Privacy Policy
Version 1.0 · Last updated 18 August 2026 · HIZOVAS SOLUTIONS PVT LTD, India
This policy explains what information the Zovas Platform collects, why it is needed, how it is protected and what control you have over it.
1. Who operates Zovas
The Zovas Platform is operated by HIZOVAS SOLUTIONS PVT LTD, India. For privacy and data protection matters, contact legal@zovas.io.
2. What information we collect
- ·Account information — name, email address, phone number where provided, and authentication identifiers
- ·Onboarding information — date of birth, birth time and birth place, relationship and life-context answers, wake time and sleep quality
- ·Daily check-ins — sleep, energy, mood and the notes you write
- ·Decisions and situations you record, and how they turned out
- ·Reflections on windows and guidance
- ·Feedback and support messages you send us
- ·Preferences — language, tone, notification and delivery settings
- ·Membership information — plan, status, trial and renewal state
- ·Payment-related information — plan, amount, date and provider reference. Full card details are handled by the payment provider and are not stored by Zovas
- ·Technical and security information — device and browser characteristics, log and diagnostic data, and security events necessary to operate and protect the service
- ·Consent and policy acceptance records, including the policy version accepted and when
3. Why we use it
- ·To create and operate your account
- ·To generate and personalise your daily guidance
- ·To improve accuracy using your own recorded outcomes
- ·To deliver messages and notifications you have asked for
- ·To operate memberships, billing and customer support
- ·To maintain security, prevent abuse and fraud, and keep the service reliable
- ·To meet legal, accounting and regulatory obligations
4. Legal bases
Depending on your location and the processing involved, we rely on the performance of our agreement with you, your consent (for example for messaging or optional features), our legitimate interests in operating and securing the service, and compliance with legal obligations. Where consent is the basis, you may withdraw it from Profile → Privacy & Data → Consent & Preferences.
5. AI and automated processing
Zovas uses artificial intelligence, machine learning, statistical methods, pattern analysis, behavioural information, user feedback and other computational techniques to generate personalised guidance. AI-generated information may be inaccurate, incomplete, outdated or unsuitable in particular circumstances, and Zovas does not guarantee that any prediction, recommendation, timing, score, insight or suggested action will occur or produce a particular outcome.
6. AI training and your data
Zovas does not sell personal data.
Zovas does not use identifiable personal information to train general-purpose AI models unless such use is separately disclosed and permitted by applicable law and, where required, based on an appropriate consent or other lawful basis.
We may use properly aggregated, anonymised or de-identified information for legitimate purposes such as service analytics, reliability, performance, security, product improvement and statistical analysis, subject to applicable law and appropriate safeguards.
7. Your data and Zovas technology
Your data means information relating to you and the content you create in Zovas. It is distinct from Zovas proprietary technology, which includes algorithms, model configuration, prompts, system instructions, scoring methods, prediction logic, feature engineering, model architecture, software, source code, internal datasets, internal rules, business processes and trade secrets.
A data export provides your applicable personal information and user-generated content. It does not expose Zovas proprietary technology, credentials or internal infrastructure.
8. Third-party service providers
Zovas does not sell personal data. Limited processing by carefully selected service providers may occur where necessary to operate, secure, maintain or provide the Zovas Platform, or where required or permitted by applicable law.
Categories currently relevant to the service:
- ·Cloud hosting and application delivery — serving the application and its network layer
- ·Managed database, authentication and storage — account records, your recorded content and sign-in
- ·AI model providers accessed through our AI gateway — generating guidance text from the inputs supplied for that request
- ·Geocoding — resolving the birth city you enter to coordinates and a timezone offset
- ·Messaging delivery — where you opt in to receive messages on a supported channel
- ·Payment processing — where you purchase a membership
- ·Email delivery for service and support communication
Some of these categories become active only when the corresponding feature is enabled for your account. Providers act on our instructions for the purposes described here.
9. International users and transfers
Zovas may be accessed by users in different jurisdictions. Where applicable, additional privacy rights, notices, consent requirements or contractual protections may apply based on your location and the services being provided.
Personal information may be processed in more than one country, including by service providers operating outside your country of residence, subject to appropriate safeguards required by applicable law. Zovas does not claim certification under, or compliance with, every international privacy law.
10. Security
Zovas uses technical and organisational safeguards designed to protect personal information, including authentication and access controls, database-level security controls such as row-level access rules, restricted administrative access, encrypted transport and other appropriate security measures. No online service can be guaranteed to be completely secure.
11. Retention
We keep information for as long as needed for the purposes described here. Retention periods may differ by data category and may be determined by legal, operational, security, accounting, payment, fraud-prevention and service requirements.
Cancellation or expiry of a subscription does not by itself delete your account or personalisation history. Account deletion is a separate request that you control.
12. Deletion and recovery
When you request deletion, your request enters a short recovery period during which you can cancel it by signing in. After that period the deletion process begins. Once deletion is completed, the personalisation history and other data covered by the request may no longer be recoverable.
If you create a new account after a completed deletion, your previous personalisation history may no longer be available and a new personalisation journey begins. We do not keep hidden copies of deleted personalisation in order to recreate a deleted profile.
13. Your controls and rights
- ·Download a machine-readable copy of your information
- ·Correct your profile and preferences at any time
- ·Grant or withdraw consent for messaging and optional processing
- ·Request deletion of your account and personal data
- ·Contact us about any privacy question or complaint
Depending on your jurisdiction, additional rights may apply, including rights of access, rectification, objection, restriction or complaint to a supervisory authority.
14. Children
Zovas is currently intended for users aged 13 years and above. Zovas does not knowingly provide account registration to children under 13. If we become aware that an account has been created by a person under 13, we will take appropriate steps to restrict or terminate the account and handle associated personal information in accordance with applicable law.
15. Cookies and similar technologies
See the Cookie & Tracking Policy for how session and security technologies are used.
16. Changes to this policy
We may update this policy. The version and effective date shown above will change, and historical consent records associated with earlier versions are preserved.
17. Contact
Privacy and data protection: legal@zovas.io. General support: support@zovas.io.