Your Privacy Matters
Privacy Policy
Last updated: March 1, 2026
ZDRAVO AI is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information. We believe in transparency: we collect only what we need to provide our service, and we never sell your data.
What We Collect
Information you provide and we generate
📄 Your Memories
The AI conversations and content you save to ZDRAVO. This is the core of our service— we store this so you can search and retrieve it later.
👤 Account Information
Email address (for authentication), profile information, and subscription details. We use Google OAuth for authentication—we never see your Google password.
📊 Usage Analytics
Anonymous data about how you use ZDRAVO (e.g., number of saves, searches) to improve our service. This data cannot identify you personally.
💳 Payment Information
Handled entirely by Stripe. We never see or store your credit card numbers.
How We Use Your Data
The only ways we process your information
- ✓To provide the ZDRAVO service (storing, searching, and retrieving your memories)
- ✓To generate embeddings for semantic search (using OpenAI's API—content is processed but not retained by OpenAI)
- ✓To auto-tag and summarize memories (Pro feature—uses AI processing)
- ✓To send important service notifications (not marketing spam)
- ✕We do NOT sell your data to third parties
- ✕We do NOT use your memories to train AI models
- ✕We do NOT share your data with advertisers
Your Rights (GDPR/CCPA)
You control your data
📥 Right to Access
Request a copy of all data we have about you. Use the Export feature in your dashboard anytime.
🗑️ Right to Deletion
Delete your account and all associated data at any time from your profile settings.
✏️ Right to Rectification
Update or correct any information in your profile at any time.
🚫 Right to Object
Opt out of non-essential communications and analytics (contact us).
Third-Party Services
We use these services to run ZDRAVO:
SupabaseDatabase & Authentication
VercelHosting & Infrastructure
StripePayment Processing
OpenAIEmbeddings for semantic search only
Google OAuthAuthentication
Data Retention
- • Active accounts: Data retained until account deletion
- • Deleted accounts: All data purged within 30 days
- • Backups: Encrypted backups retained for 90 days, then permanently deleted
- • Analytics: Anonymized after 1 year
Questions About Privacy?
Contact our Data Protection Officer at privacy@zdravo.ai
For Data Processing Agreements (Teams/Enterprise), email legal@zdravo.ai