Privacy policy

GENY APPLICATION PRIVACY POLICY

1. Our Commitment to Privacy

At SIMPLY STUPID SOFTWARE, protecting your privacy is at the core of our approach. We are deeply aware of the sensitivity of your personal data and are committed to treating it with the utmost respect and transparency.

Our philosophy translates into a minimalist approach to data collection. We strive to collect only the information strictly necessary for the optimal functioning of the Geny Application and to provide the services you expect.

In particular, we favor a very limited use of cookies. Our Application relies essentially on technical cookies, which are indispensable for its proper functioning. We avoid as much as possible the use of intrusive cookies, especially those used for advertising or behavioral tracking purposes.

Finally, we want to state clearly that we do not sell, trade, or otherwise transfer your personal data to third parties. The trust you place in us is our absolute priority, and we do everything in our power to preserve it at all times.

2. Introduction

SIMPLY STUPID SOFTWARE (hereinafter “we”, “us”, or “our”) is committed to protecting the privacy of its Users. This Privacy Policy is intended to inform you about how we collect, use, process, and protect your personal data in the context of your use of the Geny mobile and web application (hereinafter the “Application”).

This Privacy Policy is an integral part of our Terms of Use (CGU) and should be read in conjunction with them.

3. Data Controller

The data controller for your personal data is SIMPLY STUPID SOFTWARE, a simplified joint-stock company (SAS) with its head office located at 930 Route Des Dolines, Sundesk, 06560 Valbonne, France, and whose RCS identification number is 938694882 from Grasse.

4. Personal Data Collected

4.1 Data collected for user account creation and management:

To allow you to create and manage a user account on the Application, we collect the following personal data:

  • Email address
  • First name
  • Password (hashed)

4.2 Data collected for service analysis and improvement:

We also collect the following data:

  • Connection log data: Technical information about your connection to the Application (e.g., date and time of connection, IP address, type of mobile device, model, operating system).
  • General Browse statistics: Aggregated and anonymized information about the use of the Application, such as pages viewed, actions performed (e.g., clicks, taps), Travel Projects viewed or generated, time spent on each page, and searches performed.
  • General demographic statistics: Aggregated and anonymized information about the general characteristics of our users, such as the language used and the country of origin (inferred from your browser or IP address).

4.3 Data provided when creating a Travel Project:

To generate a Travel Project, we collect the information you actively provide to us. This data includes, but is not limited to:

  • The destination, dates, and type of trip (standard or tour);
  • Information about participants (type of travelers: solo, couple, etc.; number of adults and children);
  • Preferences and budget (budget per activity, desired types of activities);
  • Any information you may enter in the free text fields.

4.4 Interaction data within the Application:

When you use the Application, we record some of your actions to personalize your experience:

  • The changes you make to the suggested schedule (additions, deletions).
  • The list of activities you mark as “favorites” (via the “heart” icon).
  • The ratings or feedback you give us when we ask for it via a modal in the application.

5. Purposes of Processing and Legal Bases

5.1 Provision and maintenance of the service The collection and processing of your account data (email address, first name, password) and the data you provide for the creation of your Travel Projects (destination, dates, preferences, etc.) are necessary for providing the Application’s services and for its proper functioning. This processing is based on the performance of the contract (Terms of Use).

5.2 Service improvement and development of new features We use Browse data, demographic data, and device data to understand how you use the Application, optimize our services, adapt features to your needs, and develop new functionalities. This processing is based on our legitimate interest in improving the Application and offering a better user experience.

5.3 Personalization of the user experience We also use certain data (such as language, country, and currency preferences) to personalize your experience within the Application. This processing is based on our legitimate interest in providing you with a tailored service.

5.4 Security and fraud prevention We may process certain data (such as IP addresses) to ensure the security of the Application, and to detect and prevent fraud and other illegal activities. This processing is based on our legitimate interest in protecting our Application and our users.

5.5 Communication with users We may use your data to communicate with you in different ways, depending on the type of information we need to convey:

  • Essential communications for the Application’s operation: We sometimes need to send you notifications or messages that are essential for you to use the Application correctly. Examples: Confirmation of your account creation, information about a significant change to the Terms of Use or Privacy Policy, a response to a question you asked customer service… In these cases, we have the right to use your data because these communications are necessary to provide the service you requested by using the Application (this is known as the legal basis of “performance of a contract”).
  • Other communications: We may also send you other types of notifications or messages that are not essential to the Application’s operation. Examples: Satisfaction surveys, suggestions for new features, travel suggestions… In these cases, we have a legitimate interest in informing you or seeking your opinion, provided that this does not infringe on your rights and privacy. You of course have the right to choose not to receive these communications (for example, by disabling notifications or unsubscribing from emails).

6. Recipients of Personal Data

Your personal data is primarily intended for SIMPLY STUPID SOFTWARE. We may also share it with the following categories of recipients:

  • Service providers: We use third-party service providers to help us provide and improve the Application (e.g., hosting, traffic analysis).
  • Analytics tool providers: Data collected for analysis purposes is transmitted to the providers of our analysis tools (Application Insights).
  • Business partners (in the context of affiliation): When you click on Partner offers and are redirected to their websites, these Partners may collect data via cookies, in accordance with their own privacy policies. We are not responsible for this data collection.
  • Legal authorities: We may be required to disclose your personal data if required by law or if we believe it is necessary to protect our rights or the rights of third parties.
  • Host: Your data is stored on the servers of our host, Microsoft Azure, in Europe.

7. Data Transfers Outside the European Union

We strive to prioritize providers and hosting solutions located within the European Union (EU). Thus, the main data of the Application and your Travel Projects are stored on the servers of our host, Microsoft Azure, in Europe.

However, to provide you with certain features, we may use providers whose companies are based outside the EU, particularly in the United States. This is the case for:

  • Authentication via third-party services: If you choose to log in via Google or Apple.
  • Audience analysis tools: For Application usage data.

For each of these transfers, we ensure that it is governed by appropriate safeguards, in accordance with the GDPR. These safeguards include, in particular, the use of the European Commission’s Standard Contractual Clauses, which oblige our providers to ensure a level of data protection equivalent to that in force in Europe.

8. Data Retention Period

We retain your personal data for the following durations:

  • Account data: Your account data (email address, first name, password) is kept for the entire duration of your account’s use. You can delete your account at any time.
  • Connection data (logs, IP address): Connection data is kept for 2 months.
  • Analysis data: Data collected via our traffic analysis tools is kept for an indefinite period, in an aggregated and anonymized form.
  • Affiliate cookies: The retention period for cookies placed by our partners varies depending on the partner.
  • Travel Project data: The retention period for your Travel Projects depends on whether you have an account:
    • If you have a user account: Your Travel Projects (including form information, your modifications, and your favorites) are kept as long as your account is active to allow you to access them. They are deleted when you delete your account.
    • If you do not have a user account: Your Travel Projects are kept for a period of two (2) years from their last modification date.

In all cases, you have the option to delete a Travel Project yourself at any time directly from the Application. This action results in the immediate and permanent deletion of the associated data, subject to our legal retention obligations for certain technical data.

9. Your Rights

In accordance with current regulations, you have the following rights regarding your personal data:

  • Right of access: You have the right to know what personal data we hold about you and to obtain a copy.
  • Right to rectification: You have the right to request the correction of your inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request the deletion of your personal data, subject to our legal retention obligations.
  • Right to object: You have the right to object to the processing of your personal data for legitimate reasons.
  • Right to restriction of processing: You have the right to request the restriction of the processing of your personal data in certain circumstances.
  • Right to portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
  • Right to withdraw your consent: If you have given us your consent to use your data in a certain way (for example, to send you newsletters), you can change your mind and withdraw this consent at any time.

To exercise your rights, please contact us at the coordinates indicated in Article 12. We commit to responding to your requests within one month of receiving your request.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, in particular, data encryption, anonymization, access control, and regular monitoring of our systems. Passwords are stored securely.

11. Cookies and Local Data

The Application uses technical cookies and local data that are necessary for its operation. Without these cookies and data, the Application cannot function correctly.

11.1 Cookies used: These cookies are essential for:

  • Maintaining your user session

The User cannot manage their preferences regarding technical cookies, as they are essential for the functioning of the Application.

11.2 Local data: This data is essential for:

  • Persisting authentication
  • Saving data generated in the absence of a user account
  • Caching data to improve performance

12. Contact

For any questions, complaints, or requests regarding this Privacy Policy or your personal data, you can contact us:

  • By email at the following address: contact @ geny-planner .com
  • Via the contact form available on the Geny website.

We will endeavor to respond to your requests within a reasonable time. However, depending on the complexity of the request, a longer processing time may be necessary. In all cases, SIMPLY STUPID SOFTWARE will acknowledge receipt of the User’s request within 7 working days and will keep the User informed of the progress of its processing.

13. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will inform you of any significant changes to this Privacy Policy by an appropriate means (e.g., by email or via a notification in the Application).

Last updated: 09/06/2025

To top