1. Who we are
Our apps and the website zumy.ai are provided by Zumy (“we”, “us”). Zumy is not yet incorporated and is currently run by its founder. When the company is formed, this page will name it and the company will take over these commitments. You can reach us at privacy@zumy.ai.
2. What we collect
- Account details: your name, email address and sign-in method (for example Sign in with Apple or Google). If you use Sign in with Apple and hide your email, we only see the relay address Apple gives us.
- What you give the apps: questions, messages, files you upload, voice in lessons, and settings you choose.
- Purchases: if you subscribe, the App Store, Google Play or our payment provider handles your payment. We receive a record of the purchase, never your full card number.
- Device and diagnostics: device type, operating system, app version, language, crash reports and performance data, so we can fix problems.
- Usage: which features are used and how often, in a form that is not used to build an advertising profile.
We do not collect your precise location, contacts or photos unless a feature clearly asks for them and you agree.
3. How we use it
- To run the apps and give you what you asked for.
- To keep your account secure and prevent abuse.
- To fix bugs and improve the apps.
- To contact you about your account, and, only if you agree, about new features.
- To meet our legal obligations.
We do not sell your personal information. We do not show third-party ads, and we do not track you across other companies' apps or websites.
4. AI processing
Our products use large language models and speech models. Some are run by trusted providers who process your request on our behalf. They may only use the data to answer your request, under contracts that forbid them from training their models on it.
We do not use your private content (messages, files, voice) to train AI models unless you choose to opt in. Children's content is never used for training.
5. Who we share with
We share information only with:
- Service providers who help us run the apps: cloud hosting, AI model providers, email delivery, crash reporting and payment processing. They act on our instructions.
- App stores (Apple and Google) for purchases and app distribution.
- Authorities, if the law requires it or to protect people's safety.
- A future owner, if Zumy is reorganised or acquired, who must keep the promises in this policy.
Sola
Browsing stays on your device. Your history, bookmarks and open tabs are stored on your device. Spaces and threads you save are stored in your account so they appear on your other devices.
The Assistant reads a page only when you ask. When you ask a question, we send the question and the relevant text of the current page (or the tabs you choose) to our servers and to the AI provider that writes the answer. Page text is used to answer you and is not stored in our logs.
Incognito. AI chats in incognito windows are not saved, and those requests are stripped of identifying details.
Actions on your behalf. When Sola acts for you in Computer mode, purchases, sending messages and deleting always need your approval. Sola does not store your card details and is blocked from reading saved passwords.
Sign-in. Sign-in tokens never leave the browser and are stored encrypted on your device.
Maia
Voice. When you speak in a lesson, your audio is sent to our servers and turned into text so your tutor can reply and give feedback. Audio is deleted after it is processed unless a parent or adult learner turns on "Keep voice recordings" to listen back later.
Learning progress. We store your level, completed lessons, the words you find hard and your streak, so lessons can adapt to you.
Children. For a child we keep only what Maia needs: their first name, age, the language they learn and their progress. We never ask a child for a surname, school, address or location. See "Children's privacy" below.
Vega
Tasks and files. We store the goals you give Vega, the plan it makes, the steps it takes and the files it produces, so you can see them again, share them, or continue the work.
Separate workspaces. Each task's work happens in a workspace kept separate from other users' tasks. Only the outputs you keep are saved to your account.
Connected accounts. If you connect another service (for example email or GitHub), Vega uses that access only for the tasks you start, and you can disconnect it at any time.
Shared links. A task or creation you share by link can be opened by anyone with the link until you turn sharing off.
Children's privacy
Maia can be used by children. For children under 13 (or the age set by local law, such as 16 in some EU countries):
- A parent or guardian creates the account and gives consent before the child uses it.
- We collect only what the lesson needs: a first name or nickname, age band, learning progress and the text of spoken answers.
- There are no ads, no third-party analytics that track the child, no public profiles and no chat with other users.
- Children cannot make purchases without the parent's approval.
- A parent can see, download or delete the child's information at any time by writing to privacy@zumy.ai or from the parent settings in the app.
We follow the US Children's Online Privacy Protection Act (COPPA), the GDPR rules for children, and the App Store and Google Play families policies. If you believe we have a child's information without a parent's consent, contact privacy@zumy.ai and we will delete it.
How long we keep it
We keep your information while your account is open. When you delete your account, we delete your personal information within 30 days, except where the law requires us to keep records (for example purchase records for tax purposes), which are kept only as long as required. Backups are overwritten within a further 30 days.
Security
Data is encrypted in transit and at rest. Access inside Zumy is limited to people who need it to run the service. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects you.
Your rights
Wherever you live, you can ask us to: see the information we hold about you, correct it, download a copy, delete it, or stop using it for a particular purpose. Write to privacy@zumy.ai, or delete your account here. We answer within 30 days. If you are in the EU, UK or another place with a data protection authority, you can also complain to that authority.
International transfers
Our servers and providers may be in countries other than yours. When we move data across borders, we use legal safeguards such as standard contractual clauses.
Changes to this policy
If we change this policy, we will update the date at the top. If the change is significant, we will tell you in the app or by email before it takes effect.
Contact
Questions about privacy: privacy@zumy.ai. Anything else: support@zumy.ai.