Overview

This Privacy Policy explains what personal data ZapAI collects, how we use it, when we share it, how long we keep it, and the choices you have. By installing or using ZapAI, you agree to this Policy and our in‑app Terms. If you do not agree, please do not use the app.

Scope and definitions

• App: ZapAI – Smartest AI Assistant (Android).
• You: An individual user of the App.
• Personal data: Any information that identifies or can be linked to you.
• Providers: Third parties we use to operate the App (e.g., AI model APIs, cloud hosting, analytics, crash reporting, payment processors).
• Content: Anything you enter or upload, including prompts, messages, PDFs, documents, and files.

What we collect

We collect the minimum data needed to operate and improve the App.

• Account data
  
  • Name, display name, email address, and password (hashed) if you create an account or sign in.
  • Authentication tokens and session identifiers.
    
• Profile and preferences
  
  • Language, theme, model choices, assistant presets, and notification settings.
    
• Content you provide
  
  • Chat messages, prompts, feedback, ratings, and flags.
  • Uploaded files (e.g., PDFs) for summarization and Q&A.
  • Optional media you provide (images or audio) if features are enabled and you choose to use them.
    
• Usage data
  
  • Feature usage, interactions, timestamps, referral source, in‑app events.
  • Diagnostic data such as performance metrics and error codes.
    
• Device and network data
  
  • Device model, OS version, app version, approximate region/country, and network type.
  • Advertising or device identifiers if your platform provides them; we do not use them for cross‑app tracking.
    
• Logs and crash reports
  
  • Crash traces, ANRs, and related diagnostics to fix stability issues.
    
• Payment and subscriptions
  
  • If you purchase a subscription via Google Play, Google provides us with transaction status, product, and subscription tokens. We do not receive your full payment or card details.
    
• Aggregated and de‑identified data
  
  • We may create statistical or de‑identified information that does not identify you.

Why we collect it (purposes)

• Provide the service
  
  • Authenticate you, deliver chat completions, analyze documents, maintain chat history, and operate core features.
    
• Multi‑model functionality
  
  • Route your prompts and files to the AI model you select and return results to you.
    
• Improve and personalize
  
  • Optimize performance, quality, and relevance; remember your preferences; develop new features.
    
• Safety and moderation
  
  • Detects and prevents abuse, malware, spam, or content policy violations; enable reporting and appeals.
    
• Customer support
  
  • Respond to requests, troubleshoot issues, and process refunds or billing inquiries.
    
• Security and compliance
  
  • Protect accounts, investigate incidents, enforce Terms, and comply with legal obligations.
    
• Analytics and measurement
  
  • Understand app usage and effectiveness of onboarding to improve user experience.
    
• Marketing communications (limited)
  
  • With your consent where required, send service updates, onboarding tips, or feature announcements. You can opt out at any time.
    

Legal bases (EEA/UK where applicable)

• Contract: To provide the App and its features.
• Legitimate interests: To secure, improve, and analyze the service.
• Consent: For optional features (e.g., notifications, certain analytics, or marketing).
• Legal obligation: To comply with law and regulatory requirements.

How we process prompts, chats, and files

• Your prompts, chat history, and uploaded files are processed to generate outputs and provide requested features (e.g., PDF Q&A).
  
• When you choose a specific AI model, your inputs are securely transmitted to that model’s API provider to generate results. The provider processes data solely to deliver the output to you and to us.
  
• Where available, we configure provider settings to disable training on your data and to minimize retention. If a provider requires short‑term retention for abuse detection or debugging, we seek to limit it to the minimum necessary.
  
• Do not include confidential, health, financial, or other sensitive information unless necessary. If you do, it will be processed as described in this Policy.

Sharing and disclosure

We do not sell your personal information. We share data only as needed to operate the App or when required by law.

• AI model providers
  
  • We transmit your selected inputs to the corresponding provider (e.g., OpenAI, Google, Mistral, DeepSeek or others you choose) to obtain results. These providers are independent services with their own privacy practices.
    
• Cloud infrastructure
  
  • Hosting, storage, and CDN services to run the App, store chat history, and serve content efficiently.
    
• Analytics and crash reporting
  
  • Services that help us measure performance, stability, and usage trends.
    
• Customer support tools
  
  • Systems used to manage user requests, feedback, and issue tracking.
    
• Payment processing
  
  • Google Play handles payments. We receive purchase confirmations and subscription status, not your full card details.
    
• Legal and safety
  
  • Courts, regulators, or law enforcement when we have a good‑faith belief disclosure is required by law or to protect rights, safety, and security.
    
• Business transfers
  
  • In a merger, acquisition, or asset sale, your data may be transferred subject to this Policy’s protections.

International data transfers

• We are based in India but may process and store data on servers located in multiple countries.
  
• When transferring personal data internationally, we use appropriate safeguards as required by law (such as standard contractual clauses or equivalent mechanisms).

Data retention

• Account data: Retained while your account is active and for a reasonable period after deletion to comply with law, prevent fraud, or resolve disputes.
  
• Chat history and content: Retained to provide continuity and history until you delete it or your account, subject to backup cycles.
  
• Logs and diagnostics: Retained for the shortest time needed to ensure stability and security.
  
• Purchase records: Retained as required for tax, accounting, and compliance.
  
• We periodically review and delete or de‑identify data that is no longer needed.

Security

• We employ industry‑standard technical and organizational measures, including encryption in transit, access controls, least‑privilege access, audit logging, and secure development practices.
  
• No system is perfectly secure. You are responsible for using a strong password, keeping it confidential, and updating the app regularly.

Your choices and controls

• Access and correction
  
  • View and edit account details and certain profile information within the App.
    
• Export
  
  • Request an export of your personal data or chat history where available.
    
• Deletion
  
  • Delete individual chats or your entire account. Some data may persist in backups for a limited period.
    
• Preferences
  
  • Manage notifications, language, theme, and model selection in settings.
    
• Consent withdrawal
  
  • Where processing is based on consent, you can withdraw consent in the App or by contacting us.
    
• Opt out of marketing
  
  • Use the unsubscribe controls in messages or contact us.
    

Your rights by region

• EEA/UK
  
  • Rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority.
    
• California
  
  • Right to know, delete, correct, opt out of sales or sharing for cross‑context behavioral advertising, and to non‑discrimination. We do not sell personal information.
    
• Brazil
  
  • Rights to confirm processing, access, correct, anonymize, block, delete, data portability, and information about sharing.
    
• India
  
  • Rights under the Digital Personal Data Protection framework, including access, correction, erasure, and grievance redressal.
    

You can exercise rights by contacting us. We may verify your identity before fulfilling requests.

Children’s privacy

• The App is not directed to children under 13 (or the age required by local law). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

Permissions and device access

• Storage/files: To let you upload and process documents (e.g., PDFs).
  
• Notifications: To send updates you opt into.
  
• Microphone or camera: Only if you choose voice or image features. You can disable permissions at any time in your device settings, but some features may not work without them.

Cookies and local storage

• We may use local storage and similar technologies to remember your session, settings, and preferences and to improve load times. These are not used for cross‑app tracking.

Monetization and ads

• Purchases are processed via Google Play.
  
• We do not show third‑party ads and do not sell personal information. If this changes, we will publish updates here. Please review this policy periodically.

Third‑party links and content

• The App may display links or content from third parties (including AI model outputs). We are not responsible for their privacy practices or content. Review their policies before providing data.

Grievance and contact

• Data protection or privacy inquiries, rights requests, or complaints can be sent to: contact@applyset.com
  
• Grievance Officer (India): Mayur Patil,
  • Email: mayur@applyset.com
  • Phone: +91 81414 32170 
  • Address: 114, first floor, Polaris Mall, Vesu Canal Rd, Parvat Patiya, Surat, Gujarat – 395011

Changes to this Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Any updates will be published here. Please review this policy periodically.