Privacy Policy

Zentra (“Zentra”, “we”, “us”, “our”) is a personal productivity application accessible at usezentra.app. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service (the “Service”).

For privacy questions, contact privacy@usezentra.app.

Account information. When you create an account we collect your name, email address, and a hashed password. If you sign in with Google, we receive your email, name, and Google account identifier.

Content you create. Tasks, notes, plans, focus sessions, reminders, shopping lists, brain dumps, and any other data you enter into Zentra.

Security data. Two-factor authentication secrets (encrypted at rest), password reset and email verification tokens, and recovery codes (encrypted at rest).

Technical data. IP address, browser type, device type, timestamps, and minimal server logs needed to operate and secure the Service.

Cookies & local storage. We use first-party cookies and browser storage to keep you signed in, remember your theme/preferences, and synchronize state across windows. We do not use third-party advertising or tracking cookies.

We do not knowingly collect data from children under 13.

• Provide, maintain, and improve the Service.
• Authenticate you and protect your account (including 2FA and Google sign-in).
• Send transactional email — verification codes, password resets, security notifications.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal data and we do not use your content to train third-party AI models without your explicit, opt-in consent.

Some features (such as AI-assisted planning, calendar extraction, or shopping import) send the relevant content you submit to our AI processing providers solely to generate the requested output. These calls do not include your account credentials, and we instruct our providers not to retain your inputs for model training. You can choose not to use these features.

When you choose “Continue with Google”, we receive your basic profile (name, email, profile picture) and a Google account identifier so we can recognize you on return visits. We never receive your Google password and we never request access to your Gmail, Drive, Calendar, or any other Google service.

Zentra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share personal data only with:

• Service providers who host our infrastructure (cloud server, database, object storage) and send our transactional email — bound by confidentiality and data-protection terms.
• Legal authorities when required by valid legal process, or to protect the rights, safety, or property of Zentra, our users, or the public.
• Successors in the event of a merger, acquisition, or asset sale; you will be notified before your data becomes subject to a different privacy policy.

We do not sell or rent your personal data to anyone.

We use industry-standard safeguards including TLS in transit, password hashing with bcrypt, AES-256-GCM encryption for 2FA secrets and recovery codes, signed session tokens, and access controls on our infrastructure. No system is perfectly secure; if you discover a vulnerability please email security@usezentra.app.

We keep your account data while your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law or to resolve disputes and enforce our agreements. Backups are purged on a rolling schedule.

Depending on where you live, you may have the right to:

• Access, correct, or download a copy of your personal data.
• Delete your account and associated data.
• Object to or restrict certain processing.
• Withdraw consent for optional features at any time.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email privacy@usezentra.app.

Zentra is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US (and any other location where our service providers operate), which may have different data-protection laws than your country.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the Service before the changes take effect. The “Effective date” at the top reflects the most recent revision.

Questions or requests? Email privacy@usezentra.app.