Privacy Policy for Ziola Launcher

1. Information We Do NOT Collect (Local Data)

We believe that what happens on your device should stay on your device. Ziola Launcher is designed to process as much information locally as possible.

• Personal Communications: Your personal SMS messages, call logs (for known contacts), and the content of your phone calls are strictly processed locally on your device. They are never transmitted to our servers.
• Private Content: Your notes, alarms, photos, and camera data remain on your device (or in your personal Google account if you have enabled cloud backup). We have no access to this data.

2. Information We Collect and How We Use It

To provide our core features, we process specific data in the following ways:

A. Smart Call Screening

To protect users from spam and scams, Ziola Launcher includes a Smart Call Screening feature.

• How it works: When you receive a call from an unknown number (a number not in your contacts), the App securely sends only that specific phone number to our proprietary Cloudflare API.
• Data Processing: Our API queries shouldianswer.net (with their explicit authorization) to determine if the number is safe or malicious.
• Data Retention: To optimize performance and reduce third-party API requests, the results (both positive and negative) are cached in our Cloudflare D1 database. These cached records are automatically and permanently deleted after exactly 1 year. If a number is queried again before the year expires, the retention period is extended for another year from the date of the new query. We do not link these phone numbers to you or your device.

B. Location and Weather Services

To provide you with accurate local weather forecasts and display your mobile network signal strength, the App requires precise location access.

• How it works: Your coordinates are sent to met.no (the Norwegian Meteorological Institute) to fetch weather data, and to the Geoapify API to display the correct city name (including autocomplete functionality).
• Data Protection: This location data is processed momentarily to retrieve the requested information and is not stored or tracked by us.

C. Voice Dictation and AI Assistant (Viola)

• Voice Dictation: Our custom dictation module uses your device's native Google Speech-to-Text service. Your voice data is processed by Google's systems according to their privacy policies. We do not record or store your voice inputs.
• Viola (AI Assistant): Text or voice queries directed to our AI assistant, Viola, are securely processed using the Google Gemini API.
• Bring Your Own Key (BYOK): For users of the Pro version utilizing their own Gemini API key, this key is securely encrypted and stored on our Firebase servers (see Section D).

D. Licensing, Purchases, and Device Identification

For users upgrading to Ziola Pro via our website (ziola.app/activate), payments are processed safely by our Merchant of Record, Paddle.com.

• What we collect: When you purchase or attempt to purchase a license, we receive your email address, order ID, and purchase status from Paddle. We do not see or store your credit card information.
• Firebase Storage: To manage your license, prevent fraud, and ensure the Pro features (like unlimited dictation or BYOK) function correctly, we store a unique Device ID, your device name, your provided email address, usage counters (e.g., free queries used), and your encrypted BYOK API key (if applicable) in our secure Google Firebase database.
• Communication: We may use the email address provided during checkout to send you your activation details, critical service updates, or a discount code if you abandon your shopping cart (based on our legitimate business interest). You can opt out of marketing emails at any time.

E. Analytics and Crash Reporting

To continuously improve Ziola Launcher and fix bugs, we use Google Firebase Analytics and Crashlytics.

• These tools collect anonymous usage data and crash logs (e.g., device model, operating system version, and the specific line of code that caused a crash). This data does not contain any personally identifiable information and is used exclusively to make the App more stable and reliable. You can opt out of this data collection in the App's settings.

3. Third-Party Service Providers

We employ trusted third-party companies to facilitate our service. These third parties have access to specific data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose:

• Google LLC (Google Play Services, Firebase, Crashlytics, Gemini API, Speech-to-Text)
• Paddle.com (Payment processing and subscription management)
• Cloudflare, Inc. (API routing and temporary caching database)
• Norwegian Meteorological Institute (met.no) (Weather data)
• Geoapify (Location and city name resolution)
• Shouldianswer.net (Spam call database)

4. Required Device Permissions

In accordance with Google Play Developer Policies, we disclose that Ziola Launcher requests the following sensitive permissions to function as a home screen replacement:

• SMS & Call Logs: Required to display your messages, missed calls, and to enable the Smart Call Screening feature.
• Location: Required for weather forecasts and mobile network signal display.
• Camera & Microphone: Required for the simplified camera interface, voice dictation, and the Viola AI assistant.

5. Your Global Data Protection Rights (GDPR, CCPA, LGPD)

We respect your privacy rights regardless of where you live. Under global privacy laws (including GDPR in Europe, CCPA/CPRA in California, and LGPD in Brazil), you have comprehensive rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure ("Right to be forgotten"): You have the right to request that we erase your personal data (e.g., your license data and email), under certain conditions.
• The right to restrict or object to processing: You have the right to object to our processing of your personal data.

Notice to California Residents (CCPA/CPRA): We strictly adhere to California privacy regulations. We do not sell or share your personal information to third parties for cross-context behavioral advertising. We process your data solely for the purpose of providing our services.

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within the timeframe required by your local applicable law.

6. Security of Your Information

We take the security of your data seriously. We use industry-standard encryption, secure API protocols, and trusted infrastructure (like Google Firebase and Cloudflare) to protect your information. Your custom BYOK API keys are encrypted at rest. However, please remember that no method of transmission over the internet or electronic storage is 100% secure.

7. Children's Privacy

Ziola Launcher is designed to assist seniors and adults. We do not knowingly collect personally identifiable information from children under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us so that we can take necessary actions to remove that information.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page (ziola.app/privacy-policy/) and updating the "Effective Date" at the top.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: