delete anything, add people, or open your photos and files — and that limit is enforced by the database itself, which refuses those writes from an assistant's token, rather than by trusting the assistant.

The privacy policy describes both in full.

The protections you can turn on

• A lock on the app itself. Require Face ID, Touch ID or your passcode before Genry opens, so an unlocked phone in someone else's hand still does not show your notes.
• An encrypted backup file. Export everything — people, notes, learned details and original photos and documents — as a single file protected by a password you choose. It restores onto another iPhone. We cannot recover that password, which is the point: nobody but you can open the file.
• Deletion that reaches the derived data. Delete a note and the details the model inferred from it go too, rather than leaving an unsupported conclusion behind. You can erase all private content while keeping your login, or delete the account outright from inside the app.

Quiet by default

Security is not only about encryption; it is also about what a glance at your phone gives away.

• The Remember this widget shows no names and no details, so it is safe on a Lock Screen.
• Reminders can be set to carry no names or preferences in their text.
• There is no analytics in the app. No usage reporting, no crash-tracking SDK, no advertising identifier.

This website

This site collects nothing. No analytics, no advertising, no tracking pixel, no cookies — which is why you were never asked to accept any. Fonts and images are served from this site itself, so loading a page makes no request to Google or to any other third party.

The one exception is the sign-in page you reach only when connecting Genry to an assistant. It sends your email and password to our hosting provider, Supabase, to sign you in, and stores nothing in your browser. It loads no code from anywhere but this site, and it cannot be embedded in another site's page.

What we do not claim

A security page is worth more for what it refuses to say. So, plainly:

• Genry has not been audited by a third party. When it is, the auditor and the date will be named here.
• Cloud sync is not end-to-end encrypted, and Genry is not a zero-knowledge system.
• We do not control what OpenAI or Anthropic do with notes a connected assistant has read. Their own policies apply from that point.
• No security certification is claimed. There is no SOC 2 report, and pretending otherwise would be worse than not having one.
• AI-extracted details can be wrong. Every one of them links back to the note it came from so you can check it, correct it or delete it.

Telling us about a problem

If you find a security issue, write to hello@genry.app and describe what you found. We would rather hear it from you first, and we will not go after anyone who reports something in good faith.

See also the privacy policy for what happens to your information, and the changelog for what has actually been built.