Privacy policy.
Last updated: 2026-04-24. Short version: we collect only what we need to run the app, we do not sell your data, and your photos are not used to train anyone's models. This page is written in plain language; the longer legal version is coming before public launch.
What we collect
- Email address, when you sign in with Apple or Google. Used to identify your account and let you come back to it later.
- Reference photos that you choose to snap inside the app. These are stored on our backend so the pose generator can read them, and they are associated with your account so the generated references can be played back to you.
- Session metadata (the vibes you picked, the drama setting, timestamps) so we can show you your history.
- Purchase history if you subscribe to Zoppy Plus. Apple sends this to us through the standard subscription pipeline.
What we do not collect
- Location (precise or coarse).
- Contacts, browsing history, search history.
- Health, financial, or biometric data.
- Tracking data for third-party advertising.
Who we share data with
We use third-party vendors to run the service. They only see the minimum they need to do their job:
- Clerk (authentication): your email and user id.
- Convex (backend and storage): your user id, session metadata, and reference photos.
- fal.ai (image model provider): the reference photo URL and the pose prompt. The photo is sent for a single generation and is not stored by fal beyond their normal logs.
- RevenueCat (subscription infrastructure): your user id and purchase events.
We do not sell personal data. We do not share it with advertisers.
Your rights
- Delete: Profile → Delete account removes your photos, sessions, poses, and account row from our backend and Clerk. This is immediate.
- Export: email hi@zoppy.app and we will send you a copy of your data.
- Correct: update your email through your Apple or Google account.
Retention
We keep your data while your account is active. When you delete your account, everything is wiped immediately from our primary database; backup copies age out within thirty days.
Children
Zoppy is not directed to children under 13. If you believe a child has used Zoppy with your identity, email hi@zoppy.app and we will remove the account.
Contact
Questions: hi@zoppy.app. If you live in a region with privacy rights (EU, UK, California, etc.), you have the rights your laws give you. Email us and we will respond within thirty days.