This Privacy Policy describes how 4thScene LLC ("Zamo", "we", "us") collects, uses, and discloses information in connection with the Zamo mobile application and web service (together, the "Service"). By using the Service you agree to the practices described below. This policy is provided in good faith but is not a substitute for tailored legal review; consult counsel before relying on it.
1. Information we collect
Account & profile
When you create an account we collect your email address, display name, and any profile fields you choose to provide (avatar, time zone, locale, notification preferences). Authentication is handled by Supabase Auth; we do not store passwords ourselves.
Goals, journeys, and tasks
Content you create — goal descriptions, milestones, tasks, journal entries, notes, and the prompts you submit to the in-app AI assistant — is stored on our behalf in our Supabase project so we can render it back to you, generate plans and reminders, and compute your daily PIX score.
Device and usage data
We log basic technical data needed to operate the Service, including device type, OS version, app version, IP address, language, and anonymized event analytics (page views, feature usage). On mobile we register an FCM device token to deliver push notifications.
Payment data
Subscriptions are processed by Stripe. We do not see or store full card numbers or bank credentials. We retain subscription metadata (plan, status, current period, last four of card) returned by Stripe webhooks.
2. How we use information
- To operate, maintain, and improve the Service
- To generate AI-assisted plans, reminders, and progress insights
- To deliver email and push notifications you have opted in to receive
- To process subscription payments and prevent fraud
- To debug, secure, and monitor system health
- To comply with legal obligations and enforce our Terms
3. AI processing
When you ask Zamo to generate or refine a journey, the prompt and a minimal context window are sent to a third-party large language model (currently OpenAI, Anthropic, and/or Google). We instruct these providers not to use your data to train their models. Do not include sensitive information you wouldn't want processed by a third-party AI.
4. Sharing
We share information only with:
- Service providers under contract (hosting, email, analytics, AI models, payment processing) who are bound by confidentiality and data-processing obligations.
- Authorities when required by law, subpoena, or to protect rights, property, or safety.
- A successor entity in connection with a merger, acquisition, or sale of assets, in which case continuing privacy commitments will be communicated to you.
We do not sell personal information.
5. Data retention
We retain account and content data for as long as your account is active. You can delete a journey, task, or journal entry at any time from within the app. Closing your account triggers deletion of your personal content within 30 days, except where retention is legally required (e.g. tax records, fraud prevention).
6. Your rights
Depending on your jurisdiction (GDPR, CCPA, etc.) you may have the right to access, correct, port, or delete personal data we hold about you, and to object to or restrict certain processing. To exercise these rights email privacy@zamo.ai; we will respond within the period required by applicable law.
7. Security
Data in transit is encrypted via TLS. Data at rest in Supabase is encrypted using industry-standard mechanisms. Row-level security policies restrict access to your data to your authenticated session. No system is perfectly secure; please use a strong, unique password and keep your devices safe.
8. Children
Zamo is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
9. International transfers
Zamo is operated from the United States. By using the Service you consent to your information being transferred to and processed in the United States and in any country where our service providers operate.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
11. Contact
Questions or requests: privacy@zamo.ai. 4thScene LLC, mailing address available on request.