GenEye AI Labs Inc., operating under the trade name MoltSearch ("MoltSearch," "we," "us," or "our"), is a Canadian corporation headquartered in Montreal, Quebec, Canada. We are committed to protecting your privacy and ensuring compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Quebec Law 25), Canada's Anti-Spam Legislation (CASL), and all applicable Canadian federal and provincial privacy legislation.
This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access or use our MoltSearch application (the "App"), available on the Apple App Store, Google Play Store, and our website at moltsearch.ai (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Services.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
We collect information you voluntarily provide when using our Services, including:
- Account registration information (name, email address, password).
- Payment and billing information processed through our third-party payment processors (Stripe for web, Apple App Store and Google Play Store for mobile).
- Subscription plan selection and billing preferences (Free, Pro, or Max tier).
- User-generated content, including text inputs, prompts, and queries submitted to AI models through our platform ("User Inputs").
- Profile information, avatar images, and display preferences.
- Communications with our customer support team.
- Feedback, surveys, ratings, or reviews you submit.
1.2 Information Collected Automatically
When you access our Services, we automatically collect certain information, including: device information (device type, operating system, unique device identifiers); log data (IP address, access times, pages viewed, app features accessed); usage data (interactions with AI models, session duration, feature usage patterns, daily query counts); location data (general geographic location based on IP address); and application performance data.
1.3 Information from Third-Party AI Providers
Our Services integrate with third-party artificial intelligence providers ("AI Providers") to deliver AI-powered features. When you interact with AI models through our platform, we act as an intermediary and may receive outputs generated by these AI Providers based on your User Inputs. MoltSearch shields users from direct relationships with AI Providers; however, the processing of your inputs by AI Providers is subject to their respective privacy policies and terms.
1.4 AI Memory Data
Our Services include an optional "My AI Memory" feature that allows you to store facts, preferences, and personal context to personalize your AI interactions. When you use this feature, we collect and process:
- Memory Content: The text content of memories you create, including personal facts, preferences, goals, interests, and contextual information you choose to store.
- Memory Categories: Category labels you assign to memories (e.g., preferences, facts, goals, interests, or custom categories).
- Memory Embeddings: We generate vector embeddings of your memory content locally on your device and, for logged-in users with cloud synchronization enabled, via third-party embedding services to enable semantic search functionality.
- Memory Metadata: Timestamps indicating when memories were created and last updated, and active/inactive status.
1.5 AI Memory Storage Locations
Local Device Storage: For guest users or users without cloud synchronization, memory data is stored exclusively on your device using local storage mechanisms. This data never leaves your device unless you enable cloud synchronization.
Cloud Storage: For logged-in users with cloud synchronization enabled, memory data is stored in our cloud database (Supabase) located in the United States (US-East-2 region). Cloud storage enables cross-device synchronization and semantic search functionality.
1.6 LLM Council Data
Our Services include an "LLM Council" feature that enables multi-AI model deliberation on your queries. When you use this feature, we collect and process:
- Council Queries: The questions or prompts you submit to the LLM Council for multi-model deliberation.
- Model Responses: Individual responses generated by each participating AI model (which may include up to 10 different AI models: ChatGPT, Claude, Gemini, Llama, Grok, DeepSeek, Mistral, Qwen, Kimi, and Minimax).
- Peer Review Rankings: Anonymous rankings and approval percentages generated when AI models evaluate each other's responses.
- Chairman Verdicts: Synthesized verdicts and consensus scores generated by the designated Chairman AI model.
- Session Metadata: Information about your Council sessions, including participating models, preset configurations, response times, consensus scores, and timestamps.
1.7 AI Persona Marketplace Data
Our Services include an AI Persona Marketplace where users can browse, create, and publish AI personas. When you use this feature, we collect and process:
- Persona Content: Names, descriptions, taglines, greetings, system prompts, personality configurations, avatar images, and category tags you assign to personas you create.
- Publishing Data: When you publish a persona publicly, your creator username and persona content become visible to all users of the marketplace.
- Interaction Data: Ratings, usage counts, message statistics, and favourite status for personas you interact with.
- Chat Data: Conversations conducted with AI personas, including your inputs and AI-generated responses.
1.8 PromptVerse Community Data
Our Services include PromptVerse, a community platform for sharing AI prompts. When you use this feature, we collect and process:
- Prompt Content: Prompts, titles, descriptions, and tags you submit for public sharing.
- Community Interactions: Votes, comments, and engagement with shared prompts.
- Space Membership: Your membership and participation in community spaces (prompt communities).
1.9 On-Device Translation Data
Our Services use Google ML Kit for on-device translation. Translation models are downloaded to your device and all translation processing occurs locally. No translation data is transmitted to our servers or any third party. You may delete downloaded translation models at any time.
1.10 THIRD-PARTY AI DATA SHARING DISCLOSURE
- OpenAI (ChatGPT) — openai.com/policies/privacy-policy
- Anthropic (Claude) — anthropic.com/privacy
- Google DeepMind (Gemini) — deepmind.google/privacy
- xAI (Grok) — x.ai/legal/privacy-policy
- Meta (Llama via Together AI) — together.ai/privacy
- DeepSeek — deepseek.com/privacy
- Mistral AI — mistral.ai/terms/#privacy-policy
- Alibaba Cloud (Qwen) — alibabacloud.com/privacy-policy
- Moonshot AI (Kimi) — moonshot.ai/privacy-policy
- MiniMax — minimax.io/privacy-policy
Data transmitted to these providers may include: your query text, conversation history (for context), device locale and language preference, and your subscription tier (for model selection). We do not transmit your name, email address, or account credentials to AI providers.
2. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes: to provide, maintain, and improve our Services; to process transactions and manage your account and subscription; to communicate with you regarding your account, updates, and promotional materials (with your consent); to personalize your experience and deliver relevant content; to monitor and analyze usage patterns and enforce subscription tier limits; to detect, prevent, and address technical issues, fraud, and security breaches; to comply with legal obligations and enforce our terms; to respond to your inquiries and provide customer support; to operate the AI Persona Marketplace and PromptVerse community features; and to develop new products, services, and features.
2.1 No Training Without Consent
2.2 Automated Decision-Making Disclosure
Our Services use automated processing to generate AI Outputs, perform semantic search on AI Memory data, facilitate LLM Council deliberations including peer review rankings and consensus scoring, and enforce daily usage limits based on your subscription tier. These processes do not produce legal or similarly significant effects concerning individuals.
3. DISCLOSURE OF YOUR INFORMATION
We may share your personal information in the following circumstances:
- Service Providers: We engage third-party companies and individuals to perform services on our behalf (hosting via Supabase and Cloudflare, payment processing via Stripe/Apple/Google, customer support).
- AI Providers: To deliver AI-powered features, we transmit your User Inputs to third-party AI Providers including OpenAI, Anthropic, Google, Meta (via Together AI), xAI, DeepSeek, Mistral AI, Alibaba, Moonshot AI, and Minimax.
- LLM Council Multi-Provider Disclosure: When you use the LLM Council feature, your query is simultaneously transmitted to multiple AI Providers (up to 10 different providers).
- Embedding Service Providers: To enable semantic search functionality for AI Memory, we transmit memory content to third-party embedding services.
- Public Marketplace Content: When you publish a persona or share a prompt publicly, that content (excluding your private account information) is visible to all users.
4. DATA STORAGE AND INTERNATIONAL TRANSFERS
Your personal information is stored on servers located in the United States (US-East-2 region) via our cloud infrastructure provider Supabase, and edge-processed via Cloudflare Workers globally. By using our Services, you acknowledge and consent to the transfer of your personal information to the United States and other jurisdictions where our service providers and AI Providers operate.
We ensure that appropriate safeguards are in place for international data transfers in accordance with PIPEDA and Quebec Law 25, including contractual commitments with our service providers.
Local-Only Storage Option: If you use our Services as a guest user or disable cloud synchronization, your AI Memory data and on-device translation models remain stored exclusively on your local device and are not transferred to our servers or any third party.
5. DATA RETENTION
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
- AI Memory Data Retention: AI Memory data is retained for as long as you maintain the memory in your account. Upon memory deletion, the memory content and associated embeddings are removed from our cloud systems within 30 days.
- LLM Council Data Retention: LLM Council session data is retained for the duration of your account to enable session history and follow-up functionality.
- Persona Data Retention: Published persona content remains available on the marketplace for as long as you choose. You may unpublish or delete your personas at any time.
- PromptVerse Data Retention: Shared prompts and community interactions remain available for as long as you maintain them. You may delete your shared content at any time.
- Subscription Data Retention: Billing and subscription records are retained for the period required by applicable tax and financial reporting laws.
Upon account deletion or request, we will delete or anonymize your personal information within 30 days, unless retention is required by law. This includes removing your personas from the public marketplace and your prompts from PromptVerse.
6. YOUR PRIVACY RIGHTS
Under PIPEDA and Quebec Law 25, you have the following rights regarding your personal information:
- Right of Access: You may request access to the personal information we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete personal information.
- Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements.
- Right to Data Portability: You may request your personal information in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: You may withdraw your consent to processing at any time.
- Right to be Informed of Automated Processing: You may request information about automated decision-making processes that affect you.
6.1 AI Memory Specific Rights
You have the following specific rights regarding AI Memory data: View, edit, and delete individual memories at any time; Toggle memory status between active and inactive; Export all memories in JSON or CSV format; Use Incognito Mode to prevent memories from being sent to AI models; Disable cloud synchronization to keep memory data stored only on your local device.
6.2 LLM Council Specific Rights
You have the following specific rights regarding LLM Council data: View your Council session history; Request deletion of your Council session history; Export Council session data upon request; Choose which AI models participate in your Council deliberations.
6.3 Persona and PromptVerse Rights
You have the following specific rights regarding your published content: Edit, unpublish, or delete personas you have created at any time; Delete prompts and comments you have shared on PromptVerse; Leave community spaces at any time; Request removal of your creator attribution from published content.
7. AI MEMORY PRIVACY PRACTICES
The AI Memory feature is designed with the following privacy principles: User-Initiated Only (Memories are created only when you explicitly choose to save information); Transparent Usage (You can see exactly which memories exist); Full Control (You have complete control to create, view, edit, delete, activate, deactivate, and export your memories); Privacy-First Architecture (Guest users have their data stored only on their local device).
7.1 Incognito Mode
When you enable Incognito Mode: Your AI Memory data is NOT sent to AI models; Your conversations are NOT saved; No embeddings or semantic searches are performed; Complete privacy protection is maintained for that session.
8. LLM COUNCIL PRIVACY PRACTICES
When you use the LLM Council feature, your query is transmitted simultaneously to multiple AI Providers. You acknowledge and consent to this multi-provider transmission as an essential component of the Council's collective intelligence functionality.
The LLM Council currently integrates with the following AI Providers: OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), Meta (Llama via Together AI), xAI (Grok), DeepSeek, Mistral AI, Alibaba (Qwen), Moonshot AI (Kimi), and Minimax. MoltSearch may add, remove, or modify the available AI Providers at any time without prior notice.
9. IN-APP BROWSER PRIVACY
Our Services include an in-app browser with optional Privacy Shield features. When enabled, Privacy Shield provides: cookie blocking, third-party tracker blocking, advertisement element removal, fingerprinting prevention, and social media tracker blocking. These features operate locally on your device.
Web browsing history within the in-app browser may be stored locally on your device and, for logged-in users, synced to your account for history functionality.
10. SUBSCRIPTION AND PAYMENT PRIVACY
We offer three subscription tiers: Free, Pro, and Max. Payment processing is handled by third-party processors:
- Stripe: For web-based payments. MoltSearch does not store your full credit card or banking details. Stripe processes and stores this information securely under their PCI-DSS certified systems.
- Apple App Store: For iOS in-app purchases, subject to Apple's privacy policy.
- Google Play Store: For Android in-app purchases, subject to Google's privacy policy.
We store only subscription status, plan type, billing period dates, and anonymized transaction identifiers necessary to manage your account.
11. NO THIRD-PARTY ANALYTICS
12. COOKIES AND TRACKING TECHNOLOGIES
Our web-based Services may use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. You can manage your cookie preferences through your browser settings.
13. CHILDREN'S PRIVACY
14. SECURITY MEASURES
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: encryption of data in transit (TLS/SSL) and at rest; secure authentication mechanisms via Supabase Auth with PKCE flow; regular security assessments; access controls; Row Level Security (RLS) policies ensuring users can only access their own data; secure credential storage using platform-native secure storage; and incident response procedures for data breaches as required by Quebec Law 25.
15. DATA BREACH NOTIFICATION
In accordance with PIPEDA and Quebec Law 25, we will notify affected individuals and the applicable privacy commissioner of any breach of security safeguards involving personal information that creates a real risk of significant harm. Notification will be provided as soon as feasible after the breach is discovered.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. For material changes that affect how we process your personal information, we will provide notice via email or prominent notice within our Services at least 30 days before the changes take effect.
17. CONTACT INFORMATION
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:
18. GOVERNING LAW
This Privacy Policy is governed by and construed in accordance with the federal laws of Canada and the laws of the Province of Quebec, without regard to conflict of law principles. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Quebec, Canada.