Gemlo

Privacy

Last updated October 22, 2026. Gemlo is currently in beta testing.

What Gemlo is

Gemlo is an app for live events. Organizers publish the key takeaways from each session; attendees swipe through them, keep the ones that matter, and add their own notes. Organizers use a web console to set up events, sessions and speakers, and to review takeaways before they go live.

What we collect

• Account: your email address, and your name if you add it. You sign in with a one-time code sent to your email; there is no password.
• Event membership: which events you joined and your role (attendee, staff, producer, admin).
• What you do in the app: takeaways you keep or skip, your notes, sessions you save to your schedule, and photos you take of slides or business cards. Text in photos is read on your phone.
• Session recordings (staff only): event staff may record a session so it can be transcribed. Recordings are of the session, not of attendees' phones, and are made only by the event team.
• Organizer content: event details, rooms, sessions, speaker names, bios and photos that organizers enter.
• Basic technical data: the server logs our providers keep for security and reliability (for example IP address and time of request).

We do not collect your contacts, location, or advertising identifiers.

Who can see what

• Only you: your notes, the takeaways you keep or skip, your saved sessions, and your photos.
• The event's organizers: that you joined their event, your name and email, and anything you send them on purpose. They also see aggregate counts (for example how many people kept a takeaway), not who kept it.
• Anyone with the link: an event's schedule, only if the organizer publishes it, and a takeaway you choose to share publicly, only if the organizer allows sharing. Your own notes are never part of a public share.

Service providers

We use a small number of providers to run Gemlo. They process data only to provide their service to us:

• Supabase (database, sign-in, file storage), hosted on Amazon Web Services in the United States.
• Cloudflare (website hosting and security).
• Resend (sign-in code emails).
• Anthropic (drafting session takeaways from transcripts) and, when an event uses audio recording, OpenAI or Deepgram (transcription). They receive session transcripts or audio, not attendees' notes. Under their business terms they don't use this data to train their models.
• Apple TestFlight and Google, to distribute beta builds.

How long we keep it

We keep your account and notes while your account is active. Session recordings are kept only as long as needed to produce and check the transcript. You can ask us to delete your account at any time, and we'll delete your account, notes and photos within 30 days.

Your choices

• Ask for a copy of your data, a correction, or deletion by emailing us (below).
• Leave an event at any time.
• Choose whether other attendees can find you at an event (when this feature arrives); if you're hidden, you're hidden both ways.

Security

Data is encrypted in transit and at rest by our providers. Access rules are enforced inside the database itself, so one user's private data can't be read by another user or by organizers. No system is perfect; if we learn of a breach affecting you, we'll tell you.

Children

Gemlo isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If this policy changes in a meaningful way, we'll update this page and tell beta testers in the app or by email.

Contact

Questions, requests or feedback: yossi@akselrud.com