Hi there, thank you for trusting Zepra with your most intimate emotional moments, unfiltered thoughts, and tiny, meaningful memories that make you you. This privacy policy isn't a bunch of unreadable legal jargon copied from a generic template -- it's a clear, binding promise of how we'll handle the data you share with us, so you can feel safe exploring your feelings in your personal Zepra pocket universe.
1. What Data We Collect (And What We Don't)
We only collect data that is absolutely necessary to give you the smooth, personalized Zepra experience you signed up for:
- Content you actively submit: This includes all your emotional trigger entries, emotion orb ratings, custom tags, photo attachments, and notes you add to your timeline. We never access your camera or photo library unless you explicitly choose to upload a photo to an entry.
- Derived insight data: If you have Insights enabled, we generate mood trend analysis, tag breakdowns, and pattern reports exclusively for your personal view. This data is only ever linked to your account for your access, and never associated with your identity for any external use.
- Anonymous usage metrics: We collect fully de-identified, aggregate data about how users interact with Zepra features (e.g. how many users access Insights weekly, how often entries are favorited) to fix bugs and improve product design. This data cannot be traced back to you as an individual.
We never collect data from your device that you don't explicitly approve: we don't access your location, contact list, message history, or data from other apps on your device, under any circumstances.
2. How We Use Your Data
Your data is only ever used for the following purposes, no exceptions:
- To operate core Zepra features: saving your entries, generating your timeline, building your custom Insights, storing your favorited entries and photos.
- To fix technical issues and improve product experience, using only the de-identified aggregate usage metrics mentioned above. We never use your personal emotional entries to train AI models or refine product features without your explicit written consent.
- To communicate with you only when you opt in: if you choose to receive updates about new Zepra features or account security alerts, we will send these to your registered email. You can unsubscribe from non-security communications at any time with one click.
3. Who Has Access To Your Data
Access to your data is strictly limited to the following parties:
- You: Only you, via your authenticated account login, can access your full entry history, photos, and Insights. You can add a secondary passcode or biometric lock to your Zepra app for extra security if you choose.
- Authorized Zepra technical staff: Our team will only ever access your account data if you explicitly submit a support request asking us to troubleshoot a specific issue (e.g. missing entries, photo upload failures). We will only access the minimum data required to resolve your issue, and will delete all access permissions as soon as the request is resolved. No Zepra employee has standing access to user personal content.
- No third parties: We do not share any identifiable user data with advertisers, marketing partners, data brokers, or any other external entities. If we ever partner with researchers to conduct broad, anonymized emotional wellbeing studies, we will notify all users 30 days in advance, and you will be opted out by default unless you explicitly choose to participate.
4. Your Full Control Over Your Data
Your Zepra data is yours, and you have complete control over it at all times:
- You can edit, delete, or archive any individual entry, tag, or photo at any time. When you delete content, it is permanently erased from our active servers within 24 hours, and removed from all backup systems within 30 days.
- You can export your full Zepra dataset (all entries, photos, Insights reports, and tags) at any time in PDF, JSON, or CSV format, for free, no limits on how often you can export.
- You can turn off the Insights feature at any time. If you turn off Insights, all existing derived trend data associated with your account will be permanently deleted immediately, and we will stop generating new analysis for your account.
- You can delete your entire Zepra account at any time, no questions asked. Once you confirm account deletion, all data associated with your account will be permanently erased from all our systems within 15 days, with no possibility of recovery.
5. Data Security Measures
We take every possible step to keep your data safe from unauthorized access:
- All personal content (entries, photos, Insights) is end-to-end encrypted in transit and at rest. Only your account login credentials can decrypt your content, even our team cannot read your private entries.
- Our server infrastructure uses industry-leading security protections, including regular third-party penetration testing, 24/7 threat monitoring, and automatic security patches.
- We never store your account password in readable format: all passwords are hashed and salted using industry standard encryption protocols.
- All Zepra staff complete annual privacy and security training, and are bound by strict confidentiality agreements that carry heavy penalties for violation.
6. Policy Updates
We may update this privacy policy occasionally as we add new features to Zepra. If we make material changes to how we handle your data, we will notify all users via in-app notification and email 30 days before the updated policy takes effect. If you do not agree with the updated terms, you can choose to delete your account before the new policy takes effect, and all your data will be permanently erased as outlined above. Your continued use of Zepra after the 30-day notice period confirms your acceptance of the updated policy.