Zenimal

Zenimal Privacy Policy

Effective Date: April 17, 2026

Zenimal ("we," "us," or "our") operates the Zenimal mobile application and the zenimals.com website. This Privacy Policy describes how we collect, use, and protect information when you use the Zenimal app, a companion application for the Zenimal meditation device.

Zenimal is intended for users age 13 and older. The Service is not directed at children under 13 and we do not knowingly collect personal information from children under 13. This policy is designed to comply with the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR) where applicable.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address -- used for authentication and account recovery
• Display name, first name, and last name -- used to personalize your experience
• Profile photo -- optional, stored via Firebase Authentication

We do not collect your date of birth or age.

1.2 Device Pairing Data

When you pair a Zenimal meditation device with the app, we collect:

• BLE device identifier -- a Bluetooth Low Energy address used to connect to your specific device
• Device name and model -- the user-assigned name and hardware model of your Zenimal
• Track assignments -- which meditation tracks are loaded on each of your device's slots, along with associated LED color and vibration preferences

This device data is stored both locally on your mobile device and in your user account on our servers (Firebase Firestore) to enable syncing across sessions.

1.3 Usage Data

• Recently played tracks -- timestamps and references to meditation tracks you have listened to
• Search history -- recent search terms used within the meditation library
• App walkthrough progress -- whether you have completed onboarding tutorials
• Notification preferences -- your choices for push and email notifications

1.4 Recording Studio and AI-Generated Content

If you use the Recording Studio, the following is collected:

• Voice recordings -- audio captured through your device's microphone when you record a custom meditation. Recordings are stored in your account on Firebase Cloud Storage
• AI-generated meditation scripts -- if you use the AI Script Generator within the Recording Studio, prompts (meditation type, duration, theme) are sent to an AI service. Generated scripts are stored in your account for quality analysis
• Recording metadata -- title, duration, background music selection, and creation date for each saved recording

AI-generated meditation requests are subject to rate limits and usage tracking to prevent abuse.

1.5 Subscription Information

We store your subscription plan type (free, trial, premium, or premium family), billing cycle preference, subscription source (App Store, Google Play, or web), and subscription expiration date. We do not collect or store payment card numbers, bank account details, or other financial information. All payment processing is handled by Apple (App Store), Google (Google Play), or Appstle (Shopify), and is governed by their respective privacy policies.

1.6 Analytics and Diagnostics

We collect:

• Firebase Analytics -- anonymized app usage events such as screen views and feature interactions
• Firebase Crashlytics -- crash reports and diagnostic data to help us improve app stability

These services do not collect personally identifiable information.

2. Information We Do NOT Collect

We want to be explicit about what Zenimal does not collect:

• Location data -- the app does not request or store GPS, Wi-Fi, or cell-tower location
• Contacts -- we do not access your device's contact list
• Health or biometric data -- the Zenimal device does not contain biometric sensors; no heart rate, breathing, or other physiological data is collected
• Financial data -- payment details are handled entirely by platform stores (Apple, Google, Appstle)
• Camera -- the app does not access your camera. The microphone is used only within the Recording Studio for creating custom meditations, and only with explicit user action (pressing the Record button). Microphone access requires OS-level permission and is never used passively or in the background
• Advertising identifiers -- we do not use IDFA, GAID, or any advertising tracking

3. How We Use Your Information

Purpose	Data Used
Account creation and authentication	Email, name, profile photo
Device pairing and management	BLE device ID, device name, track assignments
Personalized meditation experience	Recently played tracks, search history
AI meditation generation	Meditation prompts, generated scripts
Subscription management	Plan type, billing cycle
App improvement and stability	Analytics events, crash reports
Communications	Email, notification preferences

4. Third-Party Services

Zenimal uses the following third-party services to operate. Each service processes data as described below:

Service	Provider	Purpose	Data Shared
Firebase Authentication	Google LLC	User sign-in and account management	Email, name, profile photo, UID
Cloud Firestore	Google LLC	Database for user data, device info, meditation library	All user-provided data listed in Section 1
Firebase Cloud Storage	Google LLC	Media file storage (meditation audio)	Audio files associated with custom meditations
Firebase Analytics	Google LLC	Anonymized usage analytics	App events
Firebase Crashlytics	Google LLC	Crash reporting and diagnostics	Crash logs, device model, OS version
Anthropic Claude API	Anthropic PBC	AI meditation script generation	Meditation name, category, and duration
RevenueCat	RevenueCat Inc.	Subscription entitlement management	Anonymous app user ID, subscription status, purchase receipts. RevenueCat does not receive your name, email, or other personal information
Apple App Store / Google Play	Apple Inc. / Google LLC	In-app subscription billing	Managed by platform; Zenimal does not receive payment details
Appstle	Appstle Inc.	Shopify subscription management	Managed by Shopify/Appstle; Zenimal does not receive payment details

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

5. Age Eligibility and Children's Privacy

Users under 13 may not create an account. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@zenimals.com so we can delete it.

The physical Zenimal device is a consumer audio product that can be used by listeners of any age. The companion app and cloud services covered by this Privacy Policy, however, are directed at and intended for use only by individuals 13 and older.

6. Device Communication (BLE and WiFi)

The Zenimal app communicates with Zenimal meditation devices via Bluetooth Low Energy (BLE) and local WiFi Direct. During this communication:

• The app reads and writes the device's BLE identifier to establish and maintain the pairing connection
• Audio track data is transferred from the app to the device over WiFi Direct (preferred) or BLE (fallback). WiFi transfer creates a temporary direct connection between your phone and the Zenimal device -- no internet or router is involved
• Device configuration (LED colors, vibration settings) is sent from the app to the device via BLE
• Device status information (firmware version, storage capacity, battery level) is read from the device via BLE

The Zenimal device does not contain biometric sensors, microphones, or cameras. No biometric, health, or physiological data is collected from the device at any time. Device pairing information is stored locally on your phone and in your Firebase Firestore account. WiFi Direct connections are ephemeral and do not transmit data over the internet.

7. Data Storage and Security

Your data is stored on Google Firebase infrastructure (Cloud Firestore and Cloud Storage), hosted in the United States. We implement the following security measures:

• Firebase Security Rules enforce that users can only read and write their own data
• All data transmission between the app and Firebase is encrypted via TLS
• Administrative access is restricted to authorized personnel via role-based access controls
• AI usage tracking data is server-side only and inaccessible to clients

8. Data Retention and Deletion

We retain your account data for as long as your account is active. You may delete your account and all associated data at any time through the app (Profile > Delete Account) or by contacting us at privacy@zenimals.com.

When an account is deleted:

• Your user profile, device pairings, recently played history, search history, custom recordings, and saved meditations are permanently removed from our servers
• AI-generated scripts and usage tracking records associated with your account are deleted
• Your subscription entitlement data is removed from RevenueCat
• Your Firebase Authentication record is permanently deleted
• Anonymized analytics data that has already been aggregated cannot be attributed back to you and may be retained

Account deletion is irreversible. If you have an active subscription, canceling the subscription through your billing provider (App Store, Google Play, or zenimals.com) is separate from account deletion. Deleting your account does not automatically cancel an active subscription -- please cancel your subscription first if desired.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access -- request a copy of the personal information we hold about you
• Correction -- request that we correct inaccurate personal information
• Deletion -- request that we delete your personal information
• Data Portability -- request a machine-readable copy of your data
• Opt-Out -- opt out of targeted analytics through your device's operating-system privacy settings (iOS App Tracking Transparency; Android Ads and Diagnostics controls)

To exercise any of these rights, contact us at privacy@zenimals.com. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. The "Effective Date" at the top of this page indicates when the policy was last revised. Continued use of the app after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@zenimals.com
• Website: zenimals.com