The short version.
Your notes belong to you. With end-to-end encryption on, the notes we store are ciphertext we cannot read. AI features are the exception you control: when you sort, transcribe, translate or ask about a note, that note's text is sent to Google's Gemini in readable form so the feature can work. We don't sell personal data or show behavioural ads. You can export your notes and delete your account at any time.
1What we collect
Account information
When you sign up we collect your email address, display name, and authentication credentials. Sign-in is handled by Google Firebase Authentication. If you sign in with a Google account, we receive your basic profile (name, email, avatar) from Google. If you sign in with Apple, we receive the name and email address Apple shares with us, which may be a private relay address.
Your notes and content
The notes, tasks, voice memos, scanned documents, images, and attachments you create are stored in Google Cloud Firestore and Firebase Storage so they can sync across your devices. If you turn on end-to-end encryption, your notes are encrypted on your device before upload (see section 4).
Payment information
Subscriptions are processed by Stripe. We never see or store your full card number — Stripe sends us only your subscription status, plan, and a payment reference.
Usage and device data
We collect basic technical data needed to run the service reliably: app version, device/browser type, language setting, crash reports, and coarse usage events (for example, "a sort was run"), never the content being sorted. We do not use third-party advertising trackers.
Save to zakar browser extension
The Save to zakar extension handles the current page title and URL, text you select or the page's main readable text, and the target URL of a link or media item only when you click its toolbar button, keyboard shortcut, or right-click command. It does not read browser history, cookies, passwords, form entries, or pages you do not ask it to clip.
The extension uses activeTab for temporary access to the page you chose, scripting to read that page's selected or main text, and contextMenus to provide the right-click Save command. It requests no persistent website access and contains no remotely hosted code.
The clip is passed to use.myzakar.app in the URL fragment, which browsers do not send in HTTP requests. The extension uses no extension storage, does not collect pages in the background, and does not share clip data with advertisers, data brokers, or unrelated third parties. A pending clip may remain temporarily in that zakar tab's session storage while you sign in; closing the browser session removes it.
Our use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. That information is used only to provide the clipping feature you request.
2Why we process data
Where data-protection law requires a legal basis, we rely on: contract to create your account, sync and display notes, provide exports and deliver features you request; consent or your requested action for microphone, camera, notifications and optional AI processing; legitimate interests to secure the Service, prevent abuse, diagnose failures and improve reliability; and legal obligations for billing, tax, fraud prevention and lawful requests. You may withdraw consent through device or app settings without affecting earlier lawful processing.
3How AI processing works
zakar's assistant ("zaki") is powered by Google's Gemini models. AI processing happens only when you trigger it — there is no background scanning of your notebook. On iPhone, zakar asks for your permission before it first uses AI, and you can change the answer in Settings. Specifically:
- Magic Sort — when you tap Sort, the text of that note is sent to Gemini to be titled, formatted, categorized and tagged.
- Ask your notes — when you ask a question, we compute embeddings of your unlocked notes (using Google's embedding models) to find relevant passages, and send those passages plus your question to Gemini to generate a grounded answer.
- Voice capture — when you record a voice note, the audio is sent to Gemini for transcription in your chosen language, then handled like any other note text. Audio is used for transcription, not for building voice profiles.
- Translation — when you translate a note, its text is sent to Gemini and the translation is shown to you. If you share a note publicly, visitors to its page can translate it the same way.
account: •••••• — never the real value.Scanning stays on your device. Text recognition for scanned documents and photos (OCR) runs entirely on your device. Your scans are not sent to a server to be read.
We do not train our own models on your notes. Content sent to Gemini is handled under the Google Gemini API terms and usage policies that apply to the service tier and model active at the time. Those terms may include limited retention or logging for security, abuse prevention, and service operation. We review provider settings and terms before changing production AI processing.
4End-to-end encryption & locked notes
When you turn on end-to-end encryption, you choose a passphrase (minimum 8 characters) and receive a one-time recovery code. Your notes are then encrypted on your device with keys derived from that passphrase before they are uploaded. What our servers store is ciphertext.
- We cannot read, recover, or reset your encrypted notes. Ever.
- Encryption covers what we store, not what you send to AI. When you sort, transcribe, translate or ask about a note, that note's text (or recording) is sent to Google's Gemini in readable form so the feature can work, even with encryption on.
- Notes you lock with a password or biometrics are never embedded or searched when you ask zaki, and bulk sorting skips them. A locked note reaches Gemini only if you unlock it and run an AI feature on it yourself.
- If you lose both your passphrase and your recovery code, your encrypted notes are permanently unrecoverable. This is a feature of the design, not a support limitation.
Biometric unlock (Face ID, fingerprint) happens entirely on your device through your operating system; zakar never receives your biometric data.
6Who we share data with
We share data only with the service providers required to run zakar, under contracts limiting their use of it:
- Google Firebase / Google Cloud — authentication, database, file storage, hosting.
- Google Gemini API — AI sorting, answers, and voice transcription you trigger.
- Stripe — subscription billing.
- Resend — transactional email (welcome, verification, password reset, receipts).
- Vercel — hosting for this website.
We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose data if required by law, and we will resist over-broad requests where we can.
7International processing
Our providers may process data in countries other than yours. Where required, we use recognized safeguards such as adequacy decisions or contractual protections, and we assess the transfer and provider. You may contact us for more information about safeguards relevant to your account.
9Retention, export & deletion
Export: at any time you can export your entire notebook as a zip of Markdown files (with a manifest for re-import) and individual notes as real-text PDFs. Your notes are never held hostage.
Deletion: deleting a note removes it after the confirmation step; permanently deleted notes cannot be restored. Deleting your account removes your notes, embeddings, and profile from our production systems, with residual copies purged from encrypted backups within 30 days. Stripe retains billing records as required by financial regulations.
If you cancel a subscription, your notes remain intact and exportable — losing access to Pro features never means losing your data.
10Children
zakar is not directed at children and is intended for users aged 16 and above. We do not knowingly collect personal data from children; if you believe a child has created an account, contact us and we will delete it.
11Your rights
Depending on where you live, you may have rights to know or access, correct, export, delete, restrict or object to processing, withdraw consent, and appeal or complain to your local data-protection authority. Most controls are available in-app. For other requests, email us; we verify requests, respond within the period required by applicable law, and do not discriminate for exercising privacy rights.
12Security
All traffic is encrypted in transit (TLS). Data at rest is encrypted by Google Cloud, and locked notes carry the additional end-to-end layer described above. Access to production systems is restricted and logged. No system is perfectly secure — if we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
13Changes & contact
If we make material changes to this policy, we'll notify you in-app or by email before they take effect, and update the date at the top. This policy is governed by the laws of the jurisdiction in which Delightful Apps is established, without prejudice to any mandatory data-protection rights of your country of residence.
Questions, requests, or concerns: hello@myzakar.app.