1. Who operates Geste
Geste is operated by Ayush Gupta in India. Questions and privacy requests can be sent to support@getgeste.com.
2. Data that stays on your iPhone
Geste processes reference images, captured photos, subject masks, pose landmarks, thumbnails, image edits, and camera preferences on your device. We do not upload this creative media to our servers. Photos you save to Apple Photos are governed by your Apple and iCloud settings.
3. Data we process
Account data
If you create an account, Supabase processes your user identifier, email address or Apple private-relay address, sign-in provider, optional display name, and session information. Apple may provide your name only during the first authorization.
Subscription data
Apple and RevenueCat process purchase and entitlement information such as a pseudonymous app user identifier, product, transaction status, storefront, expiration, refund, and subscription-management URL. Geste keeps a limited server-side event record for purchase support and webhook security; it does not independently grant an entitlement.
Email and operational data
When email sign-in is enabled, our email provider processes the address and delivery metadata needed to send a one-time code. Supabase, RevenueCat, Apple, and infrastructure providers may process security and network data such as IP address, timestamps, device or app version, and error information as part of providing their services.
4. Why we process it
- Authenticate you and maintain a secure session.
- Confirm, restore, support, and manage Geste Pro access.
- Prevent fraud, replay, and misuse of account or purchase systems.
- Respond to support, privacy, and deletion requests.
- Meet applicable legal, tax, and platform obligations.
We do not sell personal data. We do not use your data for third-party advertising or cross-app tracking, and the current app does not include advertising analytics.
5. Service providers and transfers
Geste uses Apple for platform sign-in and purchases, Supabase for account services, RevenueCat for subscription status, and an email delivery provider for one-time codes. These providers process data under their own terms and may process it outside your country. Geste currently hosts account infrastructure in the European Union.
6. Retention
Account data is kept while your account is active and removed when account deletion completes, subject to limited records we must retain for security, purchase support, tax, dispute, or legal obligations. A one-way fingerprint and timestamps that prove an account-deletion request completed are automatically removed after 30 days. Apple, RevenueCat, and other providers retain data under their own policies.
7. Your choices
You can sign out, restore purchases, manage your Apple subscription, or delete your Geste account from Settings. Account deletion does not cancel an Apple subscription and does not remove photos or references stored locally on your iPhone. See the account-deletion guide. You may also contact us to request access, correction, or deletion where applicable.
8. Security and children
We use access controls, row-level database policies, short-lived authorization proofs, encrypted transport, and restricted server credentials. No service is perfectly secure, so please contact us if you suspect misuse. Geste is not directed to children under 13, and we do not knowingly collect their account data.
9. Changes
We may update this policy as Geste changes. We will post the revised date here and provide additional notice when a material change requires it.