Skip to content
— Privacy Policy

Privacy Policy

Effective date: April 18, 2026

Last updated: April 18, 2026

This Privacy Policy ("Policy") explains how Zydeno Studio ("Zydeno", "we", "us", or "our") collects, uses, discloses, and safeguards information about you when you use our website, our mobile applications, or otherwise interact with us (collectively, the "Services"). We are committed to protecting your privacy and handling your data transparently.

Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree, please do not use the Services.

1. The short version

  • We do not sell, rent, or trade your personal information.
  • Our mobile apps are designed to be offline-first — they do not send personal data to our servers unless explicitly disclosed in the app.
  • Our website uses only essential cookies by default. Analytics and marketing cookies require your consent.
  • You have full rights to access, correct, delete, or export your data at any time — just email us.
  • We do not knowingly collect data from children under 13 (or under 16 in the EU).

2. Who we are (data controller)

Zydeno Studio is the "data controller" responsible for your personal information under applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Contact: [email protected]

3. What information we collect

3.1 Information collected on our website

Automatically collected (technical data). When you visit our website, our hosting infrastructure automatically logs:

  • IP address (anonymized where possible)
  • Browser type, version, and language
  • Operating system
  • Pages visited, date and time of visit, referrer URL
  • Approximate geographic location (country-level, derived from IP)

This data is retained for up to 90 days for security monitoring and diagnostics, then automatically deleted or anonymized.

Cookies and similar technologies. See Section 6 below.

Information you voluntarily provide. If you contact us via email, submit a form, or leave a comment, we collect the data you choose to share (typically name, email address, and message content).

3.2 Information collected by our mobile applications

Each of our mobile apps has its own Privacy Policy and its own in-store privacy label (Apple App Store “Privacy Nutrition Label” and Google Play “Data safety” section). These disclose, for that specific app, what data is collected, how it is used, and whether it is linked to your identity. You should read the privacy disclosures of the specific app before installing.

Common practices across our apps. By default our apps:

  • Process as much data as possible locally on your device
  • Request only the permissions strictly required for the stated functionality
  • Disclose any use of analytics, advertising, or third-party SDKs in the app’s store privacy label and in-app Privacy Policy, before install and before first use
  • Ask for your consent where required by law (GDPR, ePrivacy, etc.) before processing non-essential data

Advertising, analytics, and third-party services. Some of our apps — particularly free and freemium apps — may integrate third-party services for advertising, analytics, attribution, or other purposes necessary to operate the app sustainably. Whenever an app uses such services, we disclose them in the app’s specific Privacy Policy and in its store privacy label. You can review these disclosures before installing, and where required by law we will ask for your explicit consent.

Crash reports and diagnostics. Our apps may send anonymized crash reports to help us fix bugs. These reports are designed not to contain personal identifying information. You can opt out in the app settings where offered.

App Store and Google Play data. When you download our apps, Apple and Google collect installation and usage data under their own privacy policies, which we do not control. We receive from them only aggregated, anonymized statistics (number of downloads, crash rates, device categories).

In-app purchases. If our apps offer purchases or subscriptions, they are processed exclusively through Apple App Store or Google Play billing systems. We never see or store your payment card details.

3.3 Information we do not collect

  • We do not collect biometric identifiers.
  • We do not collect precise GPS location unless an app explicitly requests it and you grant permission.
  • We do not access your contacts, photos, microphone, or camera without a permission prompt.
  • We do not sell your personal data to third parties for their independent marketing purposes.

4. How we use information

We use collected information for the following purposes:

  • Service delivery. To operate, maintain, and secure the website and our apps; to authenticate users; to fulfill purchase or subscription obligations where applicable.
  • Communication. To reply to your questions, support requests, press inquiries, or feedback.
  • Improvement. To diagnose bugs, optimize performance, and improve our products based on aggregated, anonymized usage data.
  • Security. To detect and prevent fraud, abuse, or unauthorized access to our systems.
  • Legal compliance. To comply with applicable laws, regulations, court orders, or valid legal processes.

5. Legal basis for processing (GDPR)

Under the EU General Data Protection Regulation, we process your personal data based on one or more of the following legal grounds:

  • Legitimate interests (Art. 6(1)(f)) — for security, fraud prevention, and to improve our Services. We balance these interests against your rights and freedoms.
  • Consent (Art. 6(1)(a)) — for optional cookies, marketing communications, and any processing where we ask for explicit permission. You can withdraw consent at any time.
  • Contract performance (Art. 6(1)(b)) — to provide the Services you request or to respond to your pre-contractual inquiries.
  • Legal obligation (Art. 6(1)(c)) — to comply with applicable tax, consumer-protection, and other statutory duties.

6. Cookies and similar technologies

Our website uses cookies — small text files stored on your device — to deliver core functionality and, with your consent, to understand how the site is used. The specific cookies we use are documented in our Cookie Policy.

Our cookie consent banner lets you accept, reject, or customize non-essential cookie categories:

  • Strictly necessary — always on; required for the site to function (e.g., to remember your theme and language preferences).
  • Analytics — optional; helps us measure aggregate traffic patterns.
  • Marketing — optional; used by embedded content (videos, social media) to personalize what you see.

You can change your cookie preferences at any time by clearing your browser cookies for our site or by using the "Cookie preferences" link in the footer.

7. Third-party services and recipients

We may share limited information with the following categories of third parties, each acting as an independent data controller or a processor operating under contract:

  • Hosting providers — who store our website files and databases and process basic server logs.
  • Content delivery networks (CDNs) — who cache static assets to speed up page loads.
  • Email providers — for transactional and support email delivery.
  • App stores — Apple App Store and Google Play — as distribution platforms for our mobile apps, subject to their own privacy policies.
  • Analytics providers (with consent) — to produce anonymized traffic reports.
  • Professional advisors — legal, accounting, or compliance advisors bound by confidentiality obligations.
  • Government authorities — where compelled by valid legal process or to protect vital interests.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

8. International data transfers

Our infrastructure may be hosted in jurisdictions outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Additional technical measures (encryption, pseudonymization) where required

You may request a copy of the safeguards applied to transfers of your personal data by emailing [email protected].

9. Data retention

We keep personal data only as long as necessary for the purposes for which it was collected, and to satisfy legal or reporting obligations. Approximate retention windows:

  • Server logs: up to 90 days
  • Support correspondence: up to 3 years
  • Consent records: up to 7 years (to evidence compliance)
  • Anonymized analytics: indefinitely

When we no longer need your data, it is deleted, destroyed, or irreversibly anonymized.

10. Your rights (GDPR and other jurisdictions)

If the GDPR applies to you, you have the right to:

  • Access — request confirmation of what personal data we hold about you and a copy of it.
  • Rectification — request correction of inaccurate or incomplete data.
  • Erasure ("right to be forgotten") — request deletion of your data in certain circumstances.
  • Restriction of processing — ask us to limit how we use your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Object to processing — object on grounds relating to your particular situation where processing is based on legitimate interests.
  • Withdraw consent — at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint — with your local data protection supervisory authority.

California residents (CCPA/CPRA) have the additional right to opt out of the "sale" or "sharing" of personal information (we do neither), and the right to non-discrimination for exercising their rights.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may ask you to verify your identity before fulfilling certain requests.

11. Children

The Services are not directed at children. We do not knowingly collect personal information from:

  • Children under 13 in the United States (Children's Online Privacy Protection Act — COPPA)
  • Children under 16 in the European Economic Area (GDPR)
  • Children under the applicable digital-consent age in other jurisdictions

If you believe a child has provided personal data to us, please contact [email protected] and we will promptly delete it.

12. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include:

  • HTTPS encryption for all traffic between your device and our servers
  • Password hashing using industry-standard algorithms
  • Access controls and audit logs on administrative systems
  • Regular security reviews and dependency updates

No system is perfectly secure. If we become aware of a data breach that affects you, we will notify you and the relevant authorities as required by law.

13. Automated decision-making

We do not make decisions that produce legal effects on you — such as determining access to services or pricing — based solely on automated processing, including profiling.

14. Third-party websites and services

Our website and apps may link to third-party sites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before sharing personal information with them.

15. Changes to this Policy

We may update this Policy periodically. The "Last updated" date at the top of this page reflects the latest version. Material changes will be announced on our website homepage at least 14 days before they take effect. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

16. How to contact us

For any questions, requests, or complaints regarding this Privacy Policy or our data practices:

This Privacy Policy is provided as a template and should be reviewed by legal counsel familiar with your specific jurisdiction, business model, and data flows before publishing. Sector-specific regulations (health, finance, children's services) may require additional disclosures not covered here.