Privacy Policy

Last updated July 2026

This policy explains what GENUBRA PRISM (operated by Next Realm) collects, how we use it, and your choices. We collect the minimum needed to run the service, we don't sell your data, and this policy works alongside our Terms.

What we collect

• A device account token that identifies your wallet and builds.
• If you sign in with Google: your email, name, and avatar.
• The builds, worlds, prompts, and uploads you create.
• Basic usage and error events to operate and improve the service.
• Payment status from PayPal — we never see or store your card details.
We don't ask for — and PRISM isn't meant to hold — sensitive data such as health records, biometrics, or government IDs.

Cookies

We use one strictly-necessary, HttpOnly session cookie to keep you signed in, plus a token stored in your browser. We don't use advertising or cross-site tracking cookies.

How we use it

To generate and host your builds, bill subscriptions and top-ups, prevent abuse, provide support, and improve the product.

How AI generation works

When you build, we send your prompt and the content of your build to Anthropic's API to generate the output. Anthropic processes it to return your result and, under its API terms, does not use it to train its models. We don't use your private builds to train any model of our own.

Who we share it with

We use trusted subprocessors to run PRISM: Cloudflare (hosting, database, storage), Anthropic (AI generation), PayPal (payments), and Resend (email). They process data only to provide their service. These providers process data in the United States, so if you use PRISM from elsewhere your data may be transferred to and processed in the US. We don't sell personal data or share it for advertising.

Data in your builds

You decide what your builds collect from their visitors. Today builds run as self-contained pages that store their data in the visitor's own browser — so that information usually stays on the visitor's device and never reaches our servers. Where a build does send data to us, you are responsible for it as its controller and we process it on your behalf. Either way, don't use PRISM to collect regulated or highly sensitive data (health, full card numbers, government IDs, biometrics, or data from children) — see our Terms — and make sure you have the right and any consent needed for what you collect.

Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and isolating generated apps from your account and session. No method of storage or transmission is ever completely secure, so we can't guarantee absolute security.

Public content

Anything you choose to Publish or feature in the Showcase becomes publicly visible. Builds you don't publish stay private to your account.

Your rights & retention

You can request access to or deletion of your data, and you can reset your device session in Settings. We retain data while your account is active or as needed to provide the service and meet legal obligations. To exercise any right, contact us via Support.

Children

PRISM isn't directed to children and isn't intended for anyone under 13 (or the age of digital consent where you live). Don't use PRISM if you're under that age, and don't use it to collect data from children.

Changes to this policy

We may update this policy as the product evolves. We'll change the date above and, for material changes, do our best to give notice. Continued use after an update means you accept it. Questions? Reach us via Support.