Privacy & Data Security

Plain language, no legal fog. Last updated October 18, 2026.

✓ No trackers. ZoneIn contains no analytics SDKs, no advertising SDKs, no ads, and does no cross-app tracking. We don't sell data — there's nothing to sell.

✓ No account needed. Every core feature works without signing in. Your tasks live on your own device.

✓ AI that doesn't train on you. Sorting runs on Google Cloud Vertex AI through our own private server. Under Google Cloud's terms, your content is not used to train AI models.

✓ Erase anytime — yourself. Settings → Data gives you one-tap buttons to export everything (JSON), delete your cloud data, erase this device, and delete your account. No emails, no waiting, no account-closure hoops.

What data exists, and where

Your tasks are stored on your device. If — and only if — you sign in for sync, an encrypted copy is kept in your private cloud record that only your login can read. We (the developers) cannot browse your tasks.
Photos of paper lists are sent once to the AI to be read, then discarded — we don't keep a photo library.
Your email address is stored only if you enable sync, purely as your sign-in identity.
Weekly review feedback (web app, signed-in users only): if you rate a weekly review with 👍/👎 and optionally add a line, that rating is stored in your private cloud record alongside your tasks, so we can fix anything the review got wrong. Nothing is rated unless you tap the button; it is deleted with your account.
Add to calendar (web app): the calendar file is made on your device. If you choose Google, the task's title, date and open steps travel in the link you open, straight to Google Calendar — between you and Google; we don't see it. ZoneIn never reads your calendar.
AI result reports: if you tap Report an AI result → Send report on a task, we receive that task's text, its AI result, your note (if any), the app version and platform, and an anonymous account ID. Nothing is sent unless you tap Send. We use reports to fix and filter the AI; they are deleted after 90 days, or sooner with your account. Only the server can read them.
That's the whole list. No name, no phone number, no location, no contacts, no advertising ID, no usage analytics.

How the AI handles your words

When you tap Organize My Week, your task text (or list photo) is sent through our own backend server to Google Cloud Vertex AI, which does the sorting and sends the result straight back. What that means for your words:

Not used to train AI. Google Cloud's terms ("Training Restriction", in the Service Specific Terms) say Google won't use customer data to train or fine-tune AI models without the customer's prior permission or instruction. ZoneIn does not give that permission.
No AI credentials exist inside the app — every request goes through our authenticated, rate-limited server.
At Google: a request may be held briefly — Gemini caches requests to answer faster, in memory and sometimes as encrypted derived data, and deletes them within 24 hours; the cache is never used for training — and, under Google Cloud's terms, Google may log requests to detect abuse of its service. Your tasks aren't accumulated into an AI profile of you.
Your agreement comes first. Nothing is sent until you have read the in-app notice ("How ZoneIn's AI works") and tapped Agree and continue. You can withdraw that agreement at any time in Settings → Privacy & Data → AI processing: switched off, the app refuses every AI request, and sorting runs on your device instead.
Retention: our server keeps no copy of your task text or photos — it forwards the request and returns the answer. The only record is a per-day request count for rate limiting, which is deleted with your account. (A report you choose to send is the one exception — see AI result reports above.)

A sensible habit for work tasks: the AI needs to read your words to sort them — that's what AI processing is. If a task is genuinely confidential, phrase it the way you'd write it in a notebook: "Review the acquisition contract — Friday" works perfectly without naming names or numbers.

Sync security

Everything is encrypted in transit (TLS) and at rest on Google's infrastructure.
Access rules are enforced server-side: your record is readable and writable by your login only. There is no way to list or browse other users' data.
Subscription status and any credentials are deliberately never part of the synced data.

Honest limitations

ZoneIn is an independent product. We don't yet hold formal certifications (SOC 2 / ISO 27001) — on the roadmap alongside an optional end-to-end encrypted vault for people who want storage only they can decrypt. We'd rather tell you this plainly than imply enterprise guarantees we don't yet have. One note for early testers: deleting your cloud data does not revoke your lifetime-access grant — that record is kept so your entitlement survives.

Your controls (all self-serve, in Settings → Data)

Export my data (JSON) — download every task, archive, and week record in a readable format. Your data is portable, not captive.
Delete my cloud data — one tap removes your synced record from the cloud and turns sync off. Your device copy stays until you say otherwise.
Erase this device — signs this device out, then wipes all local data. Your cloud copy is not touched; sign in again to bring it back.
Daily backups — if you use sync, the cloud keeps one copy of your synced record per day (the last 7 days, plus Sunday copies up to 28 days old), so a mistake on any device can be undone. Only you can read them, and Delete my cloud data removes them too.
Sign out — stops all syncing; the app keeps working locally.
Anything else — including full rights requests (access, correction, objection), honored for every user worldwide: [email protected].

Delete your ZoneIn AI account & data

You can delete your account yourself, in the app, right now — no email, no waiting:

Sign in, then open Settings → Data in ZoneIn AI.
Tap Delete my account…, read what will be removed, type DELETE and confirm.

This permanently deletes your sign-in account and everything we store for it: your synced record (tasks, steps, notes, target dates, tags, archive, week history), your Notebook pages, your daily backups, your AI usage counters, any AI result reports you sent, and any early-tester lifetime-access grant. The device you delete from is cleared too. You'll see a confirmation as soon as it's done.

Subscriptions are billed by the App Store or Google Play and keep renewing until you cancel them there — deleting your ZoneIn account does not cancel them. The app links you to the right place before you confirm.
Signed in with Apple? Afterwards, also remove ZoneIn from your Apple ID: on your iPhone, Settings → your name → Sign in with Apple → ZoneIn AI → Stop Using.
Only want to remove your synced data and keep the account? Use Delete my cloud data instead; Erase this device wipes only the local copy.

What may be retained: nothing linked to you. An invite code you redeemed stays marked as used, with your account removed from it. Deleted content can remain in our encrypted infrastructure backups for up to 30 days before it ages out.