GCENA

Legal pages stay in English for accuracy.

Privacy Policy

Effective date: August 14, 2026

GCENA ("we", "us", "our") operates the GCENA mobile application and the website at gcena.com. This Privacy Policy explains what information we collect, where it is stored, who else processes it, and the choices you have.

The short version

  • We do not sell your personal data.
  • Campfire may show third-party ads (Google AdMob), including optional rewarded ads you choose to watch for Fun Points, Paid Points, or free tokens.
  • Safe Space, Inner Circle chats, and private messages are not used to build advertising profiles.
  • Your account and content live on Google Firebase and on our own server in Germany.
  • Photos and videos are stored with Cloudflare.
  • You can delete your account yourself in Settings.

This summary is for convenience only. The full sections below are what apply.

1. Who we are

GCENA is a social and emotional wellness app that includes an AI companion (Ciel), personal profiles (Keepsake), friend connections and calls (Inner Circle), a community feed (Campfire), and private chat spaces (Safe Space).

For privacy questions and data requests, contact [email protected].

2. Information we collect

Account information

We do not ask for your phone number, your date of birth, or your GPS location. The "location" on your profile is free text you type yourself, and you can leave it empty.

Profile and content

AI companion messages

Safe Space "Just us" history is kept on your device only. Duo and Trio history is stored with the conversation so the other people in it can see it.

Voice and video calls

Calls are not recorded or stored by us. To set a call up we store short-lived signalling data such as who is calling whom, call state, and connection details, and we keep a small call history entry (who, when, how long) so you can see it in your chat.

How the sound and picture travel depends on the type of call. Voice calls are sent directly between the two people wherever the network allows it; when a direct connection cannot be made, the encrypted audio passes through a relay server, which forwards it without keeping a copy. Video calls are carried by our own video server in Germany, so the picture and sound always pass through it rather than going directly between the two phones. It forwards the call live and keeps no copy.

Purchases and payouts

Device and technical data

Advertising (Campfire)

GCENA shows third-party advertisements in Campfire (Camp Wall and Camp Reels) and may offer optional rewarded ads you choose to watch to earn Fun Points, Paid Points, or free tokens for emoji reactions. Ads are served by Google AdMob (Google LLC). We do not place ads inside Safe Space chats, Inner Circle private messages, or voice/video calls.

AdMob may use cookies, mobile advertising IDs (such as Google Advertising ID on Android and the Identifier for Advertisers on iOS where permitted), and similar technologies to deliver and measure ads, including personalised ads where allowed by law and your device settings. In the European Economic Area, United Kingdom, and similar regions, a consent / privacy choices prompt may appear before personalised ads are shown.

You can limit ad personalisation in your device settings (for example, reset or limit the advertising ID on Android, or restrict App Tracking Transparency / Apple Advertising on iOS). See Google's advertising and privacy materials: Google Privacy Policy, How Google uses information from sites or apps that use our services, and AdMob & privacy.

We do not sell your personal data. We do not use the content of your private conversations with Ciel or Inner Circle friends to build advertising profiles.

3. How we use your information

Where the GDPR applies, we rely on: performance of a contract for running your account and the features you ask for; legitimate interests for safety, anti-fraud, and keeping the service working; consent for device permissions such as camera, microphone, and notifications, and for personalised advertising where required by law, which you can withdraw at any time; and legal obligation for records we must keep, such as those relating to payments.

4. What we do not do

5. Where your data is stored, and who processes it

GCENA runs on a small number of providers. Each one only receives what it needs for its part of the service.

These providers act as our processors and handle data only as needed to deliver the service, under their own security and privacy obligations.

6. AI features and your messages

When you send a message to Ciel, the message, the recent conversation turns, the instructions that give Ciel its personality, and any photo you attach are sent through our Cloudflare service to our AI provider (OpenRouter, which runs Google Gemini models) so a reply can be generated. Inner Circle writing help sends only your friend's last message and the instruction you typed.

Your name and email address are not part of that request. We do not keep Inner Circle writing-help prompts or replies on our servers. Ciel conversations are stored as described in section 2 — on your device for "Just us", and with the conversation for Duo and Trio. Our AI providers process the content to return a reply and handle it under their own terms.

Speech-to-text and text-to-speech for talking with Ciel, and the text recognition used when you share a photo with Ciel, run on your device.

Please do not send Ciel information you would not want processed by a third-party AI service, such as passwords, payment card numbers, or government identification numbers.

7. Campfire Live

Going live in Campfire is optional. Viewers watch inside GCENA. The picture and sound are carried by LiveKit on our own Hetzner server in Germany, in a separate live room from Inner Circle calls. GCENA does not connect a YouTube account and does not host lives on YouTube.

8. Permissions

GCENA asks for a device permission only when you use the feature that needs it:

You can change or revoke any of these at any time in your device settings.

9. Sharing with other people

Much of GCENA is social by design. Please keep in mind that:

You can make your profile private, choose the audience for each post, and block accounts at any time.

9a. Copyright and content reports

If you or someone else sends us a copyright complaint, a counter-notice, or an in-app report about a post, video, message, or profile music, we process the contact details and information included in that report — such as your name, email, and a description of the content — to review it, decide whether to remove or restrict the content, and keep a limited record of what we did and why. We may also contact the person who uploaded the content. See our Terms of Service (section 5, "User content, copyright, and notice-and-takedown") for how this process works. Copyright notices can be sent to [email protected].

10. Data retention and deletion

We keep your data while your account is active and for as long as we need it to provide the service.

You can delete your account yourself in the app under Settings → Delete Account. When you do, we remove your profile, your posts and their comments and reactions, your My Day items, the comments you left under other people's posts, your friend connections and requests, and the Safe Space history stored on your device, and we remove your name from messages you left in shared conversations. Messages you sent to other people may remain in their copy of the conversation, shown without your name.

Deleting your account does not cancel a subscription bought from Apple or Google — cancel that in your store account settings.

Some records are kept longer where we must: for example, records of payments, payouts, and tax or accounting obligations, and limited safety records relating to reports of serious harm. Backups are overwritten on a rolling basis. If you would like written confirmation that your data has been erased, email [email protected] and we will confirm and complete any remaining removal.

11. Your rights and choices

Depending on where you live, you may have the right to:

Email [email protected] for any of these and we will respond within the time the law allows. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority. Because GCENA is operated from France, you may also complain to the French authority, the CNIL. If you are in California, you may exercise your rights under the CCPA/CPRA. We do not sell personal information. Advertising partners such as Google may process identifiers for ads as described above; you can use device and Google ad settings to limit personalisation.

11a. Who is responsible for your data

GCENA is run by one independent developer working as a sole trader based in France. That person is the data controller for the information described in this policy — there is no company behind it, and no team with access to your data.

For any privacy question, or to receive the registered name and postal address of the operator, write to [email protected].

12. Children

GCENA is intended for users aged 13 and older, or the minimum age required in your country. Users under 18 should use the app with parental or guardian guidance. We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child has provided us data improperly, contact us and we will take appropriate action.

13. International transfers

Our own database and call relay are hosted in Germany. Our other providers — Google, Cloudflare, OpenRouter, Apple — operate globally, so your information may be processed outside your own country, including in the United States. Where data leaves the European Economic Area, we rely on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

14. Security

We protect your data with authenticated access to our services, database rules that restrict each account to its own data, encrypted connections to our cloud services, and access controls on the systems we run.

Voice calls are encrypted between the two people using the standard WebRTC protections. When they need the relay described above, it forwards that traffic without being able to read it.

Video calls are different, and we would rather say so plainly: because the picture and sound pass through our own video server so it can forward them, they are encrypted on the way to and from that server rather than end-to-end. The server handles the live media in order to pass it on, and keeps no copy of it.

To be clear about what we do not claim: Inner Circle and Safe Space messages are not end-to-end encrypted. They are protected in transit and by access controls, but they are stored in a form we could technically access, which also allows us to act on abuse reports. Please keep that in mind when sharing sensitive information.

No method of transmission or storage is completely secure, but we work continuously to reduce risk. If you believe you have found a security problem, please tell us at [email protected].

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the effective date above. If changes are material, we may also notify you in the app. Continued use of GCENA after changes means you accept the updated policy.

16. Contact us

Privacy questions and data requests: [email protected]