Gemnd subprocessors
Effective date: 2026-12-15
Version: 2026-11-07.1
These are the companies selected to process personal data on our behalf to run Gemnd. This list forms part of our Privacy Policy. The Region column names a location only where our own configuration or the provider's agreement sets it; "No region commitment" means the provider does not guarantee where it processes data. For fal and the four model providers it runs for us, the Region column is where each company says it processes data, as the app shows it; none of them commits to a region for our requests.
AI providers
Gemnd is offered only in the United States; that service territory does not establish a processor's location. Provider nationality and headquarters are not evidence of where a request is processed.
The app lists these providers, with the same purposes, before it asks for your AI-processing consent. When the list changes, the app asks you again before any new processing.
| Processor | What it does for Gemnd | What it receives | Region |
|---|---|---|---|
| OpenRouter | Routing of companion replies, summaries, memory processing and text safety checks | Conversation text, memories, persona text, and look, expression and selfie request text for safety checks, sent to the providers in this table | No region commitment |
| Together AI | Hosts DeepSeek V4.1 Flash for companion replies, summaries and memory processing | Conversation text, memories and persona text, through OpenRouter. Text routes require ZDR and data collection denied | No region commitment |
| TypeSafe | Jev 1.13 content-safety and crisis checks of text | Your message with the reply before it and your latest few messages, companion persona text, and look, expression and selfie requests, through OpenRouter. It never receives replies, images or videos. Routes require ZDR and data collection denied | No region commitment |
| Deepgram | Speech recognition for dictation and calls when your iPhone can't recognize speech itself; voice synthesis for calls and read-aloud | Your voice when on-device recognition is unavailable; reply text to be spoken | No region commitment |
| fal (Features & Labels, Inc.) | Avatar, expression and selfie image and video generation | Look, selfie and video request text, the companion's reference portraits, and the images and videos the three models below make for us. fal's terms forbid it to train or develop its products on our requests. Every request asks fal not to keep it or its results in its request history and to delete the files it makes one hour after making them; fal keeps a record of each request without its content. This is not a ZDR route | United States and other countries |
| OpenAI | Avatar, expression and selfie images, with GPT Image through fal | Through fal, picture request text and the companion's reference portrait. OpenAI states that it does not train on API data unless the customer opts in, and keeps inputs and outputs up to 30 days to detect abuse | United States and other countries |
| MiniMax (Nanonoble Pte. Ltd.) | Avatar poses, expressions and video selfies, with MiniMax H3 through fal | Through fal, the companion's portrait or selfie still and the animation request text. fal does not say whether H3 requests go to MiniMax or run on H3's openly published model on fal's own servers. MiniMax's API terms let it use inputs and generated content to develop and improve its services, and give no retention period | United States (stored there; operated from Singapore) |
| Topaz Labs | Smoothing generated video to 30 frames a second, through fal | Through fal, the finished animation only. Topaz Labs states that it never trains on customer inputs or outputs and deletes media after 7 days | United States |
DeepSeek supplies the model weights used by Together AI; Gemnd does not send requests to DeepSeek's own service. fal runs the image and video models for us under its own agreements with their makers, which are not published; the rows for OpenAI, MiniMax and Topaz Labs say what each states for its API customers. Text no-training and ZDR requirements do not establish geography and do not make the image or video routes zero-retention eligible.
Age checks
When your app store can't confirm that you are 18 or older, the app asks for your consent to a selfie age check before the camera opens. Our Privacy Policy explains it in full.
| Processor | What it does for Gemnd | What it receives | Region |
|---|---|---|---|
| Didit (Didit Identity, Inc. and Didit Identity Spain, S.L.) | Selfie age estimation and liveness check | The selfie and liveness capture for an age check, from which it measures facial features to estimate age. It returns only whether the check confirmed you are 18 or older, and deletes the selfie and the measurements as soon as we have the result, and in every case within 30 days | European Union (Didit's default storage region, on Amazon Web Services) |
Infrastructure and other services
| Processor | What it does for Gemnd | What it receives | Region |
|---|---|---|---|
| Google Cloud | Hosting, databases, caching, secrets, encryption keys, logging and monitoring | All account and conversation data, stored and processed for us | United States (us-central1, Iowa) |
| Self-hosted E5 embedding model | Computes numerical search data for memories on our own servers | Memory text processed in our hosting environment, not sent to an external embedding provider | United States (us-central1, Iowa) |
| Cloudflare | Storage of generated avatar images and videos; domain name records (app traffic does not pass through Cloudflare) | Generated avatar media | No region commitment |
| LiveKit and coturn media servers, run by us on Google Cloud | Real-time audio for calls | Call audio while a call is active | United States (us-central1, Iowa) |
| Serper | Web search when your companion looks something up | The search the companion writes, which can reflect your conversation | No region commitment |
| Amazon Simple Email Service (Amazon Web Services, Inc.) | Sign-in codes, deletion confirmations and other account email | Your email address and the message | United States (us-east-1, Virginia) |
| Apple (Apple Push Notification service) | Delivering ready notifications to the iPhone that asked for them | The device token, and each notification's generic title and line with an opaque request identifier | No region commitment |
| Sentry (Functional Software, Inc.) | Error and crash diagnostics, and app performance timings | From the app: device, OS and app version, stack traces, whether each app session ended in a crash, and how long app start, replies, call connection and media delivery took (timings and outcomes only, with no message text or identifiers), none of it linked to your account. From our servers: the service, failure category, release, request timings and filtered diagnostic events, and a keyed hash of your account ID, with no message text, request bodies or email | United States (Sentry's US data region) |
| Google Workspace (Google LLC) | The support mailbox | Messages you send to support | No region commitment |
Payments
Purchases in the iOS app are made through Apple's App Store. Apple processes the payment under its own terms and privacy policy, and we receive the purchase records we need to give you your plan.
Changes
We update this page before a new processor starts handling personal data.