privacy policy
draft. this page is waiting for legal review. effective [EFFECTIVE DATE].
Zoya keeps as much as it can on your Mac. This page says exactly what leaves it, where it goes, and what we keep. [LEGAL ENTITY] is responsible for your data.
what stays on your mac
These never leave your Mac:
- Your voice. Zoya turns speech into text right on your Mac, with a Whisper model that runs locally. The audio is not sent anywhere.
- Your memories. Things Zoya remembers about you are kept in one file on your Mac, ~/.zoya/memory.json, and nowhere else. Card numbers, passwords and one-time codes are refused before anything is saved. When a memory helps answer you, it travels with that request through the relay to OpenAI, like anything else you ask, and nothing is kept there. Delete a memory on the Hub's Memory page and it's gone from the file.
- Your history. The Hub's list of what you asked and what Zoya did is read from files on your Mac.
- Your license key, which is kept in your Mac's Keychain.
- Screenshots. When a task needs to see your screen, the picture is held in memory for that request and never written to disk.
- Problem reports. If you ask for one, Zoya saves it to your Desktop with personal details removed. It is only sent if you send it.
what leaves your mac, and why
To understand a request and act on it, Zoya sends the text of what you asked, and, when a task needs it, what's on the relevant screen or web page, through Zoya's relay to the services below. Your recorded voice is never part of it.
Every request to OpenAI is sent with storage turned off (store set to false). Zoya's app sets it, and the relay sets it again on every request.
what our relay keeps
The relay is Zoya's own small server. It checks your license, forwards the request, and counts what it cost. It keeps:
- A SHA-256 hash of your license key, never the key itself.
- Your usage for each month, in cents, and the number of requests.
- The IDs Dodo gives your subscription and your customer account, and whether your key is active.
- For beta keys only, the email address the key was sent to.
- Short operational logs: the first 8 characters of the key's hash, which service was called, how long it took, how many tokens or characters it used, and what it cost.
what our relay never keeps
The relay does not store your license key, the text of your requests, what was on your screen, or the answers that come back. It passes them through and forgets them.
who processes your data
These companies handle data for Zoya, each for one job:
- OpenAI: the language models that understand your request and plan the steps, with storage turned off.
- Amazon Web Services (Amazon Polly, in the ap-south-1 Mumbai region): turns Zoya's replies into speech. It receives the words Zoya is about to say.
- Vercel (AI Gateway): carries requests to Jev, a model made by TypeSafe AI that Zoya uses to check what's on screen while it works. It receives a text description of the screen and short questions about it.
- Cloudflare: runs the relay.
- Neon: the database behind the relay (the hash, usage and subscription rows above) and behind this website (the waitlist and the visitor counter).
- Dodo Payments: our merchant of record. Dodo takes your payment, handles tax and receipts, and emails you your key. Dodo holds what you give it at checkout, such as your email address and payment details. We see only the subscription and customer IDs Dodo sends the relay.
other connections zoya makes
- Open-Meteo, for the weather. Only the city name you ask about is sent.
- Hugging Face, once, to download Zoya's speech models when you first set it up.
- zoya.app, to check whether a new version of Zoya is available.
- The websites you ask Zoya to use, like any browser would, in Zoya's own browser profile on your Mac.
this website
- If you join the waitlist, we keep your email address to tell you when Zoya is ready.
- The visitor counter stores a random ID in your browser and counts it once. It is not linked to you.
- Vercel hosts the site and runs Vercel Web Analytics.
- The demo video loads from YouTube (youtube-nocookie.com) only after you press play.
how long we keep it
Relay records and waitlist emails are kept while your subscription or waitlist spot is active, and for [RETENTION PERIOD] after. What stays on your Mac is yours to delete.
your choices
You can ask us what we hold about you, and ask us to correct or delete it. Write to us and we'll answer. Depending on where you live, you may have more rights, including to complain to your data protection authority.
We don't sell your data, and we don't use it for advertising.
contact
Questions about this page? Write to sahuankit453@gmail.com.
Post: [LEGAL ENTITY], [POSTAL ADDRESS].