Privacy Policy

Information we collect

We collect only what the Service needs to work:

• Account information — your email address and profile details.
• Waitlist information — the email address you submit, basic campaign attribution (UTM tags and the referring site), and any optional answers you share about what you want to create.
• Prompts and creative text — scripts, beats, prompts and other text you write in the studio.
• Reference material you upload — images, audio and video used to guide generations.
• Voice recordings — audio you provide when cloning your own voice.
• Generated content — the images, video, audio and voices the Service creates for you.
• Usage and diagnostics — device information, app interactions, logs and crash reports that help us keep the Service reliable.
• Anonymous website analytics — aggregate page views and waitlist-button clicks on zapters.app, collected without cookies or identifiers.

Waitlist and early access

When you join the waitlist, we use your email address to hold your place and contact you about Zapters early access. Campaign information helps us understand how people discover the project.

The creator questionnaire is optional. We use those answers only to understand which stories, creator groups and animation styles should shape the private beta. We do not send your email address or questionnaire answers to analytics tools.

Website analytics

The zapters.app website uses PostHog to understand, in aggregate, how people find and use the site: which pages are viewed, which waitlist buttons are clicked, and which campaigns or referring sites brought visitors. We run PostHog on its EU Cloud, so analytics data is processed and stored on servers in the European Union.

This setup is deliberately minimal. It sets no cookies and stores nothing on your device, records no session replays, and never receives your email address or questionnaire answers. Events are anonymous and are not linked to your waitlist entry or to any profile, and client IP addresses are discarded at ingestion. PostHog deletes these anonymous events after our plan’s retention period of at most one year.

We process this data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in understanding how the pre-launch site performs. Because nothing is stored on your device and no one is identified, no consent banner is required — and you can object to this processing at any time, as described under “Your rights”.

Legal bases

Where the GDPR applies, we process your data on these legal bases:

• Consent — for the waitlist: you choose to give us your email address, and the questionnaire is optional. You can withdraw consent at any time.
• Performance of a contract — running the Service for you once you have an account: storing your content, generating what you request, and crediting your purchases.
• Legitimate interests — keeping the Service secure and reliable (diagnostics, abuse prevention), enforcing our content policy through moderation, and measuring aggregate website usage with cookieless, anonymous analytics.
• Legal obligation — retaining records where the law requires it, including reports of illegal content.

How AI processing works

Zapters generates content by sending your prompts and — where a request requires it — your uploaded or previously generated media to third-party AI providers that run the models. We send each provider only what is needed to fulfil the specific generation request.

The providers we currently use are: fal.ai, BytePlus (Seedance video models), Google (Gemini and Cloud Vision), ElevenLabs (voice generation and processing) and Replicate. Each processes your content to return a result to you, acting as a service provider to us.

Where your content is stored

Your account data and content are stored on Google Firebase and Google Cloud infrastructure. Content you create is private to your account by default — other users cannot see it unless you export it and share it yourself.

International transfers

Some of the service providers named in this policy — including Google, fal.ai, Replicate and ElevenLabs — process data on servers outside the EU/EEA, primarily in the United States. Where data leaves the EU/EEA, we rely on recognized safeguards: the EU–US Data Privacy Framework where the provider is certified, or the European Commission’s Standard Contractual Clauses.

Payments

Subscriptions and credit packs are purchased through the Apple App Store, and purchases are managed by RevenueCat. Payment card details are handled entirely by the store — no card data ever reaches or is stored by us. We receive only the transaction records (such as product, price and status) needed to credit your account.

Content moderation

To keep the Service safe, prompts, uploads and generated content are automatically scanned against our content policy. Items that violate the policy are logged and may be reviewed by our moderation team, and we retain those records as needed to enforce our Terms of Service and comply with the law.

Data retention and deletion

We keep your content and account data for as long as your account is active. Until in-app account deletion ships, you can request deletion of your account and data at any time by emailing support@zapters.app — we will action the request and confirm when it is complete.

Waitlist information is kept while early access is active or until you ask us to remove it. You can request deletion at any time by emailing support@zapters.app from the address you joined with.

No sale of personal data

We do not sell your personal data, and we do not share it with third parties for their own advertising. Data is shared only with the service providers named in this policy, and only so they can process it on our behalf.

Your rights

Where the GDPR applies, you have the right to:

• Access the personal data we hold about you, and receive a copy of it.
• Correct inaccurate data and complete incomplete data.
• Have your data erased.
• Restrict or object to processing, including processing based on legitimate interests.
• Receive the data you provided in a portable format.
• Withdraw consent at any time, without affecting processing that happened before you withdrew it.
• Lodge a complaint with a data protection supervisory authority — in Germany, the authority of your federal state, or the one where you live.

Exercising your rights

To exercise any of these rights, email support@zapters.app from the address associated with your account or waitlist entry. We respond within one month.

Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If we learn that a child under 13 has created an account, we will delete the account and its data.

Changes to this policy

We may update this policy as the Service evolves. If a change is material we will notify you in the app or by email before it takes effect. The effective date above always reflects the latest version.

Contact

Questions about privacy or your data? Zapters is operated by Elmi Ali, based in Germany. Contact us at support@zapters.app.