Effective Date: August 4, 2026
Last Updated: August 4, 2026
This Privacy Policy explains how Zenstate (the “App”) collects, uses, and shares information when you use the Zenstate mobile application and related services.
If you do not agree with this Privacy Policy, please do not use the App.
1) WHO WE ARE
Publisher (Data Controller):
Publisher: Valentyn Poliakov
Country: Ukraine
Support Email: zenstate@vocapart.com
Website: https://vocapart.com
Privacy Policy Web Address: https://www.vocapart.com/policy/zenstate-policy/
2) WHAT THIS POLICY COVERS
This policy covers information processed:
- inside the App,
- through subscription and purchase management (RevenueCat),
- through analytics and crash reporting (Firebase Analytics and Firebase Crashlytics),
- through the App’s backend services (Supabase), which provide anonymous sign-in and store a small session record.
3) IMPORTANT SUMMARY
- No required account: The App does not require creating an email-and-password account to use core features. The App does create an anonymous identifier for your installation so that paid access can be recognised; it is not linked to your name, email address, or any other identity.
- No advertising: The App does not show third-party ads.
- No contact list access: The App does not access your device contacts.
- Purchases: Payments are processed by Apple or Google; we do not receive your full payment card details.
- We collect limited technical and usage data to operate the App, measure performance, detect crashes, and confirm paid access.
4) INFORMATION WE COLLECT
4.1 Information you provide voluntarily
- Support messages: If you contact us, we receive the content you send, and your email address if you choose to include it.
- Promotional codes: If you enter a promotional code in the App, that code is sent to our backend to be checked. To prevent codes from being guessed by repeated tries, we record a short-lived count of recent attempts. It is normally kept against your anonymous identifier; if the App has no anonymous account at that moment, it is kept against the IP address of your network connection instead. These counters are deleted automatically, and are kept for no more than a few days.
The App has no other free-form input field, and does not ask you for personal information.
4.2 Purchases and subscriptions
The App offers:
- Monthly subscription
- Annual subscription (discounted)
Purchases are processed by Apple App Store or Google Play. We do not collect payment card numbers.
We and our service providers (including RevenueCat) may receive:
- Product identifiers, purchase dates, subscription status (active, expired), renewal information, and transaction identifiers,
- Technical identifiers needed to validate purchase entitlements and provide “Restore Purchases.”
4.3 Analytics and diagnostics (Firebase)
We use:
- Firebase Analytics to understand how users interact with the App and to improve the App.
- Firebase Crashlytics to collect crash reports and diagnostics to help fix bugs and improve stability.
Firebase may collect information such as:
- device model, operating system version, app version,
- app usage events (for example, screens viewed and feature interactions),
- crash logs, performance and diagnostic data,
- identifiers associated with an app installation (for example, an app instance identifier),
- and, depending on platform and device settings, mobile advertising identifiers.
Approximate location: the App does not request or hold any location permission, and it does not read your device’s location. Google Analytics derives an approximate, coarse location — typically at the level of a country or region — from the masked IP address of your network connection. We use this only in aggregate, to understand where the App is used.
We do not use analytics or diagnostic data for targeted advertising.
4.4 Backend services (Supabase)
The App signs you in anonymously to our backend, which is hosted by Supabase. No email address, password, or name is involved, and the anonymous account is created automatically.
We store one record per installation, containing:
- the anonymous user identifier,
- the platform (for example, Android or iOS) and the App version,
- whether paid access is currently active, and the identifier used by our subscription provider,
- the time the record was created and the time it was last updated.
This record exists so that paid access works, is verified against our subscription provider rather than taken on trust, and can be restored. It does not contain anything you draw in the App: your strokes stay on your device and are never uploaded.
5) HOW WE USE INFORMATION
We use information to:
- operate the App and provide its features,
- validate purchases and enable paid access (Pro features),
- provide “Restore Purchases,”
- understand App usage and improve features and user experience,
- detect, prevent, and address crashes, bugs, fraud, and abuse, including abuse of promotional codes,
- respond to support requests.
6) HOW WE SHARE INFORMATION
We may share information with service providers that process information on our behalf, including:
- RevenueCat (subscription and entitlement management),
- Google (Firebase Analytics and Firebase Crashlytics),
- Supabase (anonymous authentication, backend functions, and data storage).
We may also disclose information if required by law, to enforce our rights, or to protect users and the public.
We do not sell personal information. We do not share personal information for third-party behavioral advertising.
7) DATA RETENTION
We keep information only as long as necessary for:
- providing the App and paid access,
- security, fraud prevention, and troubleshooting,
- compliance with legal obligations and dispute handling.
Support messages are retained as needed to address your request and for record-keeping.
8) SECURITY
We use reasonable technical and organizational measures designed to protect information. No system is perfectly secure, and we cannot guarantee absolute security.
9) INTERNATIONAL DATA PROCESSING
Service providers may process information in countries other than your country of residence. Where required by law, we rely on appropriate safeguards for cross-border data transfers.
10) CHILDREN’S PRIVACY
The App is not directed to children under the minimum age required by law in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child provided personal information, contact us and we will take appropriate steps to delete it.
11) YOUR PRIVACY RIGHTS
Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information.
To submit a request, contact: zenstate@vocapart.com
Because the App does not require an email-based account by default, you may be asked to provide additional information to help us identify your data (for example, transaction details or device information), where appropriate.
12) SUBSCRIPTIONS, CANCELLATIONS, AND REFUNDS
- Subscriptions renew automatically unless canceled through your Apple App Store or Google Play account settings.
- Refunds and chargebacks are governed by Apple or Google policies and applicable consumer protection laws. We do not process refunds directly. Any “no refunds” statements are limited by store rules and applicable law.
13) THIRD-PARTY POLICIES
Third-party services used by the App (such as RevenueCat, Supabase, and Google services) have their own privacy policies. We encourage you to review them.
14) CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will post the updated version and update the “Last Updated” date. Continued use of the App after changes means you accept the updated policy.
15) CONTACT US
Email: zenstate@vocapart.com
Publisher: Valentyn Poliakov
Country: Ukraine