ZapYap builds the ZapYap app together with the ZapYap AI features described below. Many features are free to use; some, such as Companion Plus and credit-based tools, are paid. This Service is intended for use as is.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are accessible at ZapYap unless otherwise defined in this Privacy Policy.

Different Products, Different Data Models

The ZapYap brand spans several different consumer products, and it is important not to confuse how each one handles your data. The ZapYap password manager is designed to run on your device: your vault is protected with end-to-end encryption, so we cannot read its contents. ZapYap chat, our team and community messaging app, is a separate product with its own data practices, which this policy does not describe. This Privacy Policy covers ZapYap AI — the companions, self-writing diary, photo meal logging, learning tools, and image and document toolbox. Unlike the password manager, ZapYap AI runs on our servers: when you are signed in, your files and chats are kept as history in your account so you can return to them, and only a few lightweight tools (for example, background removal) run entirely in your browser. Please do not assume the password manager’s on-device, end-to-end-encrypted model applies to ZapYap AI, and do not confuse ZapYap AI with ZapYap chat; ZapYap AI runs on our servers.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to Name, Email, Phone Number. The information that we request will be retained by us and used as described in this privacy policy.

When you use ZapYap AI, we collect the information needed to provide those features, including:

• account and profile details — your email address, name, time zone, and any optional profile fields you choose to add;
• sign-in and session records, including your IP address and device information, so we can keep your account secure;
• the content of your chats with companions;
• facts a companion remembers about you to personalize your conversations;
• your diary and mood entries;
• meal photos you upload and the estimates generated from them;
• reminder schedules and the push-notification keys used to deliver notifications;
• files you upload to the image and document tools; and
• usage and billing information related to credits and subscriptions.

Data Retention

For ZapYap AI, we keep the information and content in your account until you delete it. Nothing in ZapYap AI expires or is removed automatically on a timer — your chats, diary entries, meals, files, and remembered facts remain available as your history until you delete them or delete your account. When you delete something, we remove it from your account, though copies may persist briefly in backups before they are cleared.

AI Providers and Other Sub-processors

To deliver ZapYap AI, we share the content you provide with the third-party providers that perform the processing. These providers act as our sub-processors and handle your data on our behalf to provide the features:

• AI model providers. The content of your chats, diary, and meal logging is sent to AI model providers to generate responses and results. Depending on the feature, these providers are Groq, Anthropic, Google, and OpenAI.
• fal.ai. Our generative image and video tools, and any face or voice inputs you provide to them, are processed by fal.ai.
• Google vision. Meal photos are sent to a Google vision model to identify food and estimate nutrition.

Signing In With ZapYap ID

Signing in to ZapYap AI is handled by ZapYap ID, our identity system. ZapYap ID manages your credentials and sessions and acts as a sub-processor for authentication.

Other Sub-processors

We also rely on the following providers to operate ZapYap AI:

• Cloudflare — file storage and bot / abuse protection;
• our hosting and database provider, which stores your account data;
• Polar (merchant of record) and Stripe — payment processing for credits and subscriptions;
• our email provider, used to send account and service emails;
• USDA FoodData Central — a food-name lookup only; we send a food name to retrieve nutrition data, and never send your photos or any information that identifies you;
• a stock-image search service and a web-push service used to deliver notifications.

Companion Features and Safety

The ZapYap AI companion and diary features are for adults aged 18 and over. To help keep you safe, every companion and diary message is automatically screened for signs of a crisis or of disordered eating as we process it. This is a built-in check — nothing extra is sent to any third party to perform it — and when it detects a possible concern, we surface relevant support resources to you. Check-in notifications may show a short preview of a message, but messages flagged as sensitive (such as those involving a crisis) never show their text in a preview.

Your Choices: Deletion and Controls

You are in control of your ZapYap AI content. You can delete individual files, chats, companions, remembered facts, and diary or meal entries from within the app. Deleting a chat or companion removes it from your account, though some copies may persist briefly before they are cleared. You can delete your own ZapYap AI account from Account → Security → Delete account. Your account is deactivated immediately and permanently erased after a 30-day grace period — signing back in during that window cancels the deletion. Erasure removes your content and cancels any active subscription; only minimal, de-identified billing records are retained where required for accounting. You can also still request deletion by emailing us@zapyap.com.

Log Data

We want to inform you that whenever you use our Service, in a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use these “cookies” explicitly. However, the app may use third-party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform users of this Service that these third parties have access to their Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

Governing Law

This Privacy Policy, and any dispute relating to it or to our handling of your information, is governed by the laws of Singapore, without regard to its conflict-of-law rules, and is subject to the dispute-resolution terms in our Terms and Conditions. This does not remove any protection you have under the mandatory data-protection or consumer laws of your country of residence.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

This policy is effective as of 2024-09-21 and was last updated on 2026-07-22.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at us@zapyap.com.