Who we are and what this covers
Zendo.me is a personal, self-hosted project run by one person. This policy applies to the website at zendo.me and to every app or service hosted on its subdomains (for example, app.zendo.me). In this policy, "we", "us" and "our" mean the operator of Zendo.me, and "you" means anyone who visits or uses these services.
The short version: we collect only what you choose to share, we use it only to run the service you asked for, we never sell it, and you can ask us to delete it at any time.
Some apps may have their own additional notice where they work differently. If an app's notice and this policy disagree, the app's notice applies to that app.
What we collect
We collect three kinds of data, and only when you use the services.
| Data | When it is collected | Why |
|---|---|---|
| Sign-in details (such as username, email address, display name, password hash) | When you create an account or sign in | To let you sign in and keep your account secure |
| Content you store (such as files, notes, messages, settings) | When you add it to an app | To provide the app you are using |
| Technical logs (IP address, browser type, time and page requested, error messages) | Automatically, when your browser connects to our servers | To keep the services running, fix problems and block abuse |
If you sign in with an outside account (for example, a single sign-on provider), we receive only the basic profile details that provider shares with your permission, usually your name and email address.
We do not ask for, and do not want, sensitive data such as health, financial or identity documents unless an app clearly exists for that purpose and you choose to store it there.
How we use your data
We use your data only to run the services you choose to use. That means:
- signing you in and keeping your account safe
- storing and showing back the content you add
- fixing bugs, keeping the servers healthy and stopping abuse or attacks
- replying when you contact us
We will never:
- sell, rent or trade your data
- show you advertising or build an advertising profile of you
- use third-party tracking or analytics that follow you across other websites
- read your stored content, except when you ask us to help, when it is needed to fix a technical problem, or when the law requires it
We share data with others only if the law requires it, for example a valid court order.
Cookies
We use only the cookies needed for the services to work, such as a cookie that keeps you signed in or remembers a setting. We do not use advertising or tracking cookies. Because these cookies are strictly necessary, we do not show a cookie banner.
Where your data is stored and how it is protected
The services run on servers we manage ourselves, either on our own hardware or on rented servers from a hosting provider. The hosting provider supplies the machine but does not access or use your data. We protect data with encrypted connections (HTTPS), hashed passwords, regular software updates and limited access to the servers.
No system is perfectly secure. If a security incident affects your data, we will tell you as soon as we reasonably can.
How long we keep data
- Account details and stored content: for as long as you use the service, or until you ask us to delete them.
- Technical logs: a short period, normally no more than 90 days, unless needed to investigate abuse.
- Backups: deleted data may remain in backups for a short time until those backups are replaced, normally within 90 days.
Your rights
You are in control of your data. At any time you can ask us to:
- tell you what data we hold about you
- give you a copy of your data
- correct data that is wrong
- delete your account and all your data
To make a request, email us at privacy@zendo.me from the address linked to your account, or include enough detail for us to find your data. We will respond within 30 days. Requests are free.
Depending on where you live, privacy laws such as the GDPR or POPIA may give you further rights, including the right to complain to your local data protection authority. We will honour those rights.
Children
The services are not aimed at children under 16. We do not knowingly collect data from them. If you believe a child has shared data with us, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell account holders by email or with a notice in the apps.
Contact
Questions or requests about your privacy: privacy@zendo.me