The short version.
Your notes belong to you. With end-to-end encryption on, the notes we store are ciphertext we cannot read. AI features are the exception you control: when you sort, transcribe, translate or ask about a note, that note's text is sent to Google's Gemini in readable form so the feature can work. We don't sell personal data or show behavioural ads. You can export your notes and delete your account at any time.
1What we collect
Account information
When you sign up we collect your email address, display name, and authentication credentials. Sign-in is handled by Google Firebase Authentication. If you sign in with a Google account, we receive your basic profile (name, email, avatar) from Google. If you sign in with Apple, we receive the name and email address Apple shares with us, which may be a private relay address.
Your notes and content
The notes, tasks and voice memos you create are stored as text in Google Cloud Firestore so they can sync across your devices. zakar does not store photos, images or file attachments: a page you scan is kept only as the text you save. If you turn on end-to-end encryption, your notes are encrypted on your device before upload (see section 4).
Payment information
zakar Pro is sold through the store you buy it in: Google Play on Android, the App Store (Apple In-App Purchase) on iPhone, and Stripe on the web. RevenueCat manages the subscription across all three so Pro follows your account. We never see or store your full card number — the store sends us, through RevenueCat, only your subscription status, plan, renewal dates and a purchase reference, tied to your zakar account ID.
Usage and device data
We collect basic technical data needed to run the service reliably: app version, device/browser type, language setting, crash reports, and coarse usage events (for example, "a sort was run"), never the content being sorted. We also keep a count of the AI actions your account has used, so the free allowance and Pro limits can work.
Product analytics. The zakar apps for Android and iPhone, the web app (use.myzakar.app) and this website send a small set of usage events to PostHog so we can see which features help and where people get stuck: the app being installed, updated, opened and closed (on the web, the page viewed — without any link to a shared note — and the site you came from); a note being created (and whether it was typed, spoken or scanned); signing in or up (and the method); the upgrade screen being shown; and a purchase completing, failing or being cancelled (and the plan). These events carry your device and app version and, once you sign in, your zakar account ID — never your name, email, note text, titles, tags or what is on your screen. Session recording is off, and the web app stores nothing on your device for analytics (no cookie). We do not use third-party advertising trackers, and analytics data is never used for ads.
Notifications
To deliver the reminders you set, your device registers a push token with Firebase Cloud Messaging (and, on iPhone, Apple Push Notification service). We store that token with your account so a reminder set on one device can reach the others. Turning notifications off in your device settings stops them.
Messages you send us
When you use Send feedback, report a problem, or request a cancellation in the app, we keep the message, your account ID and email, and the app version so we can reply. Support email to hello@myzakar.app is hosted by Zoho Mail.
Save to zakar browser extension
The Save to zakar extension handles the current page title and URL, text you select or the page's main readable text, and the target URL of a link or media item only when you click its toolbar button, keyboard shortcut, or right-click command. It does not read browser history, cookies, passwords, form entries, or pages you do not ask it to clip.
The extension uses activeTab for temporary access to the page you chose, scripting to read that page's selected or main text, and contextMenus to provide the right-click Save command. It requests no persistent website access and contains no remotely hosted code.
The clip is passed to use.myzakar.app in the URL fragment, which browsers do not send in HTTP requests. The extension uses no extension storage, does not collect pages in the background, and does not share clip data with advertisers, data brokers, or unrelated third parties. A pending clip may remain temporarily in that zakar tab's session storage while you sign in; closing the browser session removes it.
Our use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. That information is used only to provide the clipping feature you request.
2Why we process data
Where data-protection law requires a legal basis, we rely on: contract to create your account, sync and display notes, provide exports and deliver features you request; consent or your requested action for microphone, camera, notifications and optional AI processing; legitimate interests to secure the Service, prevent abuse, diagnose failures and improve reliability, and to understand how features are used through the product analytics described in section 1; and legal obligations for billing, tax, fraud prevention and lawful requests. You may withdraw consent through device or app settings without affecting earlier lawful processing.
3How AI processing works
zakar's assistant ("zaki") is powered by Google's Gemini models. AI processing happens only when you trigger it — there is no background scanning of your notebook. On iPhone, zakar asks for your permission before it first uses AI, and you can change the answer in Settings. Specifically:
- Magic Sort — when you tap Sort, the text of that note is sent to Gemini to be titled, formatted, categorized and tagged.
- Ask your notes — when you ask a question, we compute embeddings of your unlocked notes (using Google's embedding models) to find relevant passages, and send those passages plus your question to Gemini to generate a grounded answer.
- Voice capture — when you record a voice note, the audio is sent to Gemini for transcription in your chosen language, then handled like any other note text. Audio is used for transcription, not for building voice profiles. When you are offline, the words are recognized on your device instead, and the recording does not leave it.
- Translation — when you translate a note, its text is sent to Gemini and the translation is shown to you. If you share a note publicly, visitors to its page can translate it the same way.
account: •••••• — never the real value.Scanning stays on your device. Text recognition for scanned documents and photos (OCR) runs entirely on your device. Your scans are not sent to a server to be read, and the picture itself is never uploaded or stored by zakar.
We do not train our own models on your notes. Content sent to Gemini is handled under the Google Gemini API terms and usage policies that apply to the service tier and model active at the time. Those terms may include limited retention or logging for security, abuse prevention, and service operation. We review provider settings and terms before changing production AI processing.
4End-to-end encryption & locked notes
When you turn on end-to-end encryption, you choose a passphrase (minimum 8 characters) and receive a one-time recovery code. Your notes are then encrypted on your device with keys derived from that passphrase before they are uploaded. What our servers store is ciphertext.
- We cannot read, recover, or reset your encrypted notes. Ever.
- Encryption covers what we store, not what you send to AI. When you sort, transcribe, translate or ask about a note, that note's text (or recording) is sent to Google's Gemini in readable form so the feature can work, even with encryption on.
- Notes you lock with a password or biometrics are never embedded or searched when you ask zaki, and bulk sorting skips them. A locked note reaches Gemini only if you unlock it and run an AI feature on it yourself.
- If you lose both your passphrase and your recovery code, your encrypted notes are permanently unrecoverable. This is a feature of the design, not a support limitation.
Biometric unlock (Face ID, fingerprint) happens entirely on your device through your operating system; zakar never receives your biometric data.
6Who we share data with
We share data only with the service providers required to run zakar, under contracts limiting their use of it:
- Google Firebase / Google Cloud — authentication, database, hosting.
- Google Gemini API — AI sorting, answers, and voice transcription you trigger.
- Google Play, Apple (App Store) and Stripe — subscription billing in the store you buy from.
- RevenueCat — subscription management across Android, iPhone and the web.
- PostHog (United States) — product analytics in the Android app, as described in section 1.
- Firebase Cloud Messaging and Apple Push Notification service — delivering your reminders.
- Resend — transactional email (welcome, verification, password reset, receipts).
- Zoho Mail — our support inbox, hello@myzakar.app.
- Vercel — hosting for this website.
We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose data if required by law, and we will resist over-broad requests where we can.
7International processing
Our providers may process data in countries other than yours. Where required, we use recognized safeguards such as adequacy decisions or contractual protections, and we assess the transfer and provider. You may contact us for more information about safeguards relevant to your account.
9Retention, export & deletion
Export: at any time you can export your entire notebook as a zip of Markdown files (with a manifest for re-import) and individual notes as real-text PDFs. Your notes are never held hostage.
Deletion: deleting a note removes it after the confirmation step; permanently deleted notes cannot be restored. Deleting your account removes your notes, embeddings, and profile from our production systems, with residual copies purged from encrypted backups within 30 days. Google Play, Apple, Stripe and RevenueCat keep billing records as required by financial regulations. Analytics events are linked only to your account ID and are deleted with your account.
If you cancel a subscription, your notes remain intact and exportable — losing access to Pro features never means losing your data.
10Children
zakar is not directed at children and is intended for users aged 16 and above. We do not knowingly collect personal data from children; if you believe a child has created an account, contact us and we will delete it.
11Your rights
Depending on where you live, you may have rights to know or access, correct, export, delete, restrict or object to processing, withdraw consent, and appeal or complain to your local data-protection authority. Most controls are available in-app. For other requests, email us; we verify requests, respond within the period required by applicable law, and do not discriminate for exercising privacy rights.
12Security
All traffic is encrypted in transit (TLS). Data at rest is encrypted by Google Cloud, and locked notes carry the additional end-to-end layer described above. Access to production systems is restricted and logged. No system is perfectly secure — if we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
13Changes & contact
If we make material changes to this policy, we'll notify you in-app or by email before they take effect, and update the date at the top. This policy is governed by the laws of the jurisdiction in which Delightful Apps is established, without prejudice to any mandatory data-protection rights of your country of residence.
Questions, requests, or concerns: hello@myzakar.app.