Privacy Policy

Last Updated: September 1, 2026

This Privacy Policy explains how ZIBBYAI, INC. ("Zibby," "we," or "us") collects, uses, discloses, and otherwise processes information when you use our websites, mobile applications, messaging features, and related services (the "Service"). Zibby is a proprietary service wholly owned and operated by ZibbyAI, Inc.

1. Information we collect and how we collect it

Information you provide. We collect account and profile information; memories and other content you create or choose to add, including text, photos, video, audio, transcripts, people, dates, places, and related metadata; communications with Zibby; phone numbers and message content when you use an optional messaging feature; payment and subscription status supplied by Apple; and information you submit through a Zibby form.

Information from device permissions you choose to enable. Zibby may access selected photos, contacts, calendar events, approximate or precise location, motion activity, microphone, speech recognition, camera, and Apple Health workout information. The permission screen explains the requested source before the system prompt appears. Photo-library signals are metadata-only unless you choose a photo to add to a memory.

Information collected automatically. We collect app and device details, authentication and security identifiers, feature interactions, diagnostics, crash and performance data, network information such as IP address, and records needed to prevent abuse and operate the Service. TestFlight and App Store services may provide crash, usage, purchase, and feedback information under Apple's terms.

2. How we use information

We use information to authenticate accounts; provide, store, search, share, and recover memories; provide conversations, transcription, summaries, suggestions, prompts, and media generation that you request; personalize the Service using sources you enable; operate subscriptions and messaging; provide support; monitor reliability and security; prevent fraud and abuse; comply with law; and improve the Service.

We do not sell personal information. We do not share User Content with data brokers or advertising networks for cross-app targeted advertising. We do not use personal information or User Content to train Zibby's or a service provider's general-purpose AI models.

3. Google Cloud and AI processing

Zibby owns and operates the Service. Zibby operates on Google Cloud Platform and uses Google LLC as a service provider through Google Cloud Platform and Google AI services.

When you use an AI feature, Zibby may send Google only the information needed for that feature: voice audio and transcripts; typed text and prompts; memories and relevant conversation or memory context; photos, audio, video, or other attachments you select; derived device-signal summaries you enabled; and request, safety, and technical metadata. Google processes this information for hosting, storage, authentication, transcription, conversation, search and retrieval, embeddings, summaries, suggestions, prompts, image or media generation, safety, and abuse prevention.

Before Zibby first sends your personal data to Google for AI processing, the app presents a separate disclosure that identifies Google, describes the data that may be sent and why, and asks for your permission. Accepting the Privacy Policy or Terms alone does not grant this permission. You can decline, but Zibby cannot provide the Service without this processing. Contact support@zibby.ai to withdraw permission; withdrawing ends access to the Service unless you grant permission again.

Zibby uses paid Google services governed by data-processing terms. Under Google's paid-service terms, Google does not use prompts or responses to improve its products. Google may keep limited prompts and responses for a limited period for safety and prohibited-use monitoring unless an approved zero-data-retention configuration applies. Zibby does not represent that zero data retention applies unless it has been separately verified for the applicable service and project.

4. Apple Health and fitness information

If you enable Workouts, Zibby reads workout type, time, duration, distance, active energy, and whether route data is available from Apple Health for the history window you select in Apple's authorization flow, such as the past 30 days and future data or all recorded and future data. Zibby does not write to Apple Health. Exact workout route coordinates remain on your device.

Zibby may upload a derived workout summary, such as primary workout type, workout count, total duration, milestone values, and whether a route exists, to suggest memories or prompts. If you also permit Google AI processing, that derived summary may be included in the context sent to Google for the same user-requested memory and personalization purposes. Zibby does not use health or fitness information for advertising, data brokerage, credit, insurance, or employment decisions.

5. Service providers and other disclosures

We disclose information only as needed for the purposes described above. Current service-provider categories include: Google LLC and its affiliates for Google Cloud hosting, storage, databases, authentication, analytics where enabled, crash reporting, and AI processing; Cloudflare for website delivery, bot prevention, and security; Customer.io for account, lifecycle, support, and form communications where enabled; Signal House for optional group MMS delivery, including phone numbers, message content, and media sent through that feature; and Apple for Sign in with Apple, App Store and TestFlight distribution, subscriptions, push delivery, and Apple-provided analytics.

These providers act under their applicable agreements and are required to use personal information only for the contracted services, protect it with safeguards that provide the same or equal protection described in this policy, and delete or return it as required by those agreements. We may also disclose information to comply with law, respond to lawful requests, protect people and the Service, investigate abuse, enforce our terms, or complete a merger, financing, reorganization, or sale subject to appropriate protections.

6. Retention, deletion, and security

We keep account information and User Content while your account is active and as needed to provide the Service. Specific records may be kept longer when needed for security, fraud prevention, transaction records, consent evidence, legal obligations, disputes, or backup recovery. Provider caches, safety logs, and backups may be deleted on a delayed schedule under the applicable service terms. We do not describe provider processing as immediate deletion unless that behavior has been verified.

You can request account deletion in the app or contact support@zibby.ai. Deletion removes or de-identifies personal information from active systems, subject to lawful exceptions and bounded backup or provider deletion periods. Withdrawing AI permission stops future AI transfers but does not by itself delete memories you chose to keep; account and content controls remain separate.

We use administrative, technical, and organizational safeguards designed to protect information in transit and at rest and restrict access to authorized personnel with a need to know. No security method is perfect, so we cannot guarantee absolute security.

7. Your choices and rights

You can manage optional device sources, analytics where an in-app control is available, proactive personalization features, and saved voice-chat audio in the app. Device permissions can also be changed in iOS Settings. Some choices disable the features that require that information. Google AI processing is required for the Service; contact support@zibby.ai to withdraw that permission and end access unless you grant it again.

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and may appeal a decision or withdraw consent. Submit a request in the app or at support@zibby.ai. We may verify your identity and may retain a limited record of the request and outcome.

8. Children, international processing, and policy changes

The Service is not directed to children under 13. If you believe a child under 13 provided personal information, contact support@zibby.ai.

Zibby and its service providers may process information in the United States and other locations where they operate, using contractual and legal safeguards where required.

We may update this policy and will post the revised date. If a change materially expands the personal data sent to a third-party AI service, changes the recipient, or introduces a new purpose that requires consent, Zibby will provide a new in-app disclosure and obtain permission before the new transfer. Continued use alone is not treated as permission for a new third-party AI transfer.

9. Contact

Privacy and support: support@zibby.ai

ZIBBYAI, INC. c/o Corporation Service Company 251 Little Falls Drive Wilmington, DE 19808