Privacy Policy

Who This Covers

This policy covers ZANTŌ wherever you use it: the website at zanto.app and the ZANTŌ app on your phone. They are one service and one record. The app is a client for the same account.

What We Collect

When you use ZANTŌ, we collect the minimum data needed to run the service:

Your email address: used to sign you in. The normal way in is the sign-in email, which carries a magic link and an eight-digit code, either of which signs you in. A password sign-in also exists. If you set a password, our authentication provider stores it as a hash, and we never see or store the password itself.

Session data: the domain you logged the work to (BUILD, TRAIN or LEARN), the start time, the end time and the duration. This is the core of your personal record.

Because one of those domains is TRAIN, your record can contain information about physical activity you choose to log, and the note and caption below are free text, so both contain whatever you put in them.

Anything you write: the optional note attached to a session, and the caption that turns a session into a milestone. This is free text. Whatever you type there, we store. Your milestone captions are printed on the back of your edition. Your notes are not printed.

Your name and postal address: collected at checkout by Stripe, so that we can post your printed edition. Stripe holds them; we do not store them in our own database.

If you withdraw from your purchase: the name and email address you give on the withdrawal form, and the date we received it. We store these in our own database.

Payment data: handled entirely by Stripe. We do not see or store your card details. Payment happens on the website; the app contains no purchase of any kind.

Your time zone, when you buy: your browser’s time zone is saved with your checkout at Stripe, so the dates in your purchase email are the days where you are.

If you leave your email for the opening notice: that address, the day you left it, and the day you confirmed it. We store these in our own database.

Crash and diagnostic reports: if the app crashes or hits an error, it sends a report to Sentry (the technical stack trace, the app version, and your device model and OS version), so we can find and fix the problem. Each report also carries a random identifier that Sentry creates for this installation of the app, so we can tell whether a problem keeps happening on one phone or on many. It is not your account, and it starts over if you reinstall the app or clear its data. These reports are not linked to your identity: the app attaches no email, IP address, or account to them, and account identifiers are stripped from each report before it leaves the device. Sentry keeps them for a limited period and then deletes them automatically. How long that period is depends on our Sentry plan at the time a report arrives, and changing plans later does not re-scope reports already received. This runs in the released app only.

Nothing else. Apart from the two installation identifiers described on this page (one in crash reports, one in the update check), the app collects no device identifiers: not your advertising ID, and no hardware identifier of your phone. It does not collect your location, your contacts or your photos, and it serves no advertising and does not track you across other apps or websites.

Why We Collect It

To provide the service: your session data is what ZANTŌ exists to store and return to you.

To process payments: Stripe needs billing information to take the payment for your year.

To sign you in: your email address identifies your account when you sign in.

To make your printed edition: when your year seals, that year’s record is drawn onto your sheet. The front shows the time you logged each day in each domain and the year’s figures, with your member number. The back lists your milestones with their dates and captions. We send that file to our printer only to print it. Your session notes are never printed.

To post your printed edition: your name and postal address tell us where to send it.

To handle a withdrawal: the withdrawal form’s name, email address and date are the record of your withdrawal, which we acknowledge and refund against.

To send the opening notice: one email, on the day ZANTŌ opens, and only if you confirmed your address from the link we sent you.

That is the whole list. We do not profile you, we do not build advertising audiences, and none of your data is used to make decisions about you.

Where We Store It

Your data is stored in Supabase, hosted in the EU region. Payment data is stored by Stripe. The application is hosted by Vercel, which also provides the website's usage analytics. Crash reports are processed by Sentry, in the EU region. App updates are delivered through Expo. Our purchase, refund and withdrawal emails are delivered by Resend. These providers process data on our instructions as service providers, and maintain their own security and compliance standards.

On launch, the app asks Expo whether an update is available. That request carries the platform, the version of the app and of the update it is running, the update channel, and a random identifier that Expo's update service creates for this installation of the app. That identifier is not your account, and it starts over if you reinstall the app or clear its data. If the app failed to start the time before, the request also carries the technical error message from that failure. It carries nothing about your account or your record.

Your name and postal address are held by Stripe. When your year seals and your edition is printed, we pass them, with the print file of your sheet, to our printer, Qpix, in a print batch, only to print and post it, and we delete our copy of that batch within 7 days of handing it over. To correct your address before then, email support@zanto.app.

Your invoice, which carries your name and address, is emailed to you and kept in our bookkeeping, in Bokio, as Swedish bookkeeping law requires.

Like any internet service, our hosting providers record ordinary technical request logs, which include the IP address your device connects from. We do not read these logs to build a profile of you, and we do not link them to your record.

On Your Device

The app keeps a small amount of data on the phone itself, including your sign-in session; a marker for a session that is currently running; work that has not yet reached the server; a cache of the wheel and the reference figures it derives from, such as your first session date, so it draws instantly on open; the last domain you logged to; and whether your year is open, cached so the app opens correctly when offline. This stays on your device and is removed when you uninstall the app.

Email Provider

We send only the emails the service itself needs. The sign-in email is sent by Supabase Auth and carries a link and an eight-digit code. Either one signs you in. If you buy, you also receive your purchase confirmation with your invoice, and any refund receipt or withdrawal receipt, and, if you left your email for the opening notice, its confirmation and the one opening email; these are delivered by Resend. Stripe may also email you its own receipt for the payment. We do not send marketing emails or newsletters.

What We Do Not Do

We do not sell your data. We do not share your data with advertisers. We do not use your data for advertising of any kind. We do not track you across other apps or websites. Your record is yours.

Cookies

ZANTŌ does not use tracking cookies. The only cookie-like mechanism is a session token for authentication. The website measures aggregate usage, such as page views, through Vercel Analytics, which sets no cookies and does not track you across other sites. Because nothing here sets a tracking or advertising cookie, there is no cookie banner.

How Long We Keep It

Your record is kept for as long as your account exists. That is the point of it: a record that is deleted after a year is not a record. When your year ends, your record stays readable. You simply cannot log new work until it is active again.

Your name and postal address are kept with the record of your payment, which Swedish bookkeeping law requires us to keep until the end of the seventh year after the year of the sale (see the Terms). Our printer keeps them only for as long as it needs to post your edition. Your invoice is kept in our bookkeeping for the same period.

If you withdraw from your purchase, the name and email address you give on the withdrawal form and the date we received it are kept with the record of your payment and its refund, until the end of the seventh year after the year of the sale. They are kept even if you delete your account, as the record that you withdrew and that we refunded you.

The opening-notice list is deleted on the day the opening email is sent. An address that was never confirmed is never mailed again, and is deleted with the list.

When you delete your account, your record goes with it. See below.

Deleting Your Account

You can delete your account and everything in it at any time. In the app: Settings → Delete account. It asks once to confirm, and then it is done: every session, every milestone, every note, and the account itself are erased. This cannot be undone. Every way to delete, and what is kept and why, is on one page: zanto.app/delete-account.

If you would rather not do it from the app, or no longer have it installed, email privacy@zanto.app from the address the account uses and ask for deletion. We will action it and confirm within 30 days.

Children

ZANTŌ is not directed at children. It is a paid instrument for adults keeping a record of their own work, and we do not knowingly collect data from anyone under 16.

Your Rights

Under GDPR, you have the right to access, correct, delete, and export your personal data, to object to processing, and to lodge a complaint with a supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY). To exercise any of these rights, email privacy@zanto.app and we will respond within 30 days.

Governing Law

This privacy policy is governed by the laws of Sweden and the General Data Protection Regulation (GDPR).

Contact

ZANTŌ is operated by Stefan Lundquister, Göteborg, Sweden.

For questions about your data or this policy, contact privacy@zanto.app.