Privacy Policy

Information ZagaDo receives

Account and sign-in. We process your ZagaDo account ID, chosen sign-in method and a verified identity from Apple, Google or Telegram. Depending on the provider, this can include an email address, including an Apple relay address, name or profile-image URL. We also store the name, avatar and preferences you enter. ZagaDo does not receive your Apple, Google or Telegram password.

Your materials. Tasks, titles and notes, schedules and recurrences, lists, progress and completion history, counters, saved synchronized drafts and preferences are sent to and stored on our server. Photos and profile images you select are uploaded to private storage, which also holds artwork generated for you. These records are associated with your account.

Device and service operation. Sign-in, security and synchronization use an installation identifier, session information and technical request records. The server processes request timing and outcomes, correlation identifiers and error types. Network and hosting services receive IP addresses and ordinary request information. We use server activity records, such as task creation and completion, to understand service usage and quality. This does not mean that your note content is needed for an advertising profile.

Support. An in-app ticket includes its selected category, conversation, replies and status. Authorized support staff can access tickets and keep internal case notes. Email correspondence is handled separately by the sender’s mail service and our support mailbox. Do not include passwords, sign-in codes or banking information in a support request.

How we use information

We use information to operate your account, save and synchronize your materials, carry out requested actions, recover from lost connectivity, protect the service and handle support. Technical measurements and usage statistics help identify problems and improve the service. Staff access is limited by their responsibilities.

We do not sell your data or use personal task content for advertising. External services you choose to use process information they receive under their own policies, particularly video players, as explained below.

Offline use and device permissions

To work without a connection, the app keeps working copies of personal data, queued changes, drafts and media on your device. Supported local changes synchronize when service access returns. Unsent support drafts are not submitted automatically. Signing out or uninstalling the app is different from deleting your server account.

Reminders use local device notifications. Camera and photo access is used when you choose a relevant action. You can manage permissions in system settings. The current ordinary app flows do not request access to location, contacts, microphone or HealthKit.

Artwork generation with OpenAI

After you enable the data-transfer permission presented in the app for image generation, ZagaDo sends only bounded title and note text, a selected style and your wishes for that particular illustration through its server to OpenAI. The limits are 80 characters for the title, 140 for the note and 280 for additional visual guidance. Do not put information into these fields that you do not want this recipient to receive.

After you enable this permission, an image may also be generated automatically when you save a task, draft or counter without one. A pending generation may resume when connectivity returns.

The generation request does not add your account ID, dates, task history, sign-in credentials, storage access links or photographs. The resulting image is saved in ZagaDo’s private media storage. Although the submitted text is bounded, its content still depends on what you write.

OpenAI applies its own API processing, security and retention rules. Its published policy says API data is not used for model training by default, but abuse-monitoring records may be retained. We do not promise that the recipient retains no data. Current details: https://developers.openai.com/api/docs/guides/your-data .

Other recipients and external video

Infrastructure providers operate our API, database, queues and private media storage. The app uses Railway hosting and S3-compatible private object storage. Sign-in providers receive information necessary for the sign-in method you choose. Data can be processed outside your country; we do not promise that the entire processing chain stays in one country.

If you add or open a YouTube or Vimeo video link, preview and player requests contact those services directly from your device. They can receive your IP address, browser or device information and viewing-related requests; their cookie technologies and data policies also apply. The players use privacy-enhanced settings, which do not establish the absence of third-party collection. You can choose not to load external videos. Policies: https://policies.google.com/privacy and https://vimeo.com/legal/privacy .

Where purchases are available, Apple or Google handles payment. ZagaDo may receive the information needed to validate a purchase and access, such as product, transaction identifier and validity or cancellation dates. The app does not receive your payment-card number or banking details from the store. Actual offers are shown before purchase.

Retention and protection

Account data is transmitted using HTTPS, authorization checks and access controls. Sign-in credentials are kept in platform secure storage on the device. This does not mean all content is end-to-end encrypted: our server processes data to provide the service.

Personal content and in-app support conversations remain while the account exists, unless you remove the relevant material earlier. The service also keeps technical operation records and deletion markers to synchronize data and prevent changes from being applied twice. They protect synchronization integrity and do not determine the lifetime of your tasks. Contact support for information about retention of specific data.

Replaced or unattached images may remain until account deletion. Deletion removes private media references, and a separate process cleans unreferenced files after a technical cleanup grace period. This is not a promise that every file is physically erased immediately. Recipients apply their own retention rules; contact support about specific data.

Account deletion and your rights

In the app, open Profile, select Delete account, enter the confirmation word and choose Delete permanently. Service access is required. For an account linked to Apple, the app may request renewed sign-in confirmation to revoke Apple authorization. Without the app, follow https://zagado.app/account-deletion/ .

Deletion removes the account, linked sign-in identities and sessions, personal tasks, lists, counters, saved drafts, media metadata and support tickets. After server confirmation, the app clears local account data, queued changes and reminders. A connection failure does not mean deletion has completed. Previously disconnected devices do not receive new information until they connect again.

If your account retains records from previously available experimental or shared features, attributable private records, including chat and memory, are included in deletion. Independent copies previously received by other people can remain in their accounts without a link to your account; shared spaces with other participants can remain for them. These features are not ordinary entry points in the current app. An anonymous deletion-event record remains: a fresh random number and timestamp without a user, device, IP address or content identifier.

Depending on applicable law, you may have rights to access, correct, erase or port data, restrict or object to processing, withdraw consent or contact a competent authority. Send requests, including requests for a copy of your data, to info@zagado.app. We may ask for reasonable proof that the account belongs to you. Requests are handled under applicable requirements; this does not imply an automatic in-app export feature. Account deletion does not itself cancel a store subscription.

The zagado.app website

The website has no submission forms, embedded video players or analytics and advertising trackers added by us. OpenAI Sites and Cloudflare infrastructure delivers its pages and files and processes ordinary network information, including IP addresses and request parameters, for delivery and security. Selecting an email link opens your mail application; it does not send a message automatically.

The website language selection lasts for the open page and is not saved in your browser. No website registration is required.

Updates and contact

We update this policy when data practices change and display the revision date. A text update alone does not authorize a material new data transfer that requires consent. Send questions, reports about a child’s data and requests under this policy to info@zagado.app.