Version: 0.2 (DRAFT) Effective date: 2026-07-04 Entity: ZapView, Inc. ("ZapView", "we", "us")
⚠️ Draft — not legal advice. Engineering/product boilerplate for attorney review before publication. Host at zapview.app/privacy and link from the in-app consent screen. This document is written to reflect ZapView's actual data flows as built; confirm against the live system before publishing.
This Policy explains what we collect when you use the ZapView apps and services, how we use and share it, and your choices. It is incorporated into the Terms of Service.
You provide / your account:
Generated by use:
We share data with service providers/processors that operate the service on our behalf, including:
We also share when required by law or to protect users and the platform, including reporting CSAM to NCMEC and cooperating with valid legal process. We do not sell your personal information. We do not use third-party advertising or tracking SDKs.
Video is never recorded or stored. Live sessions are ephemeral by design: frames are transmitted to the other participant and are not written to disk by ZapView anywhere. The platform has no recording capability.
Face geometry — biometric retention and destruction schedule. To protect the privacy of bystanders, ZapView's software computes the approximate geometry of faces visible in the camera view (bounding box and the approximate position of eyes and nose) on the streaming device, in real time, for the sole purpose of obscuring those faces before the video is transmitted. This face geometry: (a) is never used to identify, verify, or recognize any person; (b) is never stored, transmitted, sold, or disclosed; and (c) is destroyed within milliseconds of each video frame being processed, when the frame is released. This statement serves as our public biometric data retention and destruction policy.
Report review. When a session is reported, ZapView adjudicates using session metadata (participants, time, location label, duration), the report reason and details, and account history. Because video is never recorded, no footage exists to review. Metadata connected to a report is retained while the case and any appeal are open, and where retention is legally required (e.g., CSAM-related preservation obligations).
Provider location is collected only while you are online/available and is used to match nearby requests. You can stop sharing by going offline. Requester request locations are used to find nearby Providers and to label the session.
Payment and payout processing is performed by Stripe under Stripe's privacy terms. ZapView receives limited transaction metadata, not full card details.
We keep information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our Agreements. Video is never retained (Section 5); on-device face geometry is destroyed within milliseconds (Section 5); report metadata follows the limited retention in Section 5. Undelivered messages and transient session data are retained only briefly.
Depending on where you live (e.g., California/CCPA, EU/UK GDPR, Brazil/LGPD), you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, contact zapview@tuta.com. We will not discriminate against you for exercising them. You can also control device permissions (location, camera, microphone, notifications) in your OS settings.
If you are in Brazil, we process your personal data in accordance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018, "LGPD"), under the oversight of the Autoridade Nacional de Proteção de Dados (ANPD).
Legal bases. We process personal data on the bases set out in Art. 7 of the LGPD, including: your consent; execution of a contract to which you are a party (providing the service you request); compliance with a legal or regulatory obligation; and our legitimate interests (e.g., safety, fraud prevention, and service integrity), balanced against your rights and freedoms.
Your LGPD rights (Art. 18). You may request: confirmation that we process your data; access to your data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD; data portability; deletion of personal data processed with your consent; information about the public and private entities with which we share your data; information about the consequences of denying consent; and revocation of consent at any time.
Data Protection Officer (Encarregado). To exercise these rights or raise a concern, contact our Data Protection Officer (Encarregado de Dados) at zapview@tuta.com. You also have the right to lodge a complaint with the ANPD.
International transfers. Your data may be processed outside Brazil (including in the United States and the European Union) by us and our processors (see Sections 4 and 12). Where required by the LGPD, we rely on appropriate safeguards for these international transfers.
ZapView is for users 18 and older. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will delete it and remove the account.
We use technical and organizational measures (encryption in transit, access controls) to protect your information. No system is perfectly secure.
Your information may be processed in the United States and other countries where we or our processors operate, with appropriate safeguards where required.
We may update this Policy. Material changes will be communicated in-app and/or by email; the version and effective date appear at the top.
zapview@tuta.com (Encarregado / Data Protection Officer)