Legal
Privacy Policy
1. Our promise
Znazo is built privacy-first. We do not sell your personal data. We do not run third-party advertising or behavioral tracking. Revenue comes from subscribers, not from your attention or your data.
2. What we collect
Depending on how you use the Service, we may process:
- Account data: email, password hash, verification status, and internal user identifiers
- Identity profile data you provide for matching: heritage, languages, interests, privacy preferences, and optional location fields you choose to share
- Photos you choose to upload (community profile photos and optional Connections photos)
- Face data used only for optional Connections face verification, as described in Section 5 (Face data)
- Community activity: circle memberships, posts, messages, and invitations — encrypted or access-controlled as described in-product
- Technical data: device/browser type, push notification tokens (if you opt in), and security logs limited to what is necessary to operate the Service
3. What we do not do
By design, we do not:
- Sell or broker personal data to advertisers or data brokers
- Operate public searchable profiles or public activity feeds
- Use engagement metrics (time-on-platform, click-through, outrage signals) for matching
- Load third-party ad or analytics SDKs in our apps
- Require your legal name, phone number, or precise location by default
- Use face data for advertising, social scoring, or identity sale to third parties
4. How we use data
We use your information to:
- Create and secure your account
- Match you to appropriate cultural communities using our internal matching system
- Deliver invitations, messages, and notifications you have opted into
- Operate stealth and safety features you enable
- Verify that optional Connections profile photos belong to the account holder (face verification)
- Comply with law and respond to valid legal requests
5. Face data
This section describes Znazo’s collection, intended uses, disclosures, sharing, retention, and deletion of face data. Face data is sensitive personal information. Connections face verification is optional; you choose whether to participate by uploading a Connections lead photo and completing verification, or by using the live camera/selfie verification flow.
Collection of face data
We collect and process the following face data when you use Connections face verification: (1) your Connections lead photo that you upload, which may depict your face and is used as the reference image; and (2) live camera frames and/or selfie images you capture during verification so we can compare them to your reference photo. We do not collect government identity documents for face verification, 3D face maps, depth maps, or Apple Face ID / device biometric unlock templates.
All intended uses of face data
We use face data only for these purposes: (a) to confirm that the person completing verification matches the face in the Connections lead photo on the account; (b) to set and display a face-verification status on your Connections profile (for example verified or not verified); and (c) to determine whether your profile may appear in the Connections hallway and whether you may send Connections room invitations. We do not use face data for advertising, marketing, analytics products, social scoring, emotion detection, training third-party AI models for unrelated purposes, or sale of identity information.
Disclosures of face data
We disclose face data only as needed to operate verification on Znazo-controlled systems, to our contracted infrastructure processors that host the Service, when required by law, or when necessary to protect users’ safety. We do not disclose face data to other Znazo members as a biometric product, and we do not disclose face data to advertisers or data brokers.
Face data sharing policy
We do not sell face data. We do not share face data with advertisers, data brokers, or other users for their independent commercial use. Verification comparison runs on Znazo-operated infrastructure (our application servers and, where configured, our own face-matching service). Camera frames and selfies are transmitted to our servers solely to complete the verification request. Cloud infrastructure providers (for example object storage used for photos you choose to keep on your account) may process face-containing photos only under contract to operate Znazo.
Face data retention policy
Connections lead photos (reference images) are retained while they remain on your account. Verification status metadata (status, attempt counts, and related timestamps) is retained while your Connections profile or account remains active. Live camera frames and submitted selfie images used for a verification attempt are processed to compute a match result and are not retained afterward as lasting face templates or reusable biometric models of your face. If you leave Connections, delete the relevant photos, or delete your account, associated face-related data is removed as described in the deletion policy below.
Face data deletion policy and revoking consent
You may revoke consent for collection or use of face data at any time by: (1) leaving Connections / disabling your Connections profile; (2) deleting or replacing your Connections lead photo(s), which invalidates prior face verification for that photo; and/or (3) permanently deleting your Znazo account. To delete face data and other personal data, use Settings → Account & password → Delete account, or Settings → Your data → Delete account in the app or website, or visit https://znazo.com/delete-my-account. You may also email znazoapp@gmail.com to request deletion. Account deletion removes stored Connections photos and face-verification metadata we hold about you without undue delay and within timelines required by applicable law.
Third parties and equal protection
Znazo does not share face data with unaffiliated third parties for their independent use. If face data is processed by a contracted third-party infrastructure provider solely to help us host or run the Service (including verification), that third party must provide the same or equal protection of the face data as stated in this Privacy Policy.
6. Sharing
We share data only as needed to run the Service: for example, with infrastructure providers under contract, or with moderators within a circle for safety review. We do not share your identity profile for advertising.
Face data sharing is limited as described in Section 5. In stealth mode, additional architectural protections limit what is visible to other members. See in-app stealth settings for details.
7. Retention
We retain data while your account is active and as needed to provide the Service. Self-destructing messages are deleted according to the timers you or your circle settings choose. Face data retention is described in Section 5.
You may export your data or request erasure through Settings or at https://znazo.com/delete-my-data and https://znazo.com/delete-my-account. Erasure requests are honored without undue delay and within timelines required by applicable law.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. EU/UK users have GDPR rights; California users have CCPA/CPRA rights.
Use in-app export and delete tools (Settings → Your data or Settings → Account & password → Delete account), or visit https://znazo.com/delete-my-data and https://znazo.com/delete-my-account for step-by-step instructions. You can also email znazoapp@gmail.com. We will not discriminate against you for exercising privacy rights.
9. Security
We use encryption in transit (TLS), encryption at rest for sensitive fields, and end-to-end encryption for eligible messaging. No system is perfectly secure; please use a strong password and enable stealth features if your safety requires them.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it.
11. International transfers
If you use Znazo from outside the United States, your data may be processed in the U.S. or other countries where our providers operate. We apply appropriate safeguards where required by law.
12. Changes
We may update this Privacy Policy. Material changes will be communicated through the Service or by email. The “Last updated” date at the top reflects the latest revision.
13. Contact
Privacy questions or requests: znazoapp@gmail.com