Privacy Policy

This policy explains what personal data GenKite collects, why, who we share it with, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

GenKite is run by Rymedia Ltd, a company registered in England and Wales (company number 11324686), registered office 128 City Road, London, EC1V 2NX, United Kingdom. We are the controller of your personal data. You can reach us about anything in this policy at [email protected].

What we collect

• Account details: your name, email address, password (stored only as a secure hash) and profile picture. If you sign in with Google, Apple, Microsoft, Discord, Facebook or X, we receive your name, email address and an account ID from them.
• What you create: the prompts you write, the pictures, audio and video you upload, characters you save, and the videos, pictures and audio we generate for you.
• Payments: handled by Stripe. We keep your Stripe customer ID, plan, credit balance and payment history, never your full card number.
• Usage and technical data: generation history, credit transactions, support messages, and logs such as IP address, browser and device, which we use to keep the service working and secure.

Why we use it, and our lawful basis

• To provide the service you signed up for (your account, generating and storing your content, credits and billing): performance of our contract with you.
• To keep the service secure and prevent fraud and abuse, including checking content against our acceptable-use rules: our legitimate interests in running a safe service.
• To improve the product using aggregated usage figures: our legitimate interests. We do not use your prompts or uploads to train AI models.
• To send service emails (receipts, finished videos, security notices): performance of our contract. Optional emails can be switched off in Settings.
• To meet legal obligations such as keeping accounting records: legal obligation.
• Optional cookies (like remembering your sidebar layout): your consent, which you can withdraw at any time. See our Cookie Policy.

Who we share it with

We don't sell your data. We share it only with companies that help us run the service, under contracts that require them to protect it and use it only on our instructions:

• AI model providers, to generate what you ask for: your prompt and any images or audio you add are sent to the provider behind the model you choose (fal.ai, Kuaishou for Kling, ByteDance's BytePlus for Seedance, and Google for Gemini and Veo), and to Anthropic when you use prompt help.
• Stripe, to take payments.
• Cloudflare, which protects and speeds up the website.
• Sign-in providers, if you choose to sign in with one.
• Authorities, when the law requires it, or to protect people from harm.

Our servers and file storage are in the United Kingdom and the Netherlands.

International transfers

Some of the providers above process data outside the UK, including in the United States and Singapore. When they do, we rely on UK adequacy regulations where they exist, or on the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, together with the provider's own security measures. You can ask us for details of the safeguards for a particular provider.

How long we keep it

We keep your account and content while your account is open. Deleting a video, picture or upload removes it from your library and our storage. Deleting your account removes your personal data, except payment and accounting records we must keep by law (normally six years) and short-lived technical logs kept for security. AI providers keep data they receive only as long as their own terms allow, typically just long enough to return your result.

Your rights

You have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted (you can delete your account yourself in Settings);
• restrict or object to how we use it, including where we rely on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on it (for example from cookie settings).

To use any of these rights, email [email protected]. We'll reply within one month. It's free unless a request is clearly unfounded or excessive.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Children

GenKite is for people aged 18 and over. We don't knowingly collect data from children; if you believe a child has given us their data, contact us and we'll delete it.

Automated decisions

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Model providers run automatic safety filters that may decline to generate a request; if that happens, your credits are returned.

Security

Data is encrypted in transit, passwords are hashed, access is limited to people who need it, and two-factor sign-in is available in Settings.

Changes

We'll update this page if anything changes and tell you by email or in the studio about any significant changes.