Last updated: September 2026
This Privacy Policy describes how Zare ("Zare," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Zare mobile application (the "App" or the "Service"). This Policy applies to all users of the Service and is incorporated by reference into our Terms of Use. By creating an account or otherwise using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Service.
Zare is operated as a sole proprietorship. For purposes of applicable data protection law, the operator of Zare is the entity responsible for determining how and why your information is processed, sometimes referred to as the "data controller" or "business." You can reach us at any time using the contact information at the end of this Policy.
The Service is intended solely for individuals who are at least sixteen (16) years of age. We are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from anyone under thirteen. Individuals between the ages of sixteen and eighteen may use the Service subject to any additional consent or supervision requirements imposed by the laws of their jurisdiction. We verify eligibility by asking for your date of birth during account creation, and we will not allow an account to be created if the date of birth provided indicates the person is under sixteen. If we later obtain actual knowledge that we have collected personal information from a person under sixteen, or under thirteen in a manner inconsistent with the Children's Online Privacy Protection Act ("COPPA"), we will take reasonable steps to promptly delete that information and close the associated account.
We collect the categories of information described below, directly from you, automatically through your use of the Service, and, in limited cases, from third parties such as Google when you choose to authenticate through them.
When you create an account, we collect your first name, last name, and any nickname you provide; your email address, or the name and email address associated with your Google account if you register using "Continue with Google"; your date of birth, which we use to confirm your eligibility to use the Service and, where applicable, to personalize your experience; your gender, if you choose to provide it, which you may decline to share by selecting "prefer not to say"; your phone number, if you choose to provide one; and your device's time zone, which we use to schedule notifications and reviews at appropriate local times.
We collect and store the full content of your conversations with Zare, including every message you send and every response Zare generates. If you choose to attach a photograph to a conversation, the image data itself is transmitted to our artificial intelligence service provider so that it can be incorporated into Zare's response. If you attach a non-image file, such as a document, we record the file's name only; we do not extract, read, transmit, or otherwise process the contents of that file.
If you choose to compose a message using your device's voice input feature, your spoken words are converted into text using speech recognition functionality built into your device's operating system before that data ever reaches our servers. We receive and store only the resulting text, in the same manner as a typed message. We do not receive, transmit, or retain an audio recording of your voice.
A core function of the Service is to analyze your conversations over time and generate an evolving model of your behavior, habits, and motivations. This analysis produces several categories of information that we store on your behalf, including discrete facts Zare has learned about you; observed behavior patterns; hypotheses Zare forms about the reasons behind your behavior, together with the evidence supporting them; small experiments Zare may suggest you try; short daily notes; and periodic written reviews summarizing recurring themes on a weekly, monthly, or yearly basis. We consider this category of information to be highly sensitive, comparable in nature to a personal diary, and we handle it with the same protections described throughout this Policy.
If the content of a conversation suggests that you may be experiencing a mental health crisis or considering self-harm, Zare records what happened as part of its ongoing memory of you, in the same manner as any other significant fact or episode you share, so that Zare does not lose track of something important to you. Separately, we also store a flag indicating that a gentle, general check-in is owed in a future conversation, along with the date and time it was created. This information is deliberately excluded from your daily notes and periodic reviews, and Zare is instructed never to raise the substance of the disclosure again on its own or to treat a positive check-in as an invitation to keep discussing it, but the underlying record is retained as memory rather than deleted. The Service is not a crisis intervention tool and is not monitored in real time by a human being; if you are in immediate danger, please contact emergency services or a crisis line, such as the 988 Suicide and Crisis Lifeline in the United States, directly.
If you use the in-app feature to report a message as inaccurate or inappropriate, we collect and store the reported message, the reason you selected, any additional description you provide, and a limited number of preceding messages needed to understand the context of your report. If you contact us directly for customer support, we collect and store your email address and the content of your message so that we can respond to you. These records are reviewed solely by us for the purpose of resolving your report or inquiry and improving the Service. The only third party that receives any part of this is our email delivery provider, solely so that we can send you a reply - see "How We Share Your Information" below.
If you subscribe to a paid tier of the Service, all payment processing is performed by Apple through the App Store. We do not receive, process, or store your payment card number or other financial account information. We use RevenueCat, a third-party subscription management platform, to receive and record subscription-related events, such as the start of a free trial, the tier you have subscribed to, and your renewal date, so that we can provision the correct level of access to your account.
We and our service providers automatically collect certain technical and usage information when you use the Service, including the screens you view, in-app events such as completing onboarding, general device and operating system information, application version, crash and error diagnostic reports, your push notification token if notifications are enabled, aggregate records of the computational resources used to process your conversations, and internal diagnostic records that may include short, structured fragments of Zare's own reasoning about a conversation, used solely to test and improve how reliably the Service functions. These diagnostic records are automatically deleted within 30 days at the latest, and immediately upon deletion of your account. This information relates to the operation and performance of the Service itself.
In addition to the information we store on our servers, the App stores certain information locally on your device, such as your session credentials in your device's secure keychain or equivalent secure storage, and cached app data used to improve performance and allow the App to function while data is loading. This locally stored information remains on your device and is not transmitted to us except as otherwise described in this Policy. Certain data may also be encrypted on your device before being stored or transmitted, as an additional layer of protection.
We use the information described above to create, maintain, and secure your account; generate Zare's conversational responses and the behavioral insights, patterns, experiments, daily notes, and reviews described above; personalize the timing and content of notifications and check-ins; verify your eligibility to use the Service; enforce free-tier usage limits and manage paid subscriptions; provide customer support and investigate reports you submit; detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Use; diagnose and fix technical problems with the Service; and comply with applicable law, legal process, and government requests. We do not use the content of your conversations to build advertising profiles. We may also use de-identified or aggregated information, derived from your conversations and how the Service performed for you, to improve, train, and develop Zare's own systems and future versions of the Service; where we do this, we take steps designed to remove or obscure information that directly identifies you before it is used for this purpose.
The facts, patterns, hypotheses, experiments, and reviews described above are generated through automated analysis of your conversations. We do not use this automated processing to make any decision that produces a legal effect concerning you or that similarly significantly affects you, such as a decision about eligibility for a benefit, employment, credit, housing, insurance, or similar opportunity. The output of this automated processing is provided to you for your own reflection and is not shared with, or used to make decisions on behalf of, any third party. Where applicable law grants you rights with respect to automated decision-making or profiling, you may exercise those rights using the contact information at the end of this Policy.
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires us to identify a legal basis for processing personal information, we process your information on the following bases, as applicable: performance of a contract with you, in order to provide the Service you have requested; our legitimate interests in operating, securing, and improving the Service, provided those interests are not outweighed by your rights; your consent, where we have specifically requested it, such as for optional features; and compliance with a legal obligation to which we are subject.
We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. We disclose information only to the following categories of recipients, and only to the extent necessary for them to perform their function.
We use one or more third-party artificial intelligence infrastructure providers, currently Google, to receive the text of your conversations and any photographs you attach in order to generate Zare's conversational responses, periodic reviews, and proactive check-in messages. We choose our AI infrastructure provider based on quality, reliability, and cost, and we may change providers from time to time; whichever provider we use processes this content on our behalf, under our agreement with it, not under its own separate consumer terms.
Supabase provides the database, authentication, and backend infrastructure on which substantially all of your account and conversation data is hosted and processed.
Apple processes subscription payments through the App Store and, where you use voice input, converts your spoken words to text using functionality built into your device's own operating system - depending on your device's own settings, this conversion may happen on your device or using Apple's own speech-recognition servers, but either way, only the resulting text, never an audio recording of your voice, is ever sent to us.
Expo, our push notification delivery provider, receives your device's push notification token and a short preview of a message's text in order to deliver that notification to your device.
Google also receives and provides to us your name and email address if you choose to create or access your account using "Continue with Google" - separately from, and regardless of, which company's infrastructure we use to generate Zare's responses as described above.
RevenueCat receives subscription and purchase event data from Apple's App Store in order to help us track and manage your subscription status.
Resend, our email delivery provider, receives the content of any support message or report you submit, and the email address needed to reply to you, solely so that we can respond to you.
Sentry receives technical error and crash diagnostic information, such as which function of the Service failed and the associated error code, to help us identify and fix defects. In some cases, a diagnostic report may include a short, specific fragment of Zare-generated text relevant to the defect being diagnosed, but Sentry never receives your conversations as a whole, and is used solely to identify and fix technical problems with the Service.
We may also disclose information where we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms of Use; to protect the rights, property, or safety of Zare, our users, or the public, including in an emergency involving a risk to life; or in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, in which case information you have provided may be among the assets transferred, subject to the terms of this Policy or a materially similar successor policy. We may also share aggregated or de-identified information that cannot reasonably be used to identify you, for any lawful business purpose.
The Service is operated from, and our service providers process information in, the United States. If you access the Service from outside the United States, you understand and agree that your information will be transferred to, stored, and processed in the United States and potentially other countries whose data protection laws may differ from those of your home jurisdiction. By using the Service, you consent to this transfer, storage, and processing.
We retain your information for as long as your account remains active, because the value of the Service depends on Zare's ability to remember your history. If you delete your account through Settings, we permanently delete your account and substantially all associated information, including your messages, facts, patterns, hypotheses, experiments, daily notes, reviews, reports, and notification tokens, immediately upon confirmation, rather than after a waiting period. Notwithstanding the foregoing: we retain records of your subscription and purchase history, including transaction identifiers, dates, and amounts, for as long as we determine is necessary for our own business, accounting, tax, and fraud-prevention purposes, and this record is not deleted when your account is; and we retain a minimal record that an account associated with a given email address previously existed, so that we can maintain accurate business records - this minimal record does not include your conversations, facts, patterns, or any other content of the Service, and does not prevent you from creating a new account with the same email address in the future. Residual copies of deleted information may also persist for a limited period in routine encrypted backups until those backups are rotated out of service in the ordinary course.
Depending on where you live, you may have certain rights with respect to your personal information, which may include the right to know what information we have collected about you, the right to request access to or a copy of that information, the right to request that we correct inaccurate information, the right to request that we delete your information, and the right to be free from discrimination for exercising any of these rights. Regardless of where you live, you can exercise many of these rights directly and immediately through the Settings screen within the App, which allows you to view, correct, and permanently delete your information without needing to contact us.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), grants you the right to know the categories and specific pieces of personal information we have collected about you; the right to request deletion of your personal information; the right to correct inaccurate personal information; the right to know whether we sell or share personal information, which we do not; the right to limit the use of sensitive personal information, which may include the behavioral and health-adjacent inferences described in this Policy, to purposes necessary to provide the Service; and the right not to receive discriminatory treatment for exercising any of these rights. You may submit a verifiable consumer request by emailing us at the address below; we will respond within the time required by law, generally forty-five days, which may be extended by an additional forty-five days when reasonably necessary. You may designate an authorized agent to submit a request on your behalf, subject to our ability to verify that authorization.
Nevada law permits residents to submit a request directing us not to sell certain covered information, as those terms are defined under Nevada Revised Statutes Chapter 603A. We do not sell covered information as defined under Nevada law, and we do not anticipate doing so in the future. If this changes, we will honor a verified request submitted to the email address below.
If you reside in a U.S. state that has enacted a comprehensive consumer privacy law, such as Virginia, Colorado, Connecticut, Utah, or another state with a substantially similar statute, you may have rights similar to those described above, including the right to access, correct, delete, and obtain a portable copy of your personal information, and the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, and to appeal a denial of any of these requests. We do not engage in the sale of personal information or targeted advertising as those terms are defined under these laws. You may exercise these rights, or appeal a decision regarding a prior request, by contacting us at the email address below.
Washington's My Health My Data Act, and similar laws enacted in other states, regulate "consumer health data," a term that can be interpreted broadly to include information used to identify a consumer's mental or emotional health status, including certain inferences we generate as part of the Service. If you are a Washington resident, or a resident of a state with a substantially similar law, you have the right to confirm whether we are processing your consumer health data, to access it, to request its deletion, and to withdraw any consent you have given for its collection or sharing, in addition to the other rights described in this section. We do not sell consumer health data, and we do not share it with third parties for advertising purposes. You may exercise these rights by contacting us at the email address below.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have the right, subject to applicable law, to access, rectify, or erase your personal information; to restrict or object to our processing of it; to receive a copy of it in a portable format; to withdraw any consent you have previously given, without affecting the lawfulness of processing before that withdrawal; and to lodge a complaint with your local data protection supervisory authority. Because the Service is operated from the United States, your information will necessarily be transferred to and processed in the United States as described above.
You can exercise the rights described in this section at any time by using the relevant controls in Settings, or by emailing us at zare.appdev@gmail.com. We will take reasonable steps to verify your identity before fulfilling a request that requires verification, and we will not charge a fee for a reasonable request unless applicable law permits us to do so.
California Civil Code Section 1798.83, known as the "Shine the Light" law, permits California residents to request information about the disclosure of their personal information to third parties for those third parties' own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes, and we have not done so in the preceding calendar year.
Some of the information Zare generates about you, including behavioral patterns and inferences that touch on mental or emotional wellbeing, may be considered sensitive personal information under certain privacy laws. We limit our use of this information to providing, maintaining, and improving the Service for you, and we do not use it to infer characteristics about you for any purpose unrelated to the Service, disclose it for cross-context advertising, or sell it under any circumstances.
Zare is not a health care provider, health plan, or health care clearinghouse, and it is not a "covered entity" or "business associate" as those terms are defined under the Health Insurance Portability and Accountability Act ("HIPAA"). Information you share with Zare is not treated as, and does not receive the specific protections afforded to, "protected health information" under HIPAA. If you are looking to store or share information with a health care provider in a manner protected by HIPAA, Zare is not the appropriate tool for that purpose.
We do not use facial recognition, voiceprint analysis, or any other technology to extract biometric identifiers, such as facial geometry or voiceprint data, from any photograph or audio you provide. Photographs you attach to a conversation are used solely to allow our artificial intelligence service provider to generate a conversational response and are not analyzed or retained for identification or verification purposes.
We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and at rest and database-level access controls designed to ensure that only you, and our systems where strictly necessary to operate the Service, can access your data. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and take other steps as required by applicable law.
We do not currently send promotional or marketing emails or text messages. If we introduce marketing communications in the future, we will only send text messages to a phone number you provide if you separately opt in to receive them, and you will be able to opt out at any time by following the instructions included in the message or by contacting us. Transactional communications necessary to operate your account, such as password reset emails, are not considered marketing and cannot be opted out of while you maintain an account.
The Service may direct you to third-party destinations outside of our control, such as your device's operating system settings, the App Store, or an external crisis support line. Those third parties operate under their own privacy practices, which we do not control and which are not covered by this Policy. We encourage you to review the privacy practices of any third-party service before providing it with information.
Some web browsers offer a "Do Not Track" signal. Because the Service is a mobile application rather than a website, and because we do not track your activity across unaffiliated third-party services for advertising purposes, we do not currently respond to Do Not Track signals.
We determine your eligibility to use the Service based on the date of birth you provide when creating your account. We have no independent means of verifying the accuracy of that information, and we rely on you to provide it truthfully. If we later determine that a user provided an inaccurate date of birth to circumvent our eligibility requirement, we reserve the right to immediately suspend or terminate the associated account.
We reserve the right to modify, update, or replace this Policy at any time, at our sole discretion, for any reason, with or without prior notice. Any revised Policy is effective immediately upon being posted within the App, and the "Last updated" date at the top of this Policy reflects when it was most recently revised. You are responsible for reviewing this Policy periodically. Your continued use of, or continued access to, the Service at any time after a revised Policy has been posted constitutes your acceptance of that revised Policy in its entirety, whether or not you have actually reviewed it.
If you have questions, requests, or concerns about this Policy or our data practices, please contact us at zare.appdev@gmail.com. We aim to respond to all inquiries within a reasonable time.