Third-Party Services - Nygma
Last Updated: October 13, 2026
Genie9 LTD (“Genie9”, “we”, “us”) uses a small number of other companies to run Nygma. This page lists them, what we use them for and what they receive. Your files and chats are encrypted on your device, so none of these companies can read them.
1. Our Service Providers
| Provider | What we use it for | What it receives | Where |
|---|---|---|---|
Amazon Web Services Amazon S3, Amazon RDS, Amazon SES | Hosting our servers; storing your encrypted files (S3) and our database (RDS); sending sign-in codes and account emails (SES). | Your encrypted files and chat messages in transit (unreadable without your keys), the account and service data described in our Privacy Policy, and your email address for the emails we send you. | USA (us-east-1) |
Firebase Cloud Messaging | Waking the Nygma app when there is new chat activity. | A device push token and a notification with no content. | USA / global |
Firebase Analytics and Firebase Crashlytics (mobile apps) | App usage statistics and crash reports. You can switch both off in the app’s Settings. | App usage events, crash reports, and device and app details. Never your files, file names or passwords. | USA / global |
Google Play Billing | Subscriptions bought in the Android app. | Google handles the purchase. We receive purchase and subscription records. | USA / global |
Google Sign-In | Signing in with Google, if you choose it. | Google confirms who you are and gives us your name and email address. | USA / global |
Apple App Store | Subscriptions bought in the iOS app. | Apple handles the purchase. We receive purchase and subscription records. | USA / global |
Apple Apple Push Notification service | Delivering notifications to the iOS app. | A device push token and a notification with no content. | USA / global |
Apple Sign in with Apple | Signing in with Apple, if you choose it. | Apple confirms who you are and gives us the email address and name you choose to share. | USA / global |
Stripe Stripe Checkout | Subscriptions bought on the website. | The payment details you enter go to Stripe, not to us. We receive payment and subscription records. | USA / global |
Google Tag Manager and Google Analytics (web app) | Website analytics. Cookie consent applies, and advertising signals are turned off inside the signed-in dashboard. | Pages visited, browser and device details, and analytics cookies where you allow them. | USA / global |
MaxMind GeoLite country database (used on our own server) | Checking the country of new sign-ups. | Nothing. The database runs on our server; your IP address is not sent to MaxMind or anyone else. | Our servers |
2. Code the Web App Downloads
When you upload a video in the web app, your browser may download the open-source FFmpeg video library from a public code delivery network (unpkg or jsDelivr) so that it can process the video on your device. That network sees your IP address and browser details. It does not receive your files.
3. What These Providers Do Not Receive
None of these providers receive, in readable form, the contents of your files, the names of your files and folders, your thumbnails, your drive passwords, PINs or recovery phrases, or your chat messages. Amazon Web Services stores your files, and carries your chat messages, only in encrypted form. For what Genie9 itself can see, read our Zero-Knowledge Statement.
4. Apple, Google and Stripe
When you pay through Apple, Google or Stripe, or sign in with Apple or Google, those companies also handle your information under their own terms and privacy policies. Subscriptions bought through Apple or Google are billed, renewed, cancelled and refunded by them under their rules.
Providers’ privacy policies:
- • Amazon Web Services: https://aws.amazon.com/privacy/
- • Google: https://policies.google.com/privacy
- • Apple: https://www.apple.com/legal/privacy/
- • Stripe: https://stripe.com/privacy
- • MaxMind: https://www.maxmind.com/en/privacy-policy
5. Where Your Data Is Processed
- • Our servers are in the United States (Amazon Web Services, us-east-1).
- • Transfers of personal data from the UK and the EEA rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and on the UK–US data bridge where it applies.
6. Changes to This List
- • We may add, replace or stop using providers at any time. When we do, we will update this page.
- • For business customers who have accepted our Data Protection Addendum, updating this page is how we give notice of changes to our sub-processors.
7. More Information
Our Privacy Policy explains what personal data we collect, why, and for how long we keep it.
8. Contact Information
Data protection:
Email: dpo@genie9.com or privacy@genie9.com
Legal:
Email: legal@genie9.com
Mailing Address:
Genie9 LTD
3 Shortlands
London W6 8DA
United Kingdom
This Third-Party Services page was last updated on October 13, 2026.