Privacy Policy

This Privacy Policy explains what information ZoomGuru ("we", "us", "our") collects, how we use it, and what choices you have. If you have questions, email us at [email protected].

1. What We Collect

Account information. When you register, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.

Payment information. Payments are processed by Paystack. We receive a transaction reference and your Paystack customer code to confirm and manage your subscription. We do not store your card number, bank details, or any raw payment credentials on our servers.

Device identifier. We generate a unique device fingerprint from non-sensitive hardware properties (CPU model, platform, architecture, total memory, and a hashed MAC address) to enforce subscription device limits. This fingerprint cannot be used to identify you personally outside of ZoomGuru.

Usage metadata. We record the type of AI request made (voice question, screenshot, or transcription) and the timestamp, linked to your account. This helps us understand usage patterns and enforce session limits. We do not record the content of your requests.

Download analytics. When you download the app, we log the platform (Windows or macOS) and a timestamp. We do not log your IP address in a way that is linked to your account.

2. What We Do Not Collect

We are deliberate about what we do not touch:

• Your interview questions and spoken audio are never stored on our servers
• Answers generated during your session are never logged or saved
• Screenshots you capture are transmitted for processing and immediately discarded — they are not stored
• We do not use any of your session content to train AI models
• We do not track your behaviour across other websites or apps

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process and verify your subscription payments
• Enforce device limits and rate limits on AI usage
• Send transactional emails (payment confirmation, expiry reminders, password reset)
• Understand aggregate usage trends to improve the product
• Respond to support requests

We do not use your information for advertising, profiling, or any purpose not listed above.

4. Emails We Send

We send transactional emails only — no marketing unless you explicitly opt in. These include:

• Welcome email when you register
• Payment confirmation after a successful subscription
• Expiry reminder before your subscription ends
• Password reset link when requested
• Payment failure notification if a charge does not go through

5. Third-Party Services

We use trusted third-party services to operate ZoomGuru. We share only the minimum data each service needs to do its job:

• Payment processor — handles your subscription payments securely. We receive only a transaction reference to confirm and manage your subscription. We never see or store your card or bank details.
• Database hosting — stores your account information (name, email, hashed password) and subscription status on secure, encrypted servers.
• Speech-to-text provider — converts your spoken question to text when you use voice mode. The audio is sent only for transcription and is not retained after processing.
• AI providers — generate coached responses to your questions. Your question text is sent for processing under agreements that prohibit training on your data. Content is not retained after a response is generated.
• Email delivery service — sends transactional emails (welcome, payment confirmation, password reset). Only your email address is shared for this purpose.
• Rate limiting infrastructure — enforces fair usage limits. Only a temporary, anonymous session counter is stored, and it expires within 60 seconds.

We do not share your data with advertisers, data brokers, or any party not listed above.

6. Data Retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance reasons (e.g. payment records, which we retain for 7 years as required by Nigerian financial regulations).

Session content (questions, answers, screenshots) is never written to persistent storage and therefore has zero retention — it exists only in application memory and is gone the moment your session ends.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to how we process your data in specific circumstances

To exercise any of these rights, email [email protected]. We will respond within 10 business days.

8. Security

We take reasonable technical measures to protect your data, including password hashing with bcrypt, HTTPS-only API communication, JWT-based authentication, and rate limiting to prevent abuse. No system is perfectly secure, and we cannot guarantee absolute security, but we take it seriously.

9. Children

ZoomGuru is not intended for use by anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of this page and notify you by email if the changes are material. Continued use of ZoomGuru after changes take effect means you accept the updated policy.

11. Contact

For any privacy-related questions or requests, reach us at [email protected].