Privacy Policy – ZOBA

Last updated: 2025-12-01 · v5.5

Your privacy matters

At ZOBA, your trust is our most critical asset. This Privacy Policy explains how we collect, use, protect, and share your information when you use the ZOBA mobile application (the “App”). We aim to be clear about what is stored, why it is used, and how you can control your information.

Principles: Security · Transparency · Control

1) Introduction & Summary

What we collect: information you provide (e.g., email and profile details), data about how you use the App, and the content you submit in conversations (text, and optionally media where enabled).
How we use it: to provide, operate, secure, and improve the Service, and to comply with law.
What we don’t do: we do not sell your personal information. We do not use your identifiable personal conversations to train our core AI models.
Who we share it with: trusted service providers under contract, or where required by law.

By using ZOBA, you agree to the collection and use of information as described in this policy.

2) Information we collect

We collect several types of information to provide and improve the Service.

2.1 Information you provide

Account information: email address and profile details you choose to provide (e.g., nickname, phone number, gender selection, avatar/photo if configured).
User content: the text you submit in chat, and (if enabled in your plan/features) content you upload or record in the App (e.g., images or audio).

2.2 Information collected automatically

Usage data: how you interact with the App (e.g., features used, time spent, session frequency), and aggregated performance metrics.
Device and log data: device type, operating system, app version, crash logs, approximate location derived from IP (not precise GPS), and other diagnostic identifiers used to secure and troubleshoot.

2.3 Information from third parties

Payments: payment processing is handled by payment providers (e.g., Stripe). ZOBA does not store your full card details. We may store transaction references and your access status (e.g., premium/trial).
Age verification (if required): if you are asked to verify age, a third-party service may be used. We aim to receive only an “age verified” status and timestamp rather than storing any government ID image.

3) How we use your information

To create and manage your account and authenticate access.
To provide the chat experience and deliver requested features (text, and voice/media where available).
To validate subscription/trial status and enable premium features.
To ensure safety and security: detect fraud, prevent abuse, enforce Terms of Service, and respond to safety incidents.
To improve the Service using aggregated, anonymized analytics (e.g., performance, reliability, and product usage patterns).
To comply with legal obligations and respond to lawful requests.

4) Critical: AI model training policy

This is our most important privacy commitment:

We do not use your identifiable personal conversations or your personal data to train our core AI models.

To improve the Service, we may analyze aggregated and anonymized patterns derived from user interactions. This process is designed to avoid tying insights back to any individual.

4.1 Sensitive information

“Sensitive Information” may include mental or physical health topics, sexual orientation/sex life, racial or ethnic origin, political opinions, religious/philosophical beliefs, biometric data, precise geolocation, financial account details, or government-issued identifiers. We apply heightened protections to Sensitive Information.

4.2 Opt-out (aggregated analytics)

If you would like to opt out of contributing to aggregated analytics entirely, contact us at privacy@zoba.app. This may not affect essential data needed to run and secure the Service.

5) Data sharing & disclosure

We do not sell your personal information. We share information only in limited circumstances.

5.1 Service providers (processors/subprocessors)

Infrastructure & storage: providers that host, store, and deliver core app functionality (e.g., authentication, databases, file storage).
AI providers: providers that process your inputs to generate responses. We contractually require service providers to protect your data and use it only to deliver the service to us.
Payments: payment processors handle card data. We receive confirmation of purchase status and limited transaction references.

5.2 Legal disclosures

We may disclose information if we believe in good faith it is necessary to comply with a legal obligation, protect rights/safety, prevent fraud, or investigate violations of our Terms. Where legally permitted, we may notify users about legal requests and may contest overly broad or invalid requests.

6) Data security & retention

6.1 Security

We use technical and organizational measures designed to protect your information, which may include encryption in transit, encryption at rest (where supported), access controls, and routine security reviews. No system is 100% secure, but we work to reduce risk and respond quickly to issues.

6.2 Retention

We retain information only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Account information: retained until you delete your account, subject to legal requirements.
Conversation history: retained to provide continuity (if you use history). You may delete conversations where this feature is available.
Safety/security logs: some logs may be retained longer (often in minimized or de-identified form) for security and compliance.

7) Your privacy rights

Depending on where you live, you may have rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Correction: request corrections to inaccurate or incomplete data.
Deletion: request deletion of your personal data (subject to legal exceptions).
Portability: request a machine-readable export where applicable.
Objection/Restriction: request limits on certain processing where applicable.

To exercise your rights, contact privacy@zoba.app.

8) Legal bases (GDPR) — if you are in the EEA/UK

If you are located in the European Economic Area or the United Kingdom, we process personal data under one or more of these bases:

Contract: to provide the Service (e.g., account access, core functionality).
Consent: for optional features where we ask (e.g., certain analytics preferences).
Legitimate interests: to secure, maintain, and improve the Service (balanced against your rights).
Legal obligation: where required by law (e.g., compliance and safety requirements).

9) Children’s privacy

ZOBA is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18. If we learn we have collected such data, we will take steps to delete it. If you are a parent/guardian and believe a child has provided personal information, contact safety@zoba.app.

10) International data transfers

Your information may be processed in countries other than your own depending on where our service providers operate. Where required, we use appropriate safeguards designed to protect your data (such as contractual protections).

11) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy in the App and update the “Last updated” date. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy, where permitted by law.

12) Contact

For privacy questions: privacy@zoba.app
For safety-related concerns: safety@zoba.app

ZOBA · Not for everyone · Privacy Policy

Privacy policy