Back to Zyaku

Effective Date: February 2026

At Zyaku, your privacy is fundamental to everything we build. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information when you use our AI-powered social platform, including our mobile applications, web services, and all related features. By using Zyaku, you agree to the practices described in this policy.

1. Information We Collect

We collect several categories of information to provide, improve, and secure the Zyaku platform:

Account Information

• Full name, username, and display name you provide during registration
• Email address used for account verification, login, and communications
• Date of birth to verify age eligibility and comply with age-restriction laws
• Profile information including biography, profile picture, cover photo, and linked social accounts
• Authentication credentials (passwords are stored using industry-standard bcrypt hashing and are never stored in plaintext)

User-Generated Content

• Posts, status updates, and text content you publish on the platform
• Photos, videos, and other media files you upload or share
• Comments, replies, and reactions on other users' content
• Stories and ephemeral content you create
• Comic panels, animated content, and creative works you publish

Device & Technical Information

• IP address, which may be used for security, fraud prevention, and approximate geolocation
• Browser type, version, and language preferences
• Operating system and device model (e.g., iOS, Android, desktop)
• Screen resolution, device identifiers, and mobile network information
• Crash reports and diagnostic data to improve platform stability

Usage Data

• Interactions with content such as likes, shares, bookmarks, and reposts
• Time spent on the platform and within specific features
• Features accessed including AI assistant, comics, marketplace, and messaging
• Search queries and discovery behavior patterns
• Navigation patterns and session frequency

Location Data

• Approximate location derived from IP address (used for content localization and security)
• Precise location data only if you explicitly grant permission through your device settings
• You can revoke location permissions at any time through your device or app settings

Communication Data

• Direct messages and chat conversations sent through Zyaku messaging
• Group chat messages and participant information
• Message metadata including timestamps, delivery status, and read receipts

2. AI Data Usage

Zyaku integrates two leading AI providers to power intelligent features across the platform. This section explains exactly how your data interacts with our AI systems.

Dual-Model AI System

• OpenAI (GPT models) — Powers conversational AI, content generation, smart replies, and multilingual content creation
• Anthropic (Claude models) — Provides alternative AI processing with advanced reasoning, content analysis, and creative assistance
• Users can select their preferred AI model (GPT or Claude) within the Zyaku AI interface and switch between models at any time

What Data Is Sent to AI Providers

• Only the content you explicitly submit for AI processing (e.g., prompts, text for analysis, content generation requests) is sent to the selected AI provider
• Contextual data necessary for the AI to generate relevant responses, such as conversation context within the current session
• Language preferences to ensure responses are generated in your preferred language

What Is NOT Shared with AI Providers

• Your personal identity, real name, email address, or account credentials are never sent to OpenAI or Anthropic
• Your profile information, date of birth, or contact details are not transmitted
• Your private messages, follower lists, or social graph data are not shared
• Your payment information or subscription status is never disclosed to AI providers

Session-Based Processing

• AI conversations are processed on a session basis and are not stored long-term on our servers
• Chat history with the AI assistant is stored locally on your device for your convenience
• Neither OpenAI nor Anthropic retains your data for training purposes under our enterprise agreements
• Each AI session is independent; previous conversations do not carry over unless you explicitly provide context

AI Usage Metrics

• We track aggregate AI usage metrics (request counts, model preference, response times) for plan-based rate limiting and service optimization
• Free-tier users have defined rate limits; premium subscribers receive higher usage quotas
• These metrics do not include the content of your AI conversations

3. Analytics Usage

We use analytics to understand how Zyaku is used, identify issues, and improve the platform experience for all users.

• Platform Analytics: We collect aggregated usage statistics to understand feature adoption, user engagement trends, and overall platform health
• Performance Monitoring: Server response times, error rates, API latency, and infrastructure metrics are monitored to ensure reliable service
• User Behavior Analysis: We analyze anonymized behavioral patterns (such as navigation flows and feature usage) to improve UI/UX design and prioritize product development
• Aggregated & Anonymized Data: Analytics data is aggregated and anonymized wherever possible so that individual users cannot be identified from the data sets
• Third-Party Analytics Tools: We may use industry-standard analytics services to process platform usage data. These third-party providers are bound by their own privacy policies and our data processing agreements

4. Content Storage

Understanding how your content is stored and managed on Zyaku:

• Post & Media Storage: All posts, images, videos, and media uploads are stored on secure cloud infrastructure with redundant backups across multiple geographic regions
• Retention Periods: Active content remains stored for as long as your account is active. Deleted content is removed from public view immediately and permanently purged from our systems within 30 days
• Cloud Storage: Media files are stored using Cloudinary and other secure cloud storage providers with enterprise-grade encryption at rest and in transit
• Backup Practices: We maintain encrypted backups of platform data to protect against data loss. Backups are retained for a limited period and are subject to the same security controls as primary data
• Content Deletion Process: When you delete a post or media, it is immediately removed from the platform interface. Background processes then purge the content from all storage systems and CDN caches within 30 days. Copies may persist in encrypted backups for up to 90 days before being overwritten

5. Chat & Messaging Data

Zyaku provides real-time messaging powered by Socket.IO technology. Here is how your messaging data is handled:

• Real-Time Messaging: Messages are delivered instantly using WebSocket connections (Socket.IO). This enables real-time communication without page refreshes
• Message Storage: Chat messages are stored in our encrypted database to ensure message history is available across your devices and sessions
• Encryption: Messages are encrypted in transit using TLS/SSL protocols. We implement additional encryption layers for sensitive communication data at rest
• Read Receipts & Typing Indicators: Read receipt status and typing indicator signals are transmitted in real-time and are not permanently stored. These are ephemeral signals used only for the active communication session
• Online Status: Your online/offline status is broadcast to your contacts in real-time and is not stored as historical data
• Data Retention for Messages: Messages are retained for as long as your account is active. If you delete a conversation, messages are removed from your view. When both parties delete a conversation, the messages are permanently purged within 30 days

6. Payment Information

Zyaku uses Stripe as our payment processor for all subscription billing and financial transactions.

• Stripe Integration: All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. We never directly handle, store, or have access to your full credit card numbers
• Data We Store: We store only the information necessary to manage your subscription: last four digits of your card, card brand (Visa, Mastercard, etc.), billing address, subscription plan type, and payment history (dates and amounts)
• PCI Compliance: By using Stripe, we maintain PCI DSS compliance without storing sensitive cardholder data on our servers. All card data is tokenized and securely managed by Stripe
• Refund Processing: Refund requests are processed through Stripe. Refund transaction records are retained for accounting and legal compliance purposes as required by applicable financial regulations
• Subscription Management: You can manage, upgrade, downgrade, or cancel your subscription at any time through your account settings. Subscription changes take effect at the end of the current billing cycle

7. Cookies (Web)

When you access Zyaku through a web browser, we use cookies and similar technologies:

• Session Cookies: Essential cookies that maintain your login session and enable core platform functionality. These are strictly necessary and cannot be disabled while using the platform
• Preference Cookies: Store your settings such as language preference, theme selection (dark/light mode), and notification preferences to provide a personalized experience
• Analytics Cookies: Help us understand how users interact with the platform by collecting anonymized usage data such as pages visited, time spent, and feature engagement
• Third-Party Cookies: We may use cookies from third-party services for analytics and performance monitoring. These third parties have their own privacy policies governing cookie usage
• Cookie Control & Opt-Out: You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect core platform functionality but may limit personalization features. Most browsers allow you to block or delete cookies at any time

8. User Rights (GDPR-Style Global Compliance)

Regardless of your location, Zyaku extends the following data rights to all users, consistent with GDPR, CCPA, and international privacy standards:

• Right to Access: You have the right to request a copy of all personal data we hold about you. We will provide this in a commonly used, machine-readable format
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. You can also update most information directly through your account settings
• Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data. Upon receiving a valid request, we will delete your data unless we are legally required to retain it
• Right to Data Portability: You can request an export of your data in a structured, commonly used format (JSON or CSV) that can be transferred to another service
• Right to Restrict Processing: You may request that we limit how we process your data in certain circumstances, such as while we verify the accuracy of your data
• Right to Object: You have the right to object to processing of your personal data for direct marketing, profiling, or processing based on our legitimate interests
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal

How to Exercise Your Rights

• Submit a request by emailing support@zyaku.com with the subject line "Data Rights Request"
• We will verify your identity before processing any request to protect your data from unauthorized access
• We will respond to all valid requests within 30 calendar days of receipt. If additional time is needed due to complexity, we will notify you within the initial 30-day period
• For EU/EEA residents, you may also contact your local Data Protection Authority (DPA) if you believe your rights have not been adequately addressed

9. Comic & Animated Content Storage & Streaming

Zyaku provides a professional platform for comic creators and animated storytelling. This section covers how creative content is managed:

• Content Storage: Comic panels, animated sequences, and creative assets are stored on secure cloud infrastructure with high-availability redundancy. Static comics are stored as optimized image files, while animated content is stored in web-friendly video formats
• Streaming Delivery: Animated and motion comic content is delivered via adaptive streaming to ensure smooth playback across varying network conditions and devices
• CDN Usage: Content is distributed through Content Delivery Network (CDN) endpoints globally to minimize latency and provide fast load times regardless of user location
• Creator Content Rights: Creators retain full ownership and intellectual property rights to all original content they publish on Zyaku. By uploading content, creators grant Zyaku a limited license to display, distribute, and cache the content for platform delivery purposes only
• Pexels & GIPHY Integration: When users incorporate stock images from Pexels or GIFs from GIPHY, the platform accesses these services via their public APIs. Search queries are sent to these services to retrieve relevant media. Pexels and GIPHY may collect usage data in accordance with their own privacy policies
• Premium Content Access Controls: Premium comic and animated content is protected by access control systems tied to subscription status. Access permissions are verified in real-time, and unauthorized access attempts are logged for security purposes

10. Data Security

We take the security of your data seriously and implement comprehensive measures to protect it:

• Encryption: All data transmitted between your device and Zyaku servers is encrypted using TLS 1.2 or higher. Sensitive data at rest (including passwords, payment tokens, and private messages) is encrypted using AES-256 encryption
• Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis. We employ role-based access controls, multi-factor authentication for internal systems, and comprehensive audit logging
• Security Audits: We conduct regular security assessments, vulnerability scans, and code reviews to identify and address potential security risks. Our infrastructure is continuously monitored for suspicious activity
• Breach Notification: In the unlikely event of a data breach that affects your personal information, we will notify affected users and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with GDPR and applicable laws. Notifications will include the nature of the breach, the data affected, and the steps we are taking to mitigate the impact

11. Children's Privacy

Protecting children's privacy is critically important to us.

• Zyaku is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 years of age
• We comply with the Children's Online Privacy Protection Act (COPPA) and equivalent international regulations regarding the collection of data from minors
• If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete that information from our systems
• If you are a parent or guardian and believe your child under 13 has provided personal information to Zyaku, please contact us immediately at support@zyaku.com so we can take appropriate action
• Users between the ages of 13 and 18 may use Zyaku with parental or guardian consent, in accordance with applicable local laws

12. International Data Transfers

As a global platform, Zyaku may transfer and process your data across international borders:

• Cross-Border Data Handling: Your personal data may be transferred to and processed in countries other than your country of residence, including the United States and other jurisdictions where our infrastructure providers operate
• Standard Contractual Clauses (SCCs): For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on European Commission-approved Standard Contractual Clauses to ensure adequate data protection
• Adequate Safeguards: We ensure that any international data transfers are subject to appropriate safeguards, including encryption, access controls, and contractual obligations with third-party processors to maintain equivalent levels of data protection
• Data Localization: Where required by local law, we will store and process your data within the specified jurisdiction. Contact us for information about data storage locations applicable to your region

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

• We will notify you of material changes through in-app notifications, email, or a prominent notice on our platform at least 14 days before the changes take effect
• The "Effective Date" at the top of this policy will be updated to reflect the date of the most recent revision
• Your continued use of Zyaku after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms
• If you do not agree with the changes, you may close your account and request deletion of your data before the updated policy takes effect
• We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information

14. Contact Us

© 2026 Zyaku. All rights reserved.