Privacy Policy

Zagaza Labs Inc. (“Zagaza Labs”, “we”, “us”, or “our”) builds AI-powered products focused on health and wellbeing, including Lumina, an AI health coach. This Privacy Policy describes how we collect, use, and protect information when you visit zagaza.app or use our applications (together, the “Services”).

Our products are currently in pre-launch development. As we approach launch, we will update this policy to reflect exactly what each product collects and why, and we will notify users of material changes inside the product.

Information we collect

Account information. When you create an account, we collect the information needed to authenticate you, such as your name, email address, and credentials provided by a sign-in service you choose (for example, Sign in with Apple or Google). We use trusted authentication providers and do not store your passwords ourselves.

Information you provide. Our products are conversational. Information you choose to share, such as messages, goals, habits, and health-related details you log, is stored so the product can provide personalized coaching over time.

Usage and analytics data. We collect analytics about how the Services are used, such as feature usage, session length, device type, operating system version, and crash reports. We use this data in aggregate to understand what is working and to improve the Services.

Device and technical information. Like most services, we automatically receive certain technical information such as IP address, browser type, and timestamps when you interact with our website or apps.

How we use information

• To provide, personalize, and improve the Services
• To create and manage your account and authenticate you
• To understand usage patterns and improve product quality
• To communicate with you about the Services
• To protect the security and integrity of the Services
• To comply with legal obligations

We do not sell your personal information, and we do not use your health-related information for third-party advertising.

AI providers

Our products are built on large language models operated by third-party AI providers. When you interact with an AI feature, the content needed to generate a response, such as your message and relevant context, is processed by these providers under contractual terms that restrict how they may use it. We work with providers that commit to not using our customers’ data to train their models, and we send them only what is necessary to deliver the feature.

Service providers

We share information with a small number of service providers that help us operate the Services, such as cloud hosting, authentication, analytics, and customer communications. These providers process information on our behalf, under contract, and only for the purposes described in this policy.

Data security

We take security seriously. Information is encrypted in transit using TLS and encrypted at rest. Access to production systems and personal information is limited to authorized personnel who need it to operate the Services, and we review our practices as the company and products grow. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard measures.

Data retention and deletion

We retain personal information for as long as your account is active or as needed to provide the Services. You can request deletion of your account and associated personal information at any time by contacting us, and our products will include in-app deletion controls at launch. Some information may be retained where required by law or for legitimate business purposes such as fraud prevention.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below. We will respond within the timeframes required by applicable law.

Children

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us and we will delete it.

International transfers

We operate from North America and use service providers that may process information in other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page, and for material changes we will provide additional notice such as an in-app message or email.

Contact us

Questions about this policy or your information? Email us at hello@zagaza.app.