Legal

Terms of service

Every section below opens with a plain-English summary of what it actually means, and the legal wording follows it. Each summary is written to be accurate rather than reassuring.

Last updated: 14 November 2026 Effective: 24 July 2026 England & Wales
On this page

01The service

Gemmein is the backend and hosting for web and mobile apps: sign-in, protected data, payments (Stripe built in, other providers through a relay, App Store and Play through RevenueCat), AI tools and credits, relays, Edge functions that run your own code, hosting for your app's site on your own domains, and a dashboard to run your customers. Payments are processed by your provider on your own account; Gemmein never holds or moves funds.

Gemmein ("we", "us", "our") is operated by Gemmein Limited, a company registered in England and Wales (company number 17339623). Gemmein provides a hosted platform that gives your web and mobile applications passwordless sign-in (by emailed code or, if you turn it on, Google sign-in), structured data and file storage, managed subscription and purchase state through an API, hosting for your app's website (a Development preview, and the Live site on your own domains), and Edge functions that run code you provide. Payments are processed by your provider on your own account; Gemmein never holds or moves funds. When we say "the service", we mean the Gemmein API, hosting, Edge functions, dashboard, documentation, command-line tools, AI connector and client libraries.

"You" means the person or entity that creates a Gemmein account and builds applications on the service. "End-users" means the people who use your applications.

Every application on Gemmein — including apps still being built for free — includes the following security and infrastructure features at no additional cost:

  • Layered edge protection in front of every request
  • Rate limiting and brute-force protection
  • Tenant isolation enforced by the platform
  • Private by architecture
  • Audit logs for every sign-in and every write
  • Domain-locked keys
  • Server-decided identity
  • Passwordless auth (no password database to breach)
  • Encrypted in transit and at rest
  • Spike protection with graceful rate limiting
  • Hosting, scaling, and patching
  • Automated backups and deletion protection
  • Controls aligned with OWASP API Top 10, NIST CSF 2.0, and ISO 27001
  • A full pre-launch security review and continuous automated security testing

These are not add-ons. They are how the service works.

The gemmein command-line launcher is distributed under the MIT license. The engine it downloads is licensed separately under the Gemmein Engine License, available at downloads.gemmein.com/engine/LICENSE.

02Your account

You need to be 18 or older, use a real email address, and keep your credentials safe. Each account belongs to one person or business and can hold several apps, each with its own customers and records.

To create an account you must be at least 18 years old and able to enter into a binding agreement under the laws of your jurisdiction. By creating an account you confirm that you meet this requirement.

Each account belongs to a single person or legal entity, who is responsible for every app on it. An account can hold as many apps as its plan allows (section 3). Each app is kept separate: its customers, records, files and payments stay its own and aren't shared with other apps on the account, and you can export or delete each app on its own. Billing is per account: one plan covers all its apps. Each app connects its own Stripe account; several apps on the same Gemmein account may use the same Stripe account, but a Stripe account can be connected to only one Gemmein account. If you build apps for clients, you're the account holder for those apps and responsible for them under these terms; your client can instead hold its own account. Sharing account credentials is not permitted.

We will verify your email address during signup. You must keep your email address current so we can reach you about billing, security, and service changes.

You are responsible for all activity that occurs under your account, including the security of your secret keys. If you sign in with Google, keeping that Google account secure is part of keeping your Gemmein account secure. If you believe your account or keys have been compromised, rotate your keys immediately and contact us at legal@gemmein.com.

03Billing

No card at signup. Building is free for up to 3 apps. One plan covers your whole account, not each app: it sets how many apps your account holds and a pooled storage allowance, with a fixed monthly or yearly price. Reaching the storage allowance never charges you: you get a short grace period and an alert, and only you can change your plan. Prices are in US dollars and exclude tax.

Plans

Building and testing are free, with no payment method required, for up to 3 apps. Putting an app live puts your whole account on a paid plan:

PlanMonthlyYearlyYour account includes
Build$0—Up to 3 apps, development only
Launch$29$290Up to 5 apps, 50 GB pooled storage
Run a business$79$790Up to 10 apps, 200 GB pooled storage
Grow$199$1,990Up to 25 apps, 500 GB pooled storage, "Powered by Gemmein" removable
BeyondAgreed individuallyAbove 25 apps, pricing is agreed individually — contact hello@gemmein.com

Any app on the account may go live under the plan you pick. Active people are never priced or limited by your plan: we track fair use, and would reach out long before it could ever matter. A card is required the first time you go live or buy a plan ahead of it, collected and processed by Stripe.

Storage packs. On any paid plan you can add storage in packs of 50 GB for $5 a month ($50 a year on yearly billing), as many as you like. Each pack adds 50 GB to your account's pooled storage. Packs are chosen by you in advance, never added automatically, and are billed on the same monthly or yearly cycle as your plan.

Referral codes. If you sign up with an affiliate's referral code, you get $5 off your first payment, monthly or yearly. It applies once and can't be exchanged for cash.

Limits, not meters

Your plan's price is fixed. Going over your account's pooled storage never adds a charge: we alert you and give you a grace period, up to 10% over the allowance, for up to 7 days, whichever ends first. After it, existing files stay available, but new uploads are refused with a clear error until files are deleted, you add a storage pack or you move to a bigger plan.

Downloads are fair use on every plan: there's no allowance or figure. Emails sent have a pooled monthly allowance for each plan, stated in the plan comparison. Going over either one never refuses or charges anything automatically: we alert you and reach out first. (A cap under "Fair use and resource limits" below is separate, and comes with notice.) Edge function runs have a pooled monthly allowance, stated in the plan comparison; past it, Edge function calls pause until the next period starts or you move to a bigger plan — never a charge. Moving plan is always your own action. We never change your plan or your price automatically.

Fair use and resource limits

Every plan, including Build, also has technical limits on things like requests, emails sent and compute, so that one app can't slow Gemmein down for everyone else. We publish the current limits for each plan on our usage and limits page. Bandwidth has no fixed limit, but it is covered by this section.

  • When we may tighten a limit. If an app's use is far beyond what a typical app on the same plan uses, or puts the stability, security or cost of the service at risk, we may apply or tighten a cap for that app, for example by slowing requests or pausing a feature such as email sending.
  • Notice. Where practicable, we'll email you at least 7 days before applying a new or tighter cap, explain what we've seen, and tell you what would bring your app back within limits.
  • Never a charge. A cap never adds a charge. It doesn't move you to another plan or reduce the storage your plan and storage packs include for the period you've paid for.
  • Your options. You can reduce your app's usage, move to a bigger plan, or contact hello@gemmein.com about a custom arrangement, including a dedicated instance on Beyond.
  • Immediate action. If usage looks like abuse, an attack (on Gemmein or launched from your app), or an emergency that threatens the service, we may throttle or block the traffic straight away, without notice. We'll tell you what we did and why as soon as we reasonably can, and lift it once the risk has passed.
  • Unlawful or harmful use is covered separately by the acceptable use rules in section 4. Breaking those rules can lead to suspension or termination under section 8, not just a cap.

Monthly and yearly billing

Your account is billed either monthly or yearly; all your plans and storage packs follow the same cycle. Yearly costs the price of 10 months: 2 months off, a saving of about 17%. Billing renews automatically at the end of each period until you cancel. For yearly billing, we email you at least 30 days before each renewal with the date, the amount and how to cancel, and we send a receipt when it renews.

Changing plan or billing cycle

  • Moving up a plan, or adding a storage pack, takes effect straight away. You pay the difference for the rest of your current period, worked out pro rata, and renew at the new price.
  • Moving down a plan takes effect straight away, with no refund or credit for the period already paid; we show you this before you confirm. You can only move down if your stored files fit within the lower plan's storage plus your storage packs; otherwise, delete files first. You can't move down while more apps are live than the lower plan allows: take an app offline first, then move down. If you hold more apps in total than the lower plan includes, you can still move down: your newest apps beyond the new limit become read-only until you choose which stay active on the Usage page, or move back up. If your plan is changed any other way (for example, a change we make in billing at your request) and leaves more apps live than it allows, your newest live apps are taken offline and we email you naming them. Nothing is deleted in any of these cases, and you can always view, export and delete data in a read-only or offline app.
  • Removing a storage pack takes effect straight away, with no refund or credit for the period already paid. You can only remove a pack if your stored files fit within the storage you'd have afterwards; otherwise, delete files first.
  • Monthly to yearly takes effect straight away: we charge the yearly price and credit the unused part of your current month.
  • Yearly to monthly can be chosen in the last 30 days of your paid year, and starts when the year ends, with no credit.

Cancelling

You can cancel any time from the dashboard or billing portal. Cancelling stops future renewals. Your plan keeps running until the end of the period you've paid for, then Live pauses and apps beyond the free 3 become read-only, as described below. Building up to 3 apps stays free.

Refunds

Apart from the first-charge refund below and refunds under section 8 if we end your account without a reason, we don't refund the unused part of a monthly or yearly period, including when you cancel or move down.

Your first charge is refundable within 14 days, no questions asked

If your first paid charge isn't what you expected, monthly or yearly, email legal@gemmein.com within 14 days and we will refund it in full. This is a one-time, unconditional refund on your very first paid charge.

If you're a consumer, you also have a legal right to cancel within 14 days of your first payment. Our first-charge refund above gives you at least that: a full refund within those 14 days.

Price changes

We may change our prices, including starting to charge for something that is currently included, such as bandwidth. We'll email you at least 30 days before a new price applies to you, and it applies only from your next renewal after that notice. A yearly period you've already paid for keeps its price until it ends. If you don't want the new price, cancel or change plan before it applies.

Tax

Prices are in US dollars and exclude VAT and other taxes. Where tax applies, we add it at checkout and show it on your invoice. If you give us a valid EU VAT number, we treat the sale as business-to-business and you account for any VAT under the reverse-charge rules. Currency conversion and any fees your bank charges are your responsibility.

If your subscription ends or a payment fails

Your Gemmein subscription pays for Live, your apps answering real users, and for holding more than 3 apps. If it ends or isn't paid, Live pauses, and any apps beyond the 3 that are free to build become read-only. Nothing is deleted.

  • Payment fails. Live keeps running for 7 days while we retry your card. We email you when the payment first fails, again after 3 days, when 2 days are left, and on the last day. If the payment still hasn't gone through after 7 days, Live pauses and we email you to say so.
  • You cancel. Live keeps running until the end of the period you've paid for. We email you 7 days and 1 day before it pauses.
  • When your plan has ended. Your plan has ended when you've cancelled and the period you paid for is over, or when Stripe has stopped retrying a failed payment. Then up to 3 apps keep working in Development: your live app first, then your oldest, unless you choose others on the Usage page. Any other apps become read-only: you can view, export and delete their data, but not change them. You can create new apps only up to those 3. Paying again restores everything.
  • While Live is paused, your live apps answer their users with a “temporarily unavailable” message instead of working. Development, the dashboard, your code and all your data stay available: you can still view and delete your Live data, export each customer's data from the dashboard (including to answer their data requests), or ask us for a full export at support@gemmein.com.
  • Payment events while paused. We keep accepting events from your own Stripe account for a paused app and hold them for up to 30 days. They're delivered to your app when Live resumes. Events older than 30 days are discarded.
  • Your data is kept. We don't delete anything because Live is paused. It stays until you delete it or your account ends. If we ever introduce a limit for long-paused accounts, we'll give you at least 30 days' notice first. This applies to read-only apps too.
  • To resume, pay the outstanding amount or restart your subscription from the dashboard. Live comes back as soon as the payment succeeds, and we email you to confirm.

Your own customers. Your users' contracts are with you, not with Gemmein. While Live is paused, you are responsible for your users, including telling them, any refunds or compensation they're owed, and pausing or adjusting any billing you run for them in your own Stripe account. We aren't liable for losses that come from a pause caused by an unpaid or cancelled subscription.

You will never wake up to a bill you didn't choose. You pay for the plans and storage packs you picked, and only you can change them.

04Acceptable use

Build what you want, but don't use Gemmein for anything illegal, harmful, or that puts children at risk. If you see abuse, report it.

You agree not to use the service, or allow your end-users to use applications built on the service, to:

  • Store, distribute, or facilitate access to illegal content under the laws of England and Wales or the jurisdiction in which you or your end-users operate
  • Store, distribute, or generate child sexual abuse material (CSAM) in any form. We are obligated to report any such material discovered on the service to the relevant authorities, and will do so without notice to you
  • Distribute malware, conduct phishing, or attempt to gain unauthorised access to any system
  • Reverse-engineer, decompile, or attempt to extract the source code of the service
  • Circumvent or attempt to circumvent rate limits, usage ceilings, or other protective measures
  • Deliberately consume resources far beyond your plan in a way designed to degrade the service for others (for example, using Gemmein as general file hosting, a bulk-email relay or a load-testing target)

Your responsibility for end-users

By using the service, you warrant that your applications are not directed at children. End-users of your applications must meet the applicable minimum age: 13 years in the United States and United Kingdom, 16 years in the European Union, or the minimum age required by the laws of their jurisdiction, whichever is higher.

You are responsible for ensuring that your applications comply with all laws applicable to you and your end-users.

Content returned to the service by a pipeline you configure is your responsibility in the same way as content you upload.

Code you run as Edge functions, and the content of sites you publish on Gemmein, are your content under these terms, in the same way as data you upload.

Reporting abuse

If you become aware of content or usage that violates these terms, report it to abuse@gemmein.com. We review every report.

05Your data

Your data belongs to you. We process it on your behalf, we don't sell it, and you can export or delete it at any time.

Ownership

You retain all rights to the data you and your end-users store on the service. Gemmein claims no ownership of your data.

Data processing

When you store your end-users' personal data on the service, you are the data controller and Gemmein is the data processor. Relays run on the service; processing at a URL a relay calls, or at a pipeline you configure, happens outside it. The same applies to the outside hosts an Edge function calls. AI tool calls go to the provider you name, on your key and under your agreement with that provider. It is yours, under your own agreements with your users; Gemmein does not process, review or take responsibility for what happens at that endpoint or at any third party it calls. The same applies to an AI assistant or other client you connect to Gemmein: data you let it read is processed under your agreement with its provider, not ours. Our processing of that data is governed by our Data Processing Agreement (DPA), which is incorporated into these terms by reference. You can read it at gemmein.com/dpa; a countersigned copy is available on request at legal@gemmein.com.

Data export

You may request an export of your stored data at any time by contacting us: your records, your files, and the details of your end-users as they relate to that data. We will provide the export in a standard machine-readable format within a reasonable timeframe. Exports cover the data you and your end-users stored on the service; they do not include operational information Gemmein generates in running it.

Deletion and retention

When you delete a record through the API or dashboard, it is soft-deleted and recoverable for 30 days. After 30 days, it is permanently purged.

Deleting an app. You can permanently delete an app from the dashboard, with the AI assistant or with the command-line tool. Each deletion has to be approved in your browser with a code we email you and the app's name. Deleting an app can't be undone, and records deleted this way are not recoverable for 30 days. When you delete an app, we:

  • stop the app straight away: its keys stop working, and its site, domains and Edge functions are removed;
  • cancel its customers' subscriptions in your Stripe account immediately, not at the end of their period, with no pro-rata credit and no final invoice. Payments already made are not refunded by Gemmein; any refunds to your customers are your decision, made in your own Stripe account;
  • erase its data, including its customers, records and files, straight away. If Stripe hasn't yet confirmed a cancellation, we finish erasing once it does. Encrypted backups age out within 7 days.

We keep a record on your account that the app was deleted (its name, when, and what was removed), with no data about its customers. Deleting an app doesn't change your plan or its price, and we don't refund any part of your current period. Before you delete an app, export anything you want to keep, and tell your customers: they're your customers, and what you owe them when the app closes is your responsibility.

When you delete your account, we begin permanent deletion of all associated data. The process completes within 30 days, with encrypted backups aging out over an additional 7 days (37 days total from the deletion request).

Data location

All data is stored in the United States, with Amazon Web Services, Inc.; websites you publish are served, and Edge functions you deploy are run, from the global network of Cloudflare, Inc., which may process data in the data centre nearest the request. Transfers of personal data from the UK and EU are covered by the UK-US Data Bridge and the EU-US Data Privacy Framework respectively. For further detail, see our Privacy Policy.

06Early access

Gemmein is in early access. Features may change, and support replies within 1 business day. Removing a feature you pay for comes with 30 days' notice. Our data protection commitments apply in full, now.

The service is currently in early access. During this period:

  • Features may be added or changed at any time. If we remove a feature that's part of a plan you're paying for, we'll give you at least 30 days' notice, and if that leaves your plan materially worse, you can cancel and get a pro-rata refund of any prepaid time you haven't used
  • We don't guarantee uptime, and there is no service level agreement (SLA)
  • Support is by email at support@gemmein.com, on every plan, including Build. We reply within 1 business day (Monday to Friday, UK time, excluding UK public holidays). That's a time to reply, not to resolve: some issues take longer to fix, and we'll keep you updated. It isn't an SLA, and it doesn't come with service credits or refunds
  • On Grow, you also get priority support and a named contact at Gemmein, who will get in touch when you subscribe. Priority means your requests are handled ahead of others in the queue; it doesn't change the reply time above into a guarantee, and it isn't an SLA either. If your named contact changes, we'll tell you
  • The current state of each part of the service, and every incident, is published at status.gemmein.com, with a feed you can subscribe to
  • Your data is yours to take: you can request a full export at any time (section 5), and deletion runs on the schedule in the privacy policy

Service levels will be published from operating evidence, not ahead of it. The status page is where that record accumulates.

Early access affects what we promise about uptime and features. It does not change what we promise about how we protect data.

The security commitments listed in section 1 — including encryption, tenant isolation, audit logging, rate limiting, and every other item on that list — are fully in effect during early access. They are production commitments, not aspirational targets. We do not disclaim or weaken them during this period.

07Liability

Our liability is capped at what you've paid us in the last 12 months. If you're building for free, that's zero. UK law requires us to say certain things can never be excluded, and we say them clearly here. If someone makes a claim against us because of your app or your content, you cover it, unless we caused it.

Liability cap

To the maximum extent permitted by law, the total aggregate liability of Gemmein to you for all claims arising out of or relating to these terms or the service shall not exceed the total fees paid by you to Gemmein in the 12 months immediately preceding the event giving rise to the claim. For users who are building for free and have paid no fees, this cap is zero.

What we do not exclude

Nothing in these terms excludes or limits our liability for:

  • Death or personal injury caused by our negligence
  • Fraud or fraudulent misrepresentation
  • Any other liability that cannot be excluded or limited under the laws of England and Wales

What we are not liable for

Subject to the carve-outs above, we are not liable for:

  • Loss of data beyond what is recoverable from our automated backups
  • Actions taken by third parties, including your end-users, payment processors, or infrastructure providers
  • Indirect, incidental, special, consequential, or punitive damages, including lost profits or revenue
  • Any failure or delay caused by events beyond our reasonable control (force majeure), including but not limited to natural disasters, acts of government, internet outages, and failures of third-party infrastructure

Your responsibility for your apps

You will indemnify Gemmein against claims by third parties (including your end-users and regulators) arising from your apps, your content, your instructions to us, or your breach of section 4 or of data protection law, and the reasonable costs of dealing with them. We'll tell you promptly about any such claim and let you take part in handling it. This doesn't apply to the extent a claim is caused by our own breach of these terms or the DPA.

08Termination

You can leave any time. If you don't pay, Live pauses, and once your plan has ended, apps beyond the free 3 become read-only; nothing is deleted. We can end your account for a serious breach, sometimes immediately. We can also end it without giving a reason, but then we give you 30 days' notice and refund any prepaid time you haven't used. Either way, you get time to export your data.

By you

You may delete your account at any time by emailing support@gemmein.com from the address you sign in with. Deletion is effective immediately; any remaining time in your current monthly or yearly period is not refunded, except under the first-charge refund in section 3. You can also delete a single app, as described in section 5.

By us, for a reason

We may suspend or end your account:

  • immediately, if you or your app break the acceptable use rules in section 4, are used for illegal activity or an attack, put the service or other customers at serious risk, or if the law, a court, a regulator or sanctions require us to; or
  • after 14 days' written notice, if you breach any other material term and haven't fixed it within those 14 days.

In these cases we don't refund fees already paid. Where we act immediately, we'll tell you what we did and why as soon as we lawfully can.

Non-payment is handled differently: Live pauses after the 7-day grace and reminders in section 3, and apps beyond the free 3 become read-only once the plan has ended. That's a pause, not an ending of your account.

By us, without a reason

We may also end your account for any reason, or stop offering the service altogether. If we do, we'll give you at least 30 days' notice by email (90 days if we're closing the whole service), and we'll refund the unused part of any period you've prepaid, worked out pro rata. Your apps keep working during the notice period.

After your account ends

If we end your account, or it ends for any reason other than you deleting it, you can export your data during any notice period and for 30 days after the account ends. After that, we delete it: deletion completes within 30 days, and encrypted backups age out within a further 7 days. If you delete your account yourself, deletion starts straight away, as described in section 5. We may withhold or keep data only where the data itself is unlawful, or where the law requires us to keep or report it. Your users are your customers: when your account ends, telling them, and moving or refunding them, is your responsibility.

09Governing law

These terms are governed by the laws of England and Wales, and any disputes go to the courts of England and Wales. If you're a consumer, you keep the protections of your own country's law and can use your local courts.

These terms, and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims), shall be governed by and construed in accordance with the laws of England and Wales.

The courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these terms.

If you're a consumer, you keep any mandatory protections of the law of the country you live in, and you can bring a claim in your local courts.

10Changes to these terms

If a change affects what you pay, your data, or your rights, we'll email you at least 30 days before it takes effect. Changes that don't take anything away from you take effect when posted. If we're unsure which kind a change is, we treat it as the first kind.

We may update these terms from time to time. If a change affects what you pay, what we do with your data, or any right these terms give you, we will email you at the address associated with your account at least 30 days before the change takes effect.

Changes that do not take anything away from you — clarifications, plain-language rewording, corrections, or terms covering new features you are not yet using — take effect when posted. In every case we update the "last updated" date at the top of this page. Where a change could reasonably be read either way, we give the 30 days' notice.

Your continued use of the service after the effective date of the updated terms constitutes your acceptance of the changes. If you do not agree to the updated terms, you may delete your account before the effective date.

11General

These terms, the DPA, the Privacy Policy and any plan you accept are the whole agreement. If one part can't be enforced, the rest still applies.

These terms, the DPA, our Privacy Policy and any plan or order you accept are the whole agreement between us about the service. We may transfer these terms to a company that takes over the service, and we'll tell you if we do; you may transfer them only with our written agreement. If any part is found unenforceable, the rest still applies. If we don't enforce a right straight away, we can still enforce it later. We'll send notices to your account email; you can send notices to legal@gemmein.com. Nobody else has rights under these terms (Contracts (Rights of Third Parties) Act 1999).

12Contact

Questions about these terms? Email us.

support@gemmein.com
Help with your account and apps. We reply within 1 business day. Email support
legal@gemmein.com
Questions about these terms, billing, or legal matters. Email legal
privacy@gemmein.com
Privacy and data protection. Email privacy
abuse@gemmein.com
Report abuse or policy violations. Report abuse

Company information

Company
Gemmein Limited
Registered in
England and Wales
Company number
17339623
Registered office
82a James Carter Road, Mildenhall, IP28 7DE
ICO registration
ZC241461

13Trademarks

ChatGPT, Codex and OpenAI are trademarks of OpenAI; Claude and Anthropic of Anthropic; Stripe of Stripe, Inc.; Cloudflare of Cloudflare, Inc.; Amazon Web Services and AWS of Amazon.com, Inc. or its affiliates; Cursor of Anysphere, Inc. Names are used only to identify services Gemmein works with. Gemmein is not affiliated with, endorsed by or sponsored by any of them.