EFFECTIVE 18 SEPTEMBER 2026
Privacy Policy
This policy describes how ZEYVUNE handles information when you use its account, scan, guidance, progress, support, and payment features.
Information you provide
ZEYVUNE processes your email address, display name, password hash, optional country, profile and style preferences, messages, check-ins, roadmap activity, and photos submitted for analysis. Structured scan results, scores, recommendations, and progress records are saved to your account.
How information is used
Information is used to authenticate your account, provide scans and assistant responses, maintain your roadmap, enforce access limits, process payments, prevent abuse, and operate the service.
Photos and AI processing
For a photo scan, the application validates the upload and sends the image bytes, MIME type, and analysis instructions from the ZEYVUNE server to Google Gemini. The original image is not written to the ZEYVUNE application database, but web infrastructure may temporarily buffer an upload while the request is processed. ZEYVUNE stores the resulting structured analysis. Assistant and support messages, together with relevant account context, may also be sent to Google Gemini to generate a requested response.
Service providers
Google Gemini processes the AI requests described above. A configured SMTP delivery provider processes your email address and verification message when ZEYVUNE sends account email. Hosting and database infrastructure providers process service data as needed to run the application. Provider-specific retention beyond ZEYVUNE's systems is not stated here because it has not been verified for the production account configuration.
Payments and billing records
Paddle is the payment provider and Merchant of Record for purchases made through Paddle Checkout. Paddle collects and processes payment details; ZEYVUNE servers do not receive full payment-card details. ZEYVUNE stores checkout associations and relevant Paddle customer, subscription, transaction, event, amount, currency, and status references so it can provision purchases and maintain subscription access.
Cookies, public profiles, and logs
ZEYVUNE uses essential cookies for authentication, cross-site request-forgery protection, language preference, and referral attribution. The referral cookie lasts up to 30 days and the language cookie up to one year; the authentication cookie follows the configured login lifetime. If you make your profile public, leaderboards may show your display name, country, rank, and XP totals. Operational web and application logs can contain request metadata such as IP address, time, method, path, response status, referrer, and user-agent. The application does not include a separate advertising or analytics tracker.
Security and retention
Passwords are stored as BCrypt hashes. Authentication cookies are HttpOnly, SameSite=Lax, and Secure in production. Production traffic uses HTTPS. Account, structured scan, roadmap, check-in, payment-reference, and progress records are stored in the application database. An authenticated account can submit a deletion request for human review, but deletion is not automatic and those records have no automatic expiry. Web-server logs are rotated. Retention periods for application logs and encrypted database backups remain to be finalized and documented.
Your choices
You may keep your profile out of leaderboards, stop submitting new content, change profile preferences, cancel a subscription through the configured billing flow, or submit an authenticated deletion request from your Profile. You may also contact support for access, correction, or deletion. Requests receive human review and are subject to records that must be retained for security, billing, or legal reasons.
Contact
Privacy requests: [email protected]. Use this address for access, correction, deletion, or other privacy support requests.