Privacy Policy

AAA Interactive Ltd
Last updated: 30 June 2026

1. Who We Are

GenStars is operated by AAA Interactive Ltd, a company registered in England and Wales. We are the data controller responsible for your personal data.

Contact: support@genstars.tv

2. Age Requirements

You must be at least 16 years old to create a GenStars account. Users must be at least 18 years old to enter competitions with entry fees or receive prize payouts.

3. What Data We Collect

3.1 Account Information

When you create an account, we collect:

• Email address
• Username
• Authentication provider IDs (if you sign in via Google or Apple)

3.2 Profile Information

You may choose to provide:

• Profile biography (up to 150 characters)
• Profile avatar image

3.3 Payment and Financial Data

If you enter paid competitions or receive prize payouts, we process financial data through Stripe:

• Stripe account identifiers and connection status
• Transaction records (amounts, payment status, timestamps)
• Payout records and transfer references

We do not store your credit card numbers, bank account details, or other sensitive financial data directly. This information is held by Stripe in accordance with their privacy policy.

Stripe's identity verification process may require you to provide additional information (such as date of birth, address, or identity documents) directly to Stripe.

3.4 Competition and Activity Data

When you participate on GenStars, we collect:

• Competition entries, roles (performer, judge, expert), and results
• Votes cast and voting history
• Video, audio, and image uploads (including file metadata such as duration and file size)
• Following and follower relationships
• Notification preferences
• Lifetime and periodic performance statistics

3.5 Device and Technical Data

We collect certain technical data automatically:

• IP address and user agent (from browsing sessions)
• Device name and platform (iOS or Android) when registering for push notifications
• Push notification tokens (via Expo)

3.6 Location Data

We use your IP address to determine your approximate geographic location for the purpose of enforcing regional availability of features (such as paid competition entry). We do not store your location. This check is performed in real time and no geolocation data is retained.

3.7 Support Data

If you contact support, we collect:

• Your support messages and any attachments
• Device information you provide with a ticket

3.8 Organisation Data

If you use GenStars through an organisation (enterprise features), we collect:

• Organisation membership and role
• Organisation billing details

4. How We Use Your Data

We process your personal data for the following purposes:

5. Who We Share Your Data With

We share data with the following categories of third-party service providers, each acting as a data processor on our behalf unless stated otherwise:

We do not sell your personal data to third parties.

Authentication Providers (Google and Apple)

If you choose to sign in with Google or Apple, you authenticate directly with that provider, and they share a limited set of profile information — your name and email address — with us so we can create or access your account. We facilitate these sign-ins through WorkOS. We never receive your Google or Apple password.

If you use Apple's Hide My Email feature, Apple provides us with a randomised relay email address instead of your real address and forwards any emails we send to your real inbox on your behalf.

Your use of these sign-in options is also governed by the provider's own privacy policy: Google and Apple.

Public Information

The following data is visible to other GenStars users:

• Username and avatar
• Profile biography
• Competition participation, results, and rankings
• Uploaded performance videos
• Follower and following counts

6. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom, including the United States (where many of our service providers are based). Where we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
• Transfers to countries with an adequacy decision
• Service providers certified under recognised frameworks

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. After you delete your account:

• Financial records (payments, payouts, entry fees) are retained for 7 years as required by UK tax and accounting regulations
• Content you uploaded to competitions that have concluded may be retained as part of the competition record
• Aggregated, anonymised statistics (e.g., competition results, leaderboards) are retained indefinitely as they no longer identify you
• All other personal data is deleted or anonymised within a reasonable period

8. Your Rights

Under UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Restriction — request we limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at support@genstars.tv. We will respond within one month.

9. Additional Rights for Users in Specific Regions

European Economic Area (EEA)

Users in the EEA have the same rights as described in Section 8 under the EU General Data Protection Regulation (GDPR). Our legal bases for processing are as described in Section 4.

California (USA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information
• Right to opt out of sale — we do not sell personal information
• Right to non-discrimination for exercising your privacy rights

Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If your local law provides additional rights, contact us at support@genstars.tv.

10. Cookies and Tracking

GenStars uses essential cookies for authentication and session management. Our analytics provider (PostHog) may use cookies or similar technologies to track product usage. You can manage cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit (TLS) for all data transfers
• Secure password hashing
• Access controls and authentication for internal systems
• Regular security monitoring via error tracking and logging

No method of transmission over the internet is completely secure. If you become aware of a security vulnerability, please report it to support@genstars.tv.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email or through the GenStars app. Your continued use of GenStars after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or wish to exercise your rights:

AAA Interactive Ltd

Email: support@genstars.tv

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk