ZDO Privacy Policy

Effective date: 2026-11-02. This policy explains what ZDO collects, why, who else handles it, how long it is kept and how you can delete it. ZDO is operated by Mohamad Aslan, an individual (not a registered company) in Ghana, referred to here as “we”. Questions: support@zdomemories.com.

1. Data we collect

• Account data: your name and e-mail address. If you register with a password, we store only a salted one-way hash of it (never the password). If you sign in with Google, Google gives us your e-mail address, name and a unique Google account identifier (the sign-in asks only for “openid”, “email” and “profile”); we do not receive your Google password, contacts or files.
• Your content: the photos, videos, voice notes and text you add, and the titles, descriptions, places (text you type), albums, order and favourites you create. For photos we read only the date and time the photo was taken from its metadata (never GPS position, camera model or serial number) so memories can be placed on the right date. Voice notes and videos are stored as files; we do not analyse them.
• Private Vault: memories you place in the Private Vault are stored like your other memories, flagged as private (see section 5).
• Subscription data: whether your account has an active ZDO Pro subscription and until when. Payment is handled by Google Play; we never receive your card or bank details.
• Security and operating records: sign-in sessions, failed-login counters and rate-limit counters (which expire automatically), the IP address and time of requests in server logs, and the support e-mails you send us.
• Optional device notification token: if you enable notifications, a token that identifies your device may be stored so a notification can be delivered. At the date above ZDO does not send push notifications. The optional evening reminder is created on your device and sends nothing to us.

2. Data we do not collect

• We do not read your device location: ZDO never accesses GPS. A place is only the text you type; it is turned into map coordinates as described in section 3.
• We do not access your contacts, call history, SMS, microphone or camera in the background, or your advertising identifier. The camera and microphone are used only when you choose to take a photo, record a video or record a voice note.
• ZDO contains no advertising software and no analytics or tracking software of its own (the subscription software of RevenueCat described in section 3 handles purchases only), and it does not use artificial intelligence on your memories. Text produced by earlier AI features, if any, stays with your memory and is deleted with it.

3. Who else handles data

We rely on these providers. We share only what each needs for its function, and we never sell data or share it for advertising.

• Hosting: our server runs on DigitalOcean infrastructure in Frankfurt, Germany. Your account data, content and backups are stored there.
• E-mail delivery: Brevo (Sendinblue SAS, France) sends our sign-up, verification and password-reset e-mails; it receives your e-mail address and the message content (for example the code).
• Google: provides Google sign-in if you choose it, and Google Play, which processes subscription payments and tells us whether a subscription is active.
• RevenueCat, Inc. (USA): manages subscription status for us. It receives an identifier of your ZDO account, your purchase information from Google Play and basic technical data such as your IP address and device type, and tells our server whether Pro is active.
• OpenStreetMap: to place a memory on the map, our server sends the place text you typed to the OpenStreetMap Nominatim service to obtain coordinates (it sees our server’s address, not your account). The map preview in the app loads map tiles directly from OpenStreetMap, which therefore sees your device’s IP address and the map area you view.
• Let’s Encrypt provides our security certificate; it receives no user data.
• Before November 2026 ZDO’s backend ran on another hosting platform. Your account and memories were moved to our own server; nothing was added to them in the move. Versions of the app that you have not updated yet may still use that previous hosting platform (Emergent): it then stores what you add with those versions, and the Google sign-in of those versions passes through it. Those older versions may also still offer features that the current version no longer has. Update the app from Google Play to be served from our own server.

4. Where your data is stored and international transfers

Data is stored on servers in Frankfurt, Germany. Our providers listed above may process data in the European Union and the United States. Where the law requires safeguards for transfers, we rely on the mechanisms those providers offer (such as standard contractual clauses).

5. The Private Vault

The Private Vault lets you hide sensitive memories behind a PIN or your device’s fingerprint / face check; hidden memories do not appear in your normal lists, and the app locks itself after inactivity. The Private Vault is an access lock inside the app. It is not end-to-end encryption: the files are stored on our server like your other memories, protected in transit by HTTPS, and our systems can technically access them. We do not look at your memories, and access to the server is restricted to the operator. Do not rely on the Private Vault to protect content from lawful requests, from anyone who knows your account password, or from someone who can unlock your device. We cannot see your PIN.

6. How long we keep data, and deleting it

• We keep your account and content until you delete it. Inactive accounts are not deleted automatically.
• Delete in the app: Settings, Privacy & Security, “Delete account permanently”. This removes your account, albums, photos, videos, voice notes, generated videos, sessions and device tokens from our live systems immediately and cannot be undone. Single memories, photos and videos can also be deleted one by one.
• Delete without the app: see https://zdomemories.com/delete-account. We confirm that the request comes from the e-mail address of the account and complete it within 30 days.
• Backups: we keep short-lived backup copies of the database. Deleted data can remain in those backups for up to 35 days, then disappears when the backups are replaced. Backups are not used for any other purpose.
• Deletion record: when we delete an account on request we keep a minimal record that it was done: the date, a one-way hash of the account and e-mail identifiers (never the address itself), who handled it and how the request was verified. It contains none of your content. We keep it to show that your request was honoured and to avoid mistakes.
• Logs: server logs (including IP addresses) are rotated automatically and are kept only for security and troubleshooting.
• Records we may have to keep: subscription transactions are kept by Google Play and RevenueCat under their own policies; deleting your ZDO account does not cancel a Google Play subscription, which you must cancel in Google Play first.
• Support e-mails are kept for as long as needed to answer you and resolve problems.

7. Your rights

You can see and edit your name and memories in the app, export a copy of your memories (Settings, Privacy & Security, “Export my data”), and delete your account at any time. Depending on where you live (for example in the European Economic Area, the United Kingdom or California) you may have additional rights: to access, correct, delete, restrict or object to the use of your data, to portability, and to complain to your data protection authority (in Ghana: the Data Protection Commission). Write to support@zdomemories.com to use them; we answer within 30 days. We process your data to provide the service you asked for (contract), to keep it secure and prevent abuse (legitimate interests), and, for optional features such as notifications, with your consent, which you can withdraw at any time.

8. Security

Data travels over HTTPS. Passwords are stored as salted hashes. Sign-in is rate limited and locked after repeated failures. Media links are signed and expire. Access to our server is limited to the operator, by cryptographic keys, behind a firewall, and backups are verified regularly. No system is perfectly secure; if we learn of a breach affecting you we will tell you and the authorities as the law requires.

9. Children

ZDO is not directed to children under 13 (or the higher minimum age of digital consent in your country), and we do not knowingly collect their data. If you believe a child has an account, write to support@zdomemories.com and we will delete it.

10. Changes to this policy

If we change this policy in a way that matters to you, we will show a notice in the app or send an e-mail before the change takes effect, and update the effective date above.

11. Google user data (Limited Use)

ZDO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google e-mail address, name and account identifier only to create your ZDO account and sign you in, we do not transfer them to others except as needed to run the service as described above, we do not use them for advertising, and no human reads them except for security or support with your permission.

12. Contact

Mohamad Aslan, Ghana. E-mail: support@zdomemories.com.