Privacy policy

Last Modified: May 15, 2026

This summary highlights what we want you to know. It is not a substitute for the full policy that follows, which controls in case of any conflict.

Designed for children, with privacy as a priority. We collect only what we need to operate the service, keep it secure, and improve its reliability.

The device records nothing. It has no microphone, no camera, and no other recording capability.

Personalization is optional. If you choose to provide details about a story character, you are not required to make them accurate.

We do not sell or share. We do not show advertisements, allow third-party tracking, or use personal information about your child to train AI models.

You are in control. You can review, delete, or revoke at any time through the App.

1. Introduction

GENI COMPUTERS, INC. ("Company," "we," "us," or "our") makes Play Geni, an AI-powered storytelling device. This Privacy Policy (the "Policy") describes the information we collect, how we use it, what we do not do with it, and the rights you have as the account holder. Our practices are intended to comply with the Children's Online Privacy Protection Act ("COPPA") and its implementing rule (the "COPPA Rule"), and with applicable state privacy laws.

2. Scope

This Policy applies to the Play Geni device, the Play Geni companion mobile application (the "App"), and the cloud services we operate to support both. Throughout, "you" refers to the account holder—the adult who creates and maintains the account. The device is intended primarily for use by children. We also recognize that adults, including adults for whom the account holder serves as caregiver or guardian, may use the device. Where this Policy refers to "your child" or "the child," the same protections apply to any individual for whom the account holder has established and maintains the account.

3. Information We Collect

We collect only as much information as is reasonably necessary for the operation of the service, and we do not condition use of the service or any of its features on the disclosure of more personal information than is reasonably necessary. The service does not enable any user, including any child user, to make personal information publicly available; there are no chat, messaging, public posting, social, or sharing features in the App or on the device.

3.1. From the Device

The device has no microphone, no camera, and no other recording capability. It does not collect audio, video, voice, or image data. When the device is used, it transmits the following to our cloud services: a device hardware identifier, device serial number, firmware version, the household identifier associated with your account, the device's registration timestamp, a "last seen" timestamp updated each time the device communicates with our service, and event-based telemetry such as timestamps for tile placements, account creation and changes, and button presses (including power on and off). The device communicates with our service only when triggered by a user action; it does not continuously transmit data.

3.2. From You Through the App

When you create an account through the App, you sign in using a third-party identity provider. As part of the standard authentication response, the provider returns your name, your email address, an account identifier issued by the provider, and a URL pointing to your profile photo if you have set one. We use this information to maintain your account, recognize you on return visits, communicate with you about your account (including delivering the COPPA direct notice and obtaining your verifiable parental consent), notify you of material changes to this Policy, and display your account profile within the App. We do not use this information for advertising or marketing. We do not retrieve or store the profile photograph itself; any in-App display of your profile image is rendered from the URL returned by the identity provider.

If you choose to enable personalized stories, you may also provide a character name, a character age, character interests (from a list we maintain), and a short "custom tile" description. These inputs are optional and are not required to be accurate.

You may also choose to provide feedback about generated stories. Feedback consists of an optional story identifier (referencing the specific story being rated), a rating on a 1–5 scale, optional free-text comments, and a timestamp. Feedback is optional. We use feedback only internally to evaluate and improve the quality and reliability of our service; we do not transmit feedback to our AI service providers, and we do not sell, share, or otherwise disclose feedback to any third party other than the internal-infrastructure service providers described in Section 5.

3.3. Persistent Identifiers and Internal Operations

We use the device and account identifiers and operational data described above solely to support the internal operations of the service, as that term is used in the COPPA Rule. Specifically, we use them to authenticate accounts and devices, maintain and analyze the functioning of the service, perform the network communications necessary to deliver story content, protect the security and integrity of the service, detect and prevent fraud and abuse, diagnose technical issues and improve device reliability, maintain device-state continuity, and comply with our legal obligations.

We do not use these identifiers, and do not permit our service providers to use them, to contact a specific individual, to amass a profile of a specific individual, for behavioral advertising, or for any purpose other than the internal operations described above. We ensure this through internal access controls, contractual restrictions on our service providers, and ongoing review of identifier use as part of our written information security program.

3.4. What We Do Not Collect

We do not collect:

Voice or audio recordings of any kind. The device has no microphone, and the App does not record audio.
Photographs or video. The device has no camera, and the App does not request access to your camera or photo library. We do not retrieve or store the profile photograph associated with your identity-provider account; we receive only the URL referencing it, as described in Section 3.2.
Biometric identifiers of any kind, including voice prints, facial recognition data, or behavioral biometrics.
Precise geolocation, or location information sufficient to identify a street address.
Contacts, address books, browsing history, or messages from your phone.
Payment information, financial account information, or government identifiers.
Health, medical, or mental-health information.
Information about race, ethnicity, religion, sexual orientation, citizenship status, or political beliefs.

4. How We Use Information

We use the information described above to:

Operate the device and the App, including generating stories in response to use of the device.
Display your account profile, including your name and profile image, within the App.
Send account-related communications and required notices.
Maintain the security, integrity, and proper functioning of the service.
Evaluate user feedback to assess and improve the quality and reliability of generated stories and the service overall.
Comply with applicable laws and respond to lawful legal process.
Improve the service in ways consistent with this Policy, including by analyzing aggregated, deidentified, or non-personal operational data.

We do not use personal information about your child for advertising, marketing, profiling for legal or similarly significant decisions, or to train artificial intelligence or machine learning models. We do not permit our service providers to use it for those purposes either.

5. Service Providers

We use a small number of service providers to deliver authentication, hosting, database, and AI capabilities. Each operates as our service provider, processing information only on our behalf and only as needed to provide the service we have requested. Each is bound by a written agreement that restricts its use of the information we transmit to providing the contracted service to us, prohibits independent use, retention beyond service purposes, and the use of our data to train or improve the provider's models or systems.

Before any user input is sent to a third-party AI service, we apply automated screening intended to identify and remove personal information from the transmission. We do not include account, household, or device identifiers in our requests to third-party AI services.

5.1. Limited Other Disclosures

In addition to the service providers described above, we may disclose information in the following limited circumstances:

To our subsidiaries and affiliated entities, where they are bound by privacy practices consistent with this Policy.
To comply with a court order, subpoena, or other legal process, or to respond to lawful government or regulatory requests.
To protect the safety of a child or any other person, to protect the security and integrity of our service, or to take precautions against legal liability.
To law enforcement in connection with an investigation related to public safety.
To a buyer or successor in connection with a merger, acquisition, reorganization, sale of all or substantially all of our assets, or similar transaction, subject to the same protections as those described in this Policy.

5.2. Aggregated and Deidentified Information

We may use and disclose aggregated information about our users, and information that has been deidentified such that it cannot reasonably be used to identify any individual, device, or household, without restriction.

6. What We Do Not Do

We do not sell or share any information about you or your child, including for cross-context behavioral advertising.
We do not engage in targeted, behavioral, or interest-based advertising, and we do not allow advertising networks, ad SDKs, or attribution providers to operate within our service.
We do not use third-party analytics services that collect information about your child or your use of the service.
We do not engage in profiling that produces legal or similarly significant effects.
We do not track behavior across other apps, websites, or online services.
We do not use personal information about your child to train, fine-tune, or improve artificial intelligence or machine learning systems.

7. Verifiable Parental Consent

Under COPPA, we obtain your verifiable parental consent before we collect, use, or disclose personal information from or about your child. We use the "email plus" method: at first launch of the App and before any device pairing or feature use, we present you with a direct notice, you provide consent in the App, we send a confirmation email, and we follow up with a second confirmation message that allows you to revoke if the consent was not in fact provided by you.

If you decline consent or do not complete the consent process, we delete the contact information collected for the consent process. If you revoke consent at any point after providing it, we promptly delete the corresponding account information and any optional inputs you have provided.

We will obtain new verifiable parental consent if we materially change our data collection or use practices in a way that affects the basis on which you previously consented.

8. Your Rights as the Account Holder

You may, at any time and at no cost, review, delete, refuse further collection of, and revoke consent regarding the account information, optional inputs, and operational data we maintain in connection with your account. To the extent any of this information constitutes personal information of a child under COPPA, these rights operate as the parental rights required by the COPPA Rule.

You may exercise these rights through the "Manage Account Information" section of the App or by emailing us at [PARENT-FACING EMAIL]. We may require reasonable verification of your identity and authority as the account holder before fulfilling certain requests, to protect against unauthorized or fraudulent requests. We will respond within the time frames required by applicable law and will not retaliate, charge a fee, or discriminate against you for exercising any of these rights.

9. Data Retention

We retain information only for as long as is reasonably necessary to provide the service and to comply with our legal obligations.

Account information and optional inputs: retained while your account is active, then automatically deleted after twelve (12) months of device inactivity following notice to you.
Persistent identifiers and operational data: retained only for the period reasonably necessary to operate the service and as required by our written information security program.
Diagnostic and operational logs: retained for ninety (90) days, after which they are deleted or aggregated to non-personal form.
Contact information from incomplete consent processes: deleted within thirty (30) days.
Information subject to a deletion or revocation request: deleted promptly and in no event later than thirty (30) days.

10. Data Security

We maintain a written information security program reasonably designed to protect the information we collect against unauthorized access, use, alteration, disclosure, or destruction. The program includes encryption of information in transit and at rest, access controls, contractual security obligations on our service providers, periodic training of personnel, and breach detection, response, and notification procedures consistent with applicable law. The program is reviewed and updated periodically.

No system is completely secure. We will notify you and, where required, applicable authorities of any security incident affecting your information in the manner and within the time frame required by applicable law.

11. State Privacy Rights

Depending on your state of residence, you may have additional rights under state privacy laws. These apply in addition to your rights under COPPA. To exercise any state-law right, use the "Manage Account Information" section of the App, email privacy@playgeni.com.

11.1. California Residents

California's Consumer Privacy Act and California Privacy Rights Act provide rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and be free from retaliation. The categories of personal information we collect, the sources, the business and commercial purposes, the recipients, and our retention practices are described in Sections 3 through 10 of this Policy. We do not sell or share personal information, including for cross-context behavioral advertising. We do not collect categories of sensitive personal information except as necessary to operate the service and as disclosed in this Policy. Where required, we recognize universal opt-out preference signals such as the Global Privacy Control. California's "Shine the Light" law permits California residents to request information about disclosures of personal information to third parties for direct marketing purposes; we make no such disclosures.

11.2. Connecticut and Maryland Residents

Connecticut and Maryland law provide residents with rights to access, correct, delete, and obtain a portable copy of personal information, and to opt out of targeted advertising, sale, and certain profiling. Both states impose heightened protections for minors, including data-minimization requirements and restrictions on targeted advertising and profiling. Our practices are consistent with these requirements.

11.3. Other State Residents

Residents of Colorado, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (and other states as comprehensive state privacy laws come into effect) have rights including access, deletion, correction (in most states), portability, and opt-out of certain processing. The scope of these rights varies by state. Nevada residents may submit any sale opt-out request to [PARENT-FACING EMAIL]. To exercise any state-law right, use the methods described at the top of this Section.

12. Changes to This Policy

We may update this Policy from time to time. When we make changes that materially affect our practices regarding personal information we have collected from or about your child, we will notify you by email at the address associated with your account, update the "Last Modified" date above, and, where the change is material to the basis of your prior consent, obtain new verifiable parental consent before applying the change to your account.

13. Operator and Contact Information

For purposes of COPPA, GENI COMPUTERS, INC. is the sole operator of the Play Geni service.

Questions about this Policy, requests to exercise your rights, and complaints may be directed to:

GENI COMPUTERS, INC.
401 Smith Street
Brooklyn, NY 11231
privacy@playgeni.com

— End of Privacy Policy —