Privacy Policy

We collect the following categories of information:

• Account Data: Email address, hashed password, account creation date.
• Profile Data: Name, age, biographical information you provide during onboarding and interactions.
• Conversation Data: Messages exchanged with your AI companion, stored to enable persistent memory features.
• Usage Data: Pages visited, features accessed, session duration, device type, IP address, browser type.
• Payment Data: Transaction records (processed via Stripe — we do not store raw card numbers).
• Hardware Data: Device connection status and interaction events if you use the Haptic Sync feature. No biometric data is collected.
• Shipping Data: Mailing address, solely when you purchase a Physical Letter. Not used for other purposes.

• To provide, personalize, and improve the Zanmi platform and AI companion experience.
• To power persistent memory and relationship phase progression features.
• To process payments and fulfill subscription or add-on purchases.
• To send transactional emails (account verification, password reset, purchase confirmation).
• To monitor for abuse, enforce our Terms of Service, and comply with legal obligations.
• To analyze aggregate usage patterns — never at an individual-identifiable level for advertising purposes.

We do not sell your personal data to third parties. We do not use your conversation content to train third-party AI models.

Conversation history and profile data are retained for as long as your account remains active. Upon account deletion, we delete your personal data within 30 days, except where retention is required by law (e.g., financial records retained for 7 years per IRS requirements).

We use the following third-party processors, each with their own privacy policies:

• Supabase — Database and authentication (supabase.com/privacy)
• Stripe — Payment processing (stripe.com/privacy)
• ElevenLabs — Voice synthesis (elevenlabs.io/privacy)
• OpenRouter / NovitaAI — AI language and image generation
• Resend — Transactional email delivery
• Google Cloud Run — Application hosting

We use session cookies required for authentication. We do not use third-party advertising trackers or cross-site cookie networks. You may disable cookies in your browser settings, but this will prevent you from logging in.

Depending on your location, you may have the following rights:

• Access: Request a copy of all data we hold about you.
• Deletion: Request deletion of your account and associated data.
• Correction: Request correction of inaccurate personal data.
• Portability: Request your data in a machine-readable format.
• Opt-Out (CCPA): California residents may opt out of any data sharing (we do not sell data, but you may exercise this right).

To exercise any of these rights, email admin@zanmi.app with the subject line "Privacy Request".

Zanmi is strictly for adults aged 18 and older. We do not knowingly collect data from minors. If we become aware that a user under 18 has created an account, we will immediately delete their data and terminate their account. See our age verification process in the Terms of Service.

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), and row-level security in our database. However, no system is completely secure. Please use a strong, unique password and enable any available 2FA options.

We may update this policy as our services evolve. When material changes occur, we will notify registered users by email. Continued use of Zanmi after changes constitutes acceptance of the updated policy.

For privacy inquiries:
KnotStranded LLC — Privacy Office
Camarillo, California
admin@zanmi.app