Legal

Terms of service

Every section below opens with a plain-English summary of what it actually means, and the legal wording follows it. Each summary is written to be accurate rather than reassuring.

Last updated: 27 October 2026 Effective: 24 July 2026 England & Wales
On this page

01The service

Gemmein is the backend for web and mobile apps: sign-in, protected data, payments (Stripe built in, other providers through a relay, App Store and Play through RevenueCat), AI tools and credits, relays, and a dashboard to run your customers. Payments are processed by your provider on your own account; Gemmein never holds or moves funds.

Gemmein ("we", "us", "our") is operated by Gemmein Limited, a company registered in England and Wales (company number 17339623). Gemmein provides a hosted backend platform that gives your web and mobile applications passwordless authentication, structured data storage, and managed subscription and purchase state through an API. Payments are processed by your provider on your own account; Gemmein never holds or moves funds. When we say "the service", we mean the Gemmein API, dashboard, documentation, and client libraries.

"You" means the person or entity that creates a Gemmein account and builds applications on the service. "End-users" means the people who use your applications.

Every application on Gemmein — including apps still being built for free — includes the following security and infrastructure features at no additional cost:

  • Layered edge protection in front of every request
  • Rate limiting and brute-force protection
  • Tenant isolation enforced by the platform
  • Private by architecture
  • Audit logs for every sign-in and every write
  • Domain-locked keys
  • Server-decided identity
  • Passwordless auth (no password database to breach)
  • Encrypted in transit and at rest
  • Spike protection with graceful rate limiting
  • Hosting, scaling, and patching
  • Automated backups and deletion protection
  • Controls aligned with OWASP API Top 10, NIST CSF 2.0, and ISO 27001
  • A full pre-launch security review and continuous automated security testing

These are not add-ons. They are how the service works.

The gemmein command-line launcher is distributed under the MIT license. The engine it downloads is licensed separately under the Gemmein Engine License, available at downloads.gemmein.com/engine/LICENSE.

02Your account

You need to be 18 or older, use a real email address, and keep your credentials safe. One person, one account per business.

To create an account you must be at least 18 years old and able to enter into a binding agreement under the laws of your jurisdiction. By creating an account you confirm that you meet this requirement.

Each account is for a single person or legal entity and carries one application: we treat an account as a business surface, so its billing, customers, and records stay its own. To run more than one application, create a separate account for each — you may hold as many accounts as you operate businesses, and the same Stripe account may back more than one of them. Sharing account credentials is not permitted.

We will verify your email address during signup. You must keep your email address current so we can reach you about billing, security, and service changes.

You are responsible for all activity that occurs under your account, including the security of your secret keys. If you believe your account or keys have been compromised, rotate your keys immediately and contact us at legal@gemmein.com.

03Billing

No card at signup. Building is free. One plan covers your whole account, not each app: it sets how many apps may go live, and a pooled storage allowance, with a fixed monthly or yearly price. Reaching the storage allowance never charges you: you get a short grace period and an alert, and only you can change your plan. Prices are in US dollars and exclude tax.

Plans

Building and testing are free, with no payment method required, for up to 3 apps. Putting an app live puts your whole account on a paid plan:

PlanMonthlyYearlyYour account includes
Build$0—Up to 3 apps, development only
Launch$29$290Up to 5 apps, 50 GB pooled storage
Run a business$79$790Up to 10 apps, 200 GB pooled storage
Grow$199$1,990Up to 25 apps, 500 GB pooled storage, "Powered by Gemmein" removable
BeyondAgreed individuallyAbove 25 apps, pricing is agreed individually — contact hello@gemmein.com

Any app on the account may go live under the plan you pick. Active people are never priced or limited by your plan: we track fair use, and would reach out long before it could ever matter. A card is required the first time you go live or buy a plan ahead of it, collected and processed by Stripe.

Storage packs. On any paid plan you can add storage in packs of 50 GB for $5 a month ($50 a year on yearly billing), as many as you like. Each pack adds 50 GB to your account's pooled storage. Packs are chosen by you in advance, never added automatically, and are billed on the same monthly or yearly cycle as your plan.

Referral codes. If you sign up with an affiliate's referral code, you get $5 off your first payment, monthly or yearly. It applies once and can't be exchanged for cash.

Limits, not meters

Your plan's price is fixed. Going over your account's pooled storage never adds a charge: we alert you and give you a grace period, up to 10% over the allowance, for up to 7 days, whichever ends first. After it, existing files stay available, but new uploads are refused with a clear error until files are deleted, you add a storage pack or you move to a bigger plan.

Downloads and emails sent are fair use on every plan: there's no allowance or figure, and going over never refuses or charges anything automatically — we reach out first. Edge function runs have a pooled monthly allowance, stated in the plan comparison; past it, Edge function calls pause until the next period starts or you move to a bigger plan — never a charge. Moving plan is always your own action. We never change your plan or your price automatically.

Fair use and resource limits

Every plan, including Build, also has technical limits on things like requests, emails sent and compute, so that one app can't slow Gemmein down for everyone else. We publish the current limits for each plan on our usage and limits page. Bandwidth has no fixed limit, but it is covered by this section.

  • When we may tighten a limit. If an app's use is far beyond what a typical app on the same plan uses, or puts the stability, security or cost of the service at risk, we may apply or tighten a cap for that app, for example by slowing requests or pausing a feature such as email sending.
  • Notice. Where practicable, we'll email you at least 7 days before applying a new or tighter cap, explain what we've seen, and tell you what would bring your app back within limits.
  • Never a charge. A cap never adds a charge. It doesn't move you to another plan or reduce the storage your plan and storage packs include for the period you've paid for.
  • Your options. You can reduce your app's usage, move to a bigger plan, or contact hello@gemmein.com about a custom arrangement, including a dedicated instance on Beyond.
  • Immediate action. If usage looks like abuse, an attack (on Gemmein or launched from your app), or an emergency that threatens the service, we may throttle or block the traffic straight away, without notice. We'll tell you what we did and why as soon as we reasonably can, and lift it once the risk has passed.
  • Unlawful or harmful use is covered separately by the acceptable use rules in section 4. Breaking those rules can lead to suspension or termination under section 8, not just a cap.

Monthly and yearly billing

Your account is billed either monthly or yearly; all your plans and storage packs follow the same cycle. Yearly costs the price of 10 months: 2 months off, a saving of about 17%. Billing renews automatically at the end of each period until you cancel. For yearly billing, we email you at least 30 days before each renewal with the date, the amount and how to cancel, and we send a receipt when it renews.

Changing plan or billing cycle

  • Moving up a plan, or adding a storage pack, takes effect straight away. You pay the difference for the rest of your current period, worked out pro rata, and renew at the new price.
  • Moving down a plan takes effect straight away, with no refund or credit for the period already paid; we show you this before you confirm. You can only move down if your stored files fit within the lower plan's storage plus your storage packs; otherwise, delete files first. If you then hold more live apps than the new plan allows, your oldest stay live and your newest pause automatically, until you choose otherwise in the dashboard or move back up; a paused app's data is kept and nothing about it is lost.
  • Removing a storage pack takes effect straight away, with no refund or credit for the period already paid. You can only remove a pack if your stored files fit within the storage you'd have afterwards; otherwise, delete files first.
  • Monthly to yearly takes effect straight away: we charge the yearly price and credit the unused part of your current month.
  • Yearly to monthly can be chosen in the last 30 days of your paid year, and starts when the year ends, with no credit.

Cancelling

You can cancel any time from the dashboard or billing portal. Cancelling stops future renewals. Your plan keeps running until the end of the period you've paid for, then only Live pauses, as described below. Building stays free.

Refunds

Apart from the first-charge refund below and refunds under section 8 if we end your account without a reason, we don't refund the unused part of a monthly or yearly period, including when you cancel or move down.

Your first charge is refundable within 14 days, no questions asked

If your first paid charge isn't what you expected, monthly or yearly, email legal@gemmein.com within 14 days and we will refund it in full. This is a one-time, unconditional refund on your very first paid charge.

If you're a consumer, you also have a legal right to cancel within 14 days of your first payment. Our first-charge refund above gives you at least that: a full refund within those 14 days.

Price changes

We may change our prices, including starting to charge for something that is currently included, such as bandwidth. We'll email you at least 30 days before a new price applies to you, and it applies only from your next renewal after that notice. A yearly period you've already paid for keeps its price until it ends. If you don't want the new price, cancel or change plan before it applies.

Tax

Prices are in US dollars and exclude VAT and other taxes. Where tax applies, we add it at checkout and show it on your invoice. If you give us a valid EU VAT number, we treat the sale as business-to-business and you account for any VAT under the reverse-charge rules. Currency conversion and any fees your bank charges are your responsibility.

If your subscription ends or a payment fails, only Live pauses

Your Gemmein subscription pays for Live: your apps answering real users. If it ends or isn't paid, only Live pauses. Development keeps working, free, and nothing is deleted.

  • Payment fails. Live keeps running for 7 days while we retry your card. We email you when the payment first fails, again after 3 days, when 2 days are left, and on the last day. If the payment still hasn't gone through after 7 days, Live pauses and we email you to say so.
  • You cancel. Live keeps running until the end of the period you've paid for. We email you 7 days and 1 day before it pauses.
  • While Live is paused, your live apps answer their users with a “temporarily unavailable” message instead of working. Development, the dashboard, your code and all your data stay available: you can still view and delete your Live data, export each customer's data from the dashboard (including to answer their data requests), or ask us for a full export at support@gemmein.com.
  • Payment events while paused. We keep accepting events from your own Stripe account for a paused app and hold them for up to 30 days. They're delivered to your app when Live resumes. Events older than 30 days are discarded.
  • Your data is kept. We don't delete anything because Live is paused. It stays until you delete it or your account ends. If we ever introduce a limit for long-paused accounts, we'll give you at least 30 days' notice first.
  • To resume, pay the outstanding amount or restart your subscription from the dashboard. Live comes back as soon as the payment succeeds, and we email you to confirm.

Your own customers. Your users' contracts are with you, not with Gemmein. While Live is paused, you are responsible for your users, including telling them, any refunds or compensation they're owed, and pausing or adjusting any billing you run for them in your own Stripe account. We aren't liable for losses that come from a pause caused by an unpaid or cancelled subscription.

You will never wake up to a bill you didn't choose. You pay for the plans and storage packs you picked, and only you can change them.

04Acceptable use

Build what you want, but don't use Gemmein for anything illegal, harmful, or that puts children at risk. If you see abuse, report it.

You agree not to use the service, or allow your end-users to use applications built on the service, to:

  • Store, distribute, or facilitate access to illegal content under the laws of England and Wales or the jurisdiction in which you or your end-users operate
  • Store, distribute, or generate child sexual abuse material (CSAM) in any form. We are obligated to report any such material discovered on the service to the relevant authorities, and will do so without notice to you
  • Distribute malware, conduct phishing, or attempt to gain unauthorised access to any system
  • Reverse-engineer, decompile, or attempt to extract the source code of the service
  • Circumvent or attempt to circumvent rate limits, usage ceilings, or other protective measures
  • Deliberately consume resources far beyond your plan in a way designed to degrade the service for others (for example, using Gemmein as general file hosting, a bulk-email relay or a load-testing target)

Your responsibility for end-users

By using the service, you warrant that your applications are not directed at children. End-users of your applications must meet the applicable minimum age: 13 years in the United States and United Kingdom, 16 years in the European Union, or the minimum age required by the laws of their jurisdiction, whichever is higher.

You are responsible for ensuring that your applications comply with all laws applicable to you and your end-users.

Content returned to the service by a pipeline you configure is your responsibility in the same way as content you upload.

Reporting abuse

If you become aware of content or usage that violates these terms, report it to abuse@gemmein.com. We review every report.

05Your data

Your data belongs to you. We process it on your behalf, we don't sell it, and you can export or delete it at any time.

Ownership

You retain all rights to the data you and your end-users store on the service. Gemmein claims no ownership of your data.

Data processing

When you store your end-users' personal data on the service, you are the data controller and Gemmein is the data processor. Relays run on the service; processing at a URL a relay calls, or at a pipeline you configure, happens outside it. AI tool calls go to the provider you name, on your key and under your agreement with that provider. It is yours, under your own agreements with your users; Gemmein does not process, review or take responsibility for what happens at that endpoint or at any third party it calls. The same applies to an AI assistant or other client you connect to Gemmein: data you let it read is processed under your agreement with its provider, not ours. Our processing of that data is governed by our Data Processing Agreement (DPA), which is incorporated into these terms by reference. You can read it at gemmein.com/dpa; a countersigned copy is available on request at legal@gemmein.com.

Data export

You may request an export of your stored data at any time by contacting us: your records, your files, and the details of your end-users as they relate to that data. We will provide the export in a standard machine-readable format within a reasonable timeframe. Exports cover the data you and your end-users stored on the service; they do not include operational information Gemmein generates in running it.

Deletion and retention

When you delete a record through the API or dashboard, it is soft-deleted and recoverable for 30 days. After 30 days, it is permanently purged.

When you delete your account, we begin permanent deletion of all associated data. The process completes within 30 days, with encrypted backups aging out over an additional 7 days (37 days total from the deletion request).

Data location

All data is stored in the United States, with Amazon Web Services, Inc.; websites you publish are served from the global network of Cloudflare, Inc. Transfers of personal data from the UK and EU are covered by the UK-US Data Bridge and the EU-US Data Privacy Framework respectively. For further detail, see our Privacy Policy.

06Early access

Gemmein is in early access. Features may change, and support response times may vary. Removing a feature you pay for comes with 30 days' notice. Our data protection commitments apply in full, now.

The service is currently in early access. During this period:

  • Features may be added or changed at any time. If we remove a feature that's part of a plan you're paying for, we'll give you at least 30 days' notice, and if that leaves your plan materially worse, you can cancel and get a pro-rata refund of any prepaid time you haven't used
  • We do not guarantee uptime targets or response times, and there is no SLA
  • Support is by email at hello@gemmein.com and is best-effort
  • The current state of each part of the service, and every incident, is published at status.gemmein.com, with a feed you can subscribe to
  • Your data is yours to take: you can request a full export at any time (section 5), and deletion runs on the schedule in the privacy policy

Service levels will be published from operating evidence, not ahead of it. The status page is where that record accumulates.

Early access affects what we promise about uptime and features. It does not change what we promise about how we protect data.

The security commitments listed in section 1 — including encryption, tenant isolation, audit logging, rate limiting, and every other item on that list — are fully in effect during early access. They are production commitments, not aspirational targets. We do not disclaim or weaken them during this period.

07Liability

Our liability is capped at what you've paid us in the last 12 months. If you're building for free, that's zero. UK law requires us to say certain things can never be excluded, and we say them clearly here. If someone makes a claim against us because of your app or your content, you cover it, unless we caused it.

Liability cap

To the maximum extent permitted by law, the total aggregate liability of Gemmein to you for all claims arising out of or relating to these terms or the service shall not exceed the total fees paid by you to Gemmein in the 12 months immediately preceding the event giving rise to the claim. For users who are building for free and have paid no fees, this cap is zero.

What we do not exclude

Nothing in these terms excludes or limits our liability for:

  • Death or personal injury caused by our negligence
  • Fraud or fraudulent misrepresentation
  • Any other liability that cannot be excluded or limited under the laws of England and Wales

What we are not liable for

Subject to the carve-outs above, we are not liable for:

  • Loss of data beyond what is recoverable from our automated backups
  • Actions taken by third parties, including your end-users, payment processors, or infrastructure providers
  • Indirect, incidental, special, consequential, or punitive damages, including lost profits or revenue
  • Any failure or delay caused by events beyond our reasonable control (force majeure), including but not limited to natural disasters, acts of government, internet outages, and failures of third-party infrastructure

Your responsibility for your apps

You will indemnify Gemmein against claims by third parties (including your end-users and regulators) arising from your apps, your content, your instructions to us, or your breach of section 4 or of data protection law, and the reasonable costs of dealing with them. We'll tell you promptly about any such claim and let you take part in handling it. This doesn't apply to the extent a claim is caused by our own breach of these terms or the DPA.

08Termination

You can leave any time. If you don't pay, only Live pauses. We can end your account for a serious breach, sometimes immediately. We can also end it without giving a reason, but then we give you 30 days' notice and refund any prepaid time you haven't used. Either way, you get time to export your data.

By you

You may delete your account at any time by emailing support@gemmein.com from the address you sign in with. Deletion is effective immediately; any remaining time in your current monthly or yearly period is not refunded, except under the first-charge refund in section 3.

By us, for a reason

We may suspend or end your account:

  • immediately, if you or your app break the acceptable use rules in section 4, are used for illegal activity or an attack, put the service or other customers at serious risk, or if the law, a court, a regulator or sanctions require us to; or
  • after 14 days' written notice, if you breach any other material term and haven't fixed it within those 14 days.

In these cases we don't refund fees already paid. Where we act immediately, we'll tell you what we did and why as soon as we lawfully can.

Non-payment is handled differently: only Live pauses, after the 7-day grace and reminders in section 3. That's a pause, not an ending of your account.

By us, without a reason

We may also end your account for any reason, or stop offering the service altogether. If we do, we'll give you at least 30 days' notice by email (90 days if we're closing the whole service), and we'll refund the unused part of any period you've prepaid, worked out pro rata. Your apps keep working during the notice period.

After your account ends

If we end your account, or it ends for any reason other than you deleting it, you can export your data during any notice period and for 30 days after the account ends. After that, we delete it: deletion completes within 30 days, and encrypted backups age out within a further 7 days. If you delete your account yourself, deletion starts straight away, as described in section 5. We may withhold or keep data only where the data itself is unlawful, or where the law requires us to keep or report it. Your users are your customers: when your account ends, telling them, and moving or refunding them, is your responsibility.

09Governing law

These terms are governed by the laws of England and Wales, and any disputes go to the courts of England and Wales. If you're a consumer, you keep the protections of your own country's law and can use your local courts.

These terms, and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims), shall be governed by and construed in accordance with the laws of England and Wales.

The courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these terms.

If you're a consumer, you keep any mandatory protections of the law of the country you live in, and you can bring a claim in your local courts.

10Changes to these terms

If a change affects what you pay, your data, or your rights, we'll email you at least 30 days before it takes effect. Changes that don't take anything away from you take effect when posted. If we're unsure which kind a change is, we treat it as the first kind.

We may update these terms from time to time. If a change affects what you pay, what we do with your data, or any right these terms give you, we will email you at the address associated with your account at least 30 days before the change takes effect.

Changes that do not take anything away from you — clarifications, plain-language rewording, corrections, or terms covering new features you are not yet using — take effect when posted. In every case we update the "last updated" date at the top of this page. Where a change could reasonably be read either way, we give the 30 days' notice.

Your continued use of the service after the effective date of the updated terms constitutes your acceptance of the changes. If you do not agree to the updated terms, you may delete your account before the effective date.

11General

These terms, the DPA, the Privacy Policy and any plan you accept are the whole agreement. If one part can't be enforced, the rest still applies.

These terms, the DPA, our Privacy Policy and any plan or order you accept are the whole agreement between us about the service. We may transfer these terms to a company that takes over the service, and we'll tell you if we do; you may transfer them only with our written agreement. If any part is found unenforceable, the rest still applies. If we don't enforce a right straight away, we can still enforce it later. We'll send notices to your account email; you can send notices to legal@gemmein.com. Nobody else has rights under these terms (Contracts (Rights of Third Parties) Act 1999).

12Contact

Questions about these terms? Email us.

legal@gemmein.com
Questions about these terms, billing, or legal matters. Email legal
privacy@gemmein.com
Privacy and data protection. Email privacy
abuse@gemmein.com
Report abuse or policy violations. Report abuse

Company information

Company
Gemmein Limited
Registered in
England and Wales
Company number
17339623
Registered office
82a James Carter Road, Mildenhall, IP28 7DE
ICO registration
ZC241461

13Trademarks

ChatGPT, Codex and OpenAI are trademarks of OpenAI; Claude and Anthropic of Anthropic; Stripe of Stripe, Inc.; Cloudflare of Cloudflare, Inc.; Amazon Web Services and AWS of Amazon.com, Inc. or its affiliates; Cursor of Anysphere, Inc. Names are used only to identify services Gemmein works with. Gemmein is not affiliated with, endorsed by or sponsored by any of them.