Last updated August 11, 2026

Privacy Policy

Zonlo is built to be a private space. This policy explains, in plain words, what the app and this website touch, why, and what you can do about it. It is written to be read, not just filed away.

Who we are

Zonlo is run by Corbyn Ledbetter, one person working alone, based in Texas, United States ("Zonlo", "we", "us", or "our"). For any privacy question, or to use one of the rights described below, write to support@zonlo.app. We are the data controller for the personal data described here.

What we collect, and why

Account information

When you sign in, our authentication provider Clerk processes your email address (or your Apple or Google account identifier) to create and secure your account. We use it only to identify you, keep your account safe, and reply if you write to us. You can use a limited part of the app as a guest without an account.

What you say in a conversation

When you speak, your iPhone turns your speech into text by itself. That text is sent to our server over an encrypted connection so we can check it and send back feedback. To produce the feedback we pass the text to Google's Gemini API. What we get is the text of what you said and nothing else. The audio itself never leaves your phone, and we never receive, store, or hear a recording of your voice. Guests send the same text, capped by how often one network can send it, but it is not tied to any account.

Purchases

Subscriptions are handled by Apple and managed through RevenueCat. We are told whether your subscription is active and given an anonymous purchase code. We never see your card number or payment details. Those stay with Apple.

What stays on your phone

Your progress, your saved PDF reports, and your language and reminder settings all live on your iPhone. Reminders are set by the app on the phone itself, and nothing about them is sent to us.

This website

This site uses no advertising cookies, no analytics cookies, and nothing that follows you between sites. Cloudflare, who host it, keep ordinary server logs including your IP address, so the site loads securely and cannot be abused. There is no signup form on this site and no mailing list.

Apple App Store privacy label

The App Store shows a "privacy label" summing up what Zonlo collects. Here is the same information, in one place. Apple sorts data into three groups:

A recording of your voice is never collected. Your phone turns your speech into text and only the text is sent. This is what we declare to Apple. The sections above and below explain each item in full.

How the law lets us use your data (legal bases)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (running your account and checking what you say), legitimate interests (keeping the service secure and free of abuse), consent (notifications), and legal obligations where they apply. You can withdraw consent at any time.

Who we share data with

We do not sell your personal data, and we do not share it for advertising that follows you into other companies' apps and sites. We use a small set of providers, each given only the minimum it needs to do its job:

We may also hand over data if the law requires it, to protect our rights or someone's safety, or if the business changes hands, in which case this policy keeps applying.

International transfers

Our servers and providers are based in the United States. If you use Zonlo from outside the U.S., your data is transferred to and processed in the U.S. Where required, our providers rely on Standard Contractual Clauses or equivalent safeguards for these transfers.

How long we keep it

Account data is kept for as long as your account is active. By default the text of what you said is used to produce your feedback and then discarded. It is never kept as a lasting profile of you.

If you turn on Help improve accuracy in Settings, that text is saved so we can check our feedback is right. Saved text is deleted automatically after 12 months. A small number of replies are kept longer as examples we test our feedback against; when they pass 12 months we remove your account code from them, so the example is no longer labelled with who said it. We do not edit the words themselves, so if you happened to say something identifying out loud, that stays in the example. If you would rather none of your replies were kept as examples, turn off Help improve accuracy, or write to us and we will remove them.

We keep encrypted backups of our database for 90 days. Something you deleted, including a deleted account, can still sit in a backup for up to that long before it ages out. Our providers may also hold a copy briefly, as their own policies describe.

When you delete your account we remove your account record, everything you have saved on our server, and your subscription status.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email support@zonlo.app and we will respond within the time the law requires. We will not discriminate against you for exercising a right.

Getting a copy of your data. You do not have to write to us for this one. In the app, under Settings → Your data → Get a copy of my data, you can download everything our server holds about you as a single file you can keep or move elsewhere. Your progress and saved reports live on your phone and are yours already.

California residents (CCPA/CPRA). We do not sell or share your personal information, and we have not done so in the past 12 months. You have the right to know what we collect, to request deletion or correction, and to be free from discrimination for exercising these rights. Because we do not sell or share, there is no "Do Not Sell" action to take, but you can still write to us with any request.

Security

Data travels over encrypted (HTTPS) connections, access to our systems is limited, and we keep the amount of personal data we hold deliberately small. No method of transmission or storage is perfectly secure, but keeping your voice on your device and holding little data is our first line of defense.

What we never do

• No advertising, and no advertising code in the app.
• No following you across other apps or websites.
• No selling or sharing your personal data for marketing.
• No storing your voice, ever.

Children

Zonlo is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, contact us and we will delete it.

Deleting your data

You can delete your account at any time in the app, under Settings → Delete my account and data. That erases everything our server holds about you, closes your account, and wipes everything the app kept on your phone. Nothing is left for you to ask us about afterwards, though a copy can remain in an encrypted backup for up to 90 days before it ages out. If you would rather we did it by hand, email support@zonlo.app.

Changes to this policy

If this policy changes, we will update this page and the date at the top. For meaningful changes we will provide notice in the app or by email where appropriate. Where a change requires your consent under applicable law, we will ask for it before that change takes effect. We encourage you to review this page periodically.

Contact

Questions about privacy, or a request about your data? Email support@zonlo.app. We read every message.