Legal
Privacy Policy
What the app and Znimai Cloud collect, where it is stored, for how long, and your rights.
Contents
1. What this policy covers
This policy explains how [company name] ([registered address]; “we”) handles personal data of people using the Znimai app, the Znimai Cloud service and the znimai.com.ua website. The data controller is [company name]. Questions about your data: [[contact e-mail]](mailto:[contact e-mail]).
This version is effective from October 21, 2026.
2. The app on your Mac
The app works locally. Captures, recordings and history stay on your Mac and go nowhere until you upload a file to the cloud yourself or turn on a feature that needs it.
- Text recognition runs on the device using macOS.
- Update checks fetch znimai.com.ua/updates/latest.json once an hour; the request carries no account identifiers.
- Crash reports are sent only after you confirm in the dialog shown after a crash. A report holds the app and macOS versions and the stack trace — no captures, files or account details.
3. What Znimai Cloud collects
- Account: name, e-mail address, password (stored only as a hash), settings, interface language, optionally an avatar and a custom domain.
- Files: uploaded captures and recordings, their names, tags, recognised text (for search), video transcripts, thumbnails, access settings (password, expiry).
- Sessions and devices: sign-in tokens, the name of the device that connected the app, last activity time, IP address and browser — for account security.
- Link views: a view counter, country and referrer in aggregate, and a hashed visitor identifier without the full IP address.
- Payment: plan, invoice history and subscription status. We never receive card details — the payment provider handles them.
- Technical logs: request records with the IP address and a request id for diagnostics, kept for up to 30 days.
4. Why, and on what basis
- providing the Service under our agreement with you (storing files, links, your account, payment) — performance of a contract;
- security: protection against abuse, unauthorised access and spam — legitimate interest;
- statistics about views of your links — legitimate interest and your settings;
- account e-mails (confirmations, password resets, invoices, material changes) — performance of a contract. We send no marketing e-mail;
- meeting legal obligations (tax records, lawful requests) — legal obligation.
5. Where and for how long
Files are stored in Amazon Web Services, S3, region EU, Frankfurt (Germany) (eu-central-1), encrypted in transit and at rest. The account database and the server run in the same region.
- Files with an expiry are deleted when it passes; files you delete go from the database at once and from storage within days (backups: up to 30 days).
- An account export (an archive of all files) is available for 24 hours after it's made.
- Sessions end after 30 days without activity.
- After you delete your account all data is erased within 30 days, except what the law requires us to keep longer (invoices).
8. Your rights
At any time you can:
- review and change your account data under Account;
- download all your files under Account → Export;
- delete individual files or the whole account;
- withdraw consent, object to processing based on legitimate interest, ask for correction or restriction — by writing to [[contact e-mail]](mailto:[contact e-mail]). We reply within 30 days.
You may complain to the data-protection authority where you live; in Ukraine, to the Ukrainian Parliament Commissioner for Human Rights.
9. Security
HTTPS everywhere, passwords stored only as hashes, two-factor sign-in, limited-scope tokens for the app, and separate storage permissions for the server. We notify you of incidents affecting your data within 72 hours of learning about them. Vulnerabilities: [[security e-mail]](mailto:[security e-mail]).
10. Changes to this policy
We notify you of material changes by e-mail or in the app at least 14 days ahead. The current version is always on this page.