Privacy Policy

1. Introduction

Thankz LLC ("Company," "we," "us," or "our") operates Zenvoy, a personal memory application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Company Information:
Thankz LLC
3916 N Potsdam Avenue, #5147
Sioux Falls, SD 57104
United States

2. Our Privacy-First Architecture

Zenvoy is fundamentally different from cloud-based services. Here is what makes our approach unique:

• 100% On-Device Processing: All AI processing, including speech transcription, fact extraction, and search, happens locally on your Mac or iOS device using Apple Silicon.
• No Data Transmission: Your personal data (memories, conversations, documents, screen captures) never leaves your device and is never transmitted to our servers.
• Zero-Knowledge Architecture: We have no technical ability to access your personal data. We do not operate servers that store or process user content.
• User-Controlled Encryption: Your data is encrypted with keys that only you control. We cannot decrypt your data even if we wanted to.

3. Information We Do NOT Collect

To be clear about our privacy-first approach, we explicitly do NOT collect:

• Your conversations or transcriptions
• Your screen captures or document contents
• Your extracted facts or memories
• Your search queries within the app
• Audio recordings (audio is transcribed locally and immediately discarded)
• Any content processed by the on-device AI

4. Information We DO Collect

While your personal data stays on your device, we do collect limited information necessary to operate the Service:

4.1 Account Information

When you create an account, we collect:

• Email address
• Name
• Password (stored in hashed form)
• Account creation date

4.2 Subscription and Billing Information

If you subscribe to a paid plan, we collect:

• Subscription tier and status
• Payment transaction IDs (actual payment processing is handled by third-party providers)
• Billing dates

4.3 Device Information

For license management, we may collect:

• Device identifiers (for managing device limits on your subscription)
• Operating system version
• App version

4.4 Website Analytics

On our website (not within the app), we use:

The following Google services are used exclusively on our presentational website (zenvoy.com), not within the Zenvoy desktop or mobile applications:

• Google Analytics: To understand website traffic and usage patterns. This includes IP addresses (anonymized), browser type, pages visited, and referral sources.
• Google reCAPTCHA: To protect our forms from spam and abuse. reCAPTCHA may collect hardware and software information.

4.5 Authentication Services

The Zenvoy application uses the following authentication services:

• Google Sign-In (Google OAuth): To provide a convenient authentication option for creating and signing into your Zenvoy account. When you use Google Sign-In, we receive your name, email address, and profile picture from Google. We do not access any other Google account data.

5. Error Tracking and Diagnostics

We use Sentry.io for error tracking to improve the stability and performance of our Service. Important safeguards:

• Data Scrubbing: All error reports are automatically scrubbed to remove any personal data before transmission.
• No User Content: Error reports never contain your personal memories, conversations, or documents.
• Technical Data Only: We collect only technical information such as error messages, stack traces, device type, and app version.

You can opt out of error reporting in the app settings.

6. How We Use Your Information

We use the limited information we collect for the following purposes:

• To create and manage your account
• To process subscriptions and payments
• To enforce device limits on your subscription
• To send important service communications (e.g., security alerts, billing issues)
• To improve our Service based on aggregated, anonymized usage data
• To diagnose and fix technical issues
• To comply with legal obligations

7. Data Storage and Security

7.1 Your Personal Data (On-Device)

Your personal data is stored locally on your device with the following protections:

• AES-256 encryption via SQLCipher

7.2 Account Data (Our Servers)

Account and subscription data is stored on servers hosted by Amazon Web Services (AWS) in the United States with the following protections:

• Encryption at rest and in transit
• Access controls and monitoring
• Regular security audits

8. Data Sharing and Disclosure

We do not sell your personal information. We may share limited information in the following circumstances:

• Service Providers: We use third-party services (AWS, Stripe, Google Sign-In, Google Analytics, Google reCAPTCHA, Sentry) that process data on our behalf under strict contractual obligations. Google Analytics and reCAPTCHA are used only on our presentational website; Google Sign-In is used for app authentication.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, account information may be transferred to the acquiring entity.
• With Your Consent: We may share information with your explicit consent.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

• Essential Cookies: Required for website functionality and authentication.
• Analytics Cookies: Google Analytics cookies to understand website usage (can be disabled).
• Security Cookies: Google reCAPTCHA cookies to protect against spam and abuse.

The Zenvoy desktop and mobile applications do not use tracking cookies.

10. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the account information we hold about you.
• Correction: Update or correct your account information.
• Deletion: Request deletion of your account and associated data.
• Portability: Receive your account data in a portable format.
• Opt-Out: Opt out of marketing communications and analytics.

Self-Service Data Controls

You can exercise your data rights directly from your account settings at any time, without needing to contact us:

• Export your data: Download all server-side data we hold about you (profile, subscription, sessions, devices) as a JSON file from your account settings.
• Delete your data: Permanently delete your account and all associated server-side data from your account settings. This action cancels any active subscription and terminates your account immediately.

Important: On-Device Data

Zenvoy processes and stores your personal content (screen captures, audio transcriptions, extracted facts, and other locally processed content) exclusively on your device. We do not have access to this data, cannot retrieve it, and cannot delete it on your behalf.

To view, export, or delete on-device data, use the Zenvoy app directly on your Mac or iOS device. Deleting your Zenvoy account through our website only removes server-side data (account profile, subscription, sessions, and device registrations).

For assistance with your data rights, contact us at privacy@zenvoy.com.

11. International Data Transfers

Thankz LLC is based in the United States. If you access our Service from outside the United States, your account information may be transferred to and processed in the United States.

Your personal data (memories, conversations, etc.) is never transferred internationally because it never leaves your device.

For users in the European Economic Area (EEA) or United Kingdom, we rely on Standard Contractual Clauses and other lawful transfer mechanisms for any account data transferred outside your region.

12. GDPR Compliance (EEA Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing account data is contract performance (to provide the Service) and legitimate interests (to improve the Service and prevent fraud).

13. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

14. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

15. Data Retention

On-Device Data: Your personal content (memories, screen captures, audio transcriptions, extracted facts) is stored exclusively on your device. We have no access to this data and cannot retrieve or delete it. You are solely responsible for managing on-device data through the Zenvoy app.

Account Data: We retain account information (profile, subscription, session, and device data) for as long as your account is active. When you delete your account, all server-side data is permanently deleted immediately and your subscription is canceled. There is no grace period for account deletion.

Audit Records: For compliance purposes, anonymized records of administrative actions may be retained after account deletion.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically.