1. Who We Are
Zenelia is a product of Avasy Inc., a federally incorporated company in Ontario, Canada (Corporation Number: 924562-6). When you use Zenelia, Avasy Inc. is the data controller responsible for your personal information.
We can be reached at: hello@zenelia.ai
2. What We Collect
Information you provide directly
- Account information: Your name and email address when you create an account
- Daily check-in data: Your mood rating (1–5) and sleep quality selection before each session — used only to personalise your training
- Password: Stored securely using industry-standard encryption — we never store plain-text passwords
Information collected automatically
- Session data: Your scores, domain performance, and session dates — used to track your progress and adapt difficulty
- Usage data: How you interact with the app (screens visited, features used) — used to improve the product
- Device information: Device type, operating system version — used for technical support and compatibility
Information we do NOT collect
- We do not collect your precise location. Zenelia Live stores a region for the sessions you join; see section 3, Zenelia Live.
- We do not access your contacts or microphone
- Zenelia uses your camera and photo library only if you choose a profile picture. The picture stays on your phone.
- We do not collect biometric data
- We do not collect financial information — all payments are processed by Apple via In-App Purchase
3. Zenelia Live
Zenelia Live is a weekly ten-minute session for each region, in which your correct answers water a shared garden.
What We Store
If you turn on Remind me for a session, we store which session it is and when you turned it on. Turning Remind me off deletes that record. On a phone where Zenelia is not allowed to show notifications, the switch shows off even when that record is still kept; allow notifications on that phone and you can turn Remind me off there.
When you open a session, we store which session you joined and when. While you are in it, the app checks in about every five seconds, and we keep the time of your last check-in, how many seconds you played and how many waters you earned. We also keep a few technical numbers that stop waters from being counted twice or faster than the limit.
We store your region with that session (for example Americas East). It is the region you chose in the app; if you have not chosen one, the app picks it from your phone's time zone. The time zone itself stays on your phone: only the region is stored.
The days on which a Live session counted toward your streak are saved with your training progress (the latest 60 of them). Your phone itself remembers the region you chose and the reminders it has set.
What Other Players Can See
Other players never see your name, your email address or anything else about you. Zenelia Live stores no names; your records are linked to your account only by its ID. The app shows you your own numbers only: the sessions you joined and how many times you watered. The garden shows a shared total, never who watered it. Today the app does not show how many people are in a session, a region or a week. If we ever show how many people take part, it will only ever be a total, never who.
Reminders
Reminders are notifications that your own phone plans and shows, 30 minutes and 1 minute before a session. We do not send them from our servers. Zenelia Live asks for permission to show notifications only when you turn Remind me on, never when the app opens. Signing out or deleting your account cancels them on that phone.
How We Use It
We look at totals to run Zenelia Live: how many people asked for a reminder, how many joined and how many of them were new, how long they played on average and how many waters were earned. We also count how many Live players train again in the following weeks, next to players who did not join Live. The page where we see these totals shows no names and no email addresses of players.
How Long We Keep It
A reminder record that you leave on is deleted one month after its session; a job does this once a day, so it can take up to a day longer. What stays is two totals for that session, how many reminders it had and how many of the people who had one took part; they hold no account IDs. Your record of a session you joined (the session, your region, when you joined, your last check-in, the time you played, your waters and the technical numbers) is kept for as long as you have your account. Session totals (how far each garden grew, the waters in total, how many people were active and the two reminder totals) are kept without a time limit; they hold no account IDs.
Your Copy
Export My Data in the app includes your Zenelia Live records: each session you joined (its date and time, its region, when you joined, the time you played and your waters) and each reminder that is still on record (the session, its region and when you turned Remind me on).
If You Delete Your Account
Your account is closed at once, and your training progress, with the Live days in it, is deleted from our servers right away. Your Zenelia Live records that are still there (reminder records, sessions joined, time played, waters and region) stay until the account itself is erased, within 31 days, and are deleted with it. On your phone, the app cancels your Live reminders and clears what it had saved. The session totals stay.
Who Else Receives It
No one new: Zenelia Live records are kept with the same database provider as the rest of your account.
4. How We Use Your Data
We use your data solely to provide and improve the Zenelia service:
- To create and manage your account
- To personalise your daily training sessions based on your mood, sleep, and performance history
- To calculate and display your cognitive progress over time
- To generate your monthly AI training report
- To adapt the difficulty of activities to your current performance level
- To send you important service communications (account updates, policy changes)
- To improve the app based on aggregated, anonymised usage patterns
We never use your data for advertising, never sell it to third parties, and never share it with data brokers.
5. AI Processing
Zenelia uses AI technology to power several features including your daily coaching message, adaptive difficulty, and monthly training report. Here is how this works:
- Provider: Zenelia uses the Anthropic Claude API to generate personalised coaching messages and training reports
- What is sent: When generating a coaching message or report, limited relevant information is sent to the AI — this may include your first name, mood rating, sleep rating, and aggregate performance scores. No sensitive personal identifiers are included
- Data retention by AI provider: Anthropic processes this data to generate responses and does not use it to train their models. Please refer to Anthropic's Privacy Policy for their data handling practices
- No medical diagnosis: AI-generated content in Zenelia is for informational and motivational purposes only. It does not constitute medical advice or diagnosis
6. Data Sharing
We share your data only in the following limited circumstances:
- Supabase: Our database and authentication provider. Your account data and session history are stored on Supabase's infrastructure. Supabase is SOC 2 Type 2 certified. See Supabase's Privacy Policy
- Anthropic: For AI-powered features as described above
- Apple: Payment processing for subscriptions and in-app purchases is handled entirely by Apple. We never see your payment card details
- RevenueCat: Subscription management. RevenueCat receives anonymised purchase data to manage your subscription status. See RevenueCat's Privacy Policy
- Legal requirements: We may disclose your data if required by law, court order, or to protect the rights and safety of our users
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
7. Data Storage & Security
Your data is stored on Supabase's secure cloud infrastructure in the United States. We implement the following security measures:
- All data in transit is encrypted using TLS 1.2 or higher
- All data at rest is encrypted using AES-256
- Passwords are hashed using bcrypt — never stored in plain text
- Row-level security ensures users can only access their own data
- Access to production systems is restricted to authorised personnel only
8. Data Retention
We retain your personal data for as long as your account is active. Specifically:
- Account data: Retained until you request deletion or close your account
- Session history: Retained for the lifetime of your account to maintain your progress history
- Deleted accounts: When you request account deletion, your personal data is permanently deleted within 31 days. Anonymised, aggregated data may be retained for product improvement purposes
9. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request permanent deletion of your account and all associated data
- Portability: Request your data in a machine-readable format
- Withdrawal of consent: Withdraw consent for data processing at any time by deleting your account
To exercise any of these rights, contact us at hello@zenelia.ai. We will respond to all requests within 30 days.
To delete your account: Open Zenelia → Profile → Privacy & Data → Delete My Account. Your data will be permanently removed from our servers within 31 days. If you change your mind within that window, email hello@zenelia.ai and we will recover it.
10. Children's Privacy
Zenelia is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@zenelia.ai and we will delete that information immediately.
For users between 13 and 18, we recommend parental guidance when using the app.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification.
Your continued use of Zenelia after any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
- Email: hello@zenelia.ai
- Company: Avasy Inc.
- Address: Ontario, Canada
We take privacy seriously and will respond to all enquiries within 5 business days.