Privacy Policy
The controller of your personal data is Exnico, s.r.o., Company ID (IČO) 24185540, registered office at Jaurisova 515/4, Michle, 140 00 Prague 4, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 186659, the operator of the Zyvora service ("we"). For anything about personal data, contact us at privacy@zyvora.ai.
This English version is provided for information; the Czech version is legally binding.
In short
- You can use Zyvora without an account. Before your first message, we ask for your consent to processing what you write to it. We do not store conversations without an account.
- We store conversations only for accounts with Premium (including the trial), so that Zyvora can build on them. Only you see them; we do not look at their content unless you explicitly ask us to.
- Memory is optional: Zyvora remembers things between conversations only with your consent, and you can switch memory off and delete it at any time.
- Messages are processed by Anthropic's artificial intelligence, which does not use them to train its models.
- Emails you send to info@zyvora.ai or privacy@zyvora.ai are sorted, and replies to them drafted, by Anthropic's artificial intelligence. Every reply written by AI says so, and messages that need a person (for example a crisis, personal data or payments) are passed to a person.
- We never see your payment card details; payments are processed by Stripe.
- We use no advertising or analytics cookies and do not track you across websites. The campaign label of the link you arrived through (e.g. from an ad or a newsletter) is stored for summary statistics only, deleted after 30 days and never shared with advertising platforms.
- You can delete your account and all stored data at any time in the app.
What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Your messages and Zyvora's replies | Creating a reply. Without an account, messages are not stored; with a Premium account, they are stored in your conversation history, with an automatically created title and summary. | Explicit consent (Art. 9(2)(a) GDPR) – messages about smoking and how you feel may be health data; performance of the contract |
| Zyvora's memory (what it remembers from conversations, e.g. quit date, triggers, what helps, difficult moments) | So that Zyvora can build on what you told it | Explicit consent – optional and separate from the consent to processing your messages; you can switch memory on or off (including deleting it), edit or delete it in the app at any time |
| Automatic crisis-risk check of each message (we only store the time of the last signal) | Offering crisis help and lifting trial limits for 72 hours | Protection of vital interests; explicit consent |
| Email, password (stored only in encrypted form), language | Running your account, sign-in, account emails | Performance of the contract |
| Record of your consents (what you agreed to and when; without an account only the time of consent, with the technical identifier) | Being able to demonstrate consent | Legal obligation (Art. 7(1) GDPR) |
| Your address settings (formal or informal address, grammatical gender and, if you fill it in, a name or nickname) | So that Zyvora addresses you the way you want; you set them in your account or under Zyvora's first reply, or Zyvora saves them when you tell it in a conversation; with memory switched on, Zyvora also fills in the grammatical gender from how you speak about yourself in a conversation (e.g. the feminine form of a verb in Czech), until you set it yourself | Performance of the contract |
| Trial and subscription status, Stripe identifiers | Providing Premium | Performance of the contract |
| Payment and billing data (name, email, country, payment method, payment history) | Payments and accounting; processed by Stripe | Performance of the contract; legal obligation |
| The promo or partner code you used and the end date of free Premium | Providing Premium under the code; aggregate counts of code use. For a code issued with a service booking, we record only the workplace and the booking identifier the booking system gave us – not your name or contact details; the booking system learns from us only whether the code was used, nothing from your conversations | Performance of the contract |
| Hash of your email | One Premium trial, one use of each promo code and one partner code per email address | Legitimate interest (preventing abuse) |
| IP address | Detecting your country (correct crisis lines and currency) – checked on our server and not stored; preventing abuse – the trial and the limits on the number of requests (messages, purchases and code checks, reports, surveys, visits; we store only a hash, not the address); hosting technical logs | Legitimate interest |
| Problem reports (your description, e-mail for a reply, technical details: page, browser, device, language, error code, conversation identifier – never conversation content) | Solving the technical problem you report | Legitimate interest |
| Usage data: for each reply, the number of text units processed (tokens), the number of web searches, the kind of processing and your subscription phase – never message content | Overview of operating costs and pricing | Legitimate interest |
| Campaign label of the link you arrived through (the utm_source, utm_medium, utm_campaign and utm_content parameters), stored with the trial without an account or with the account | Summary statistics of how many visits, first messages, registrations and Premium each campaign brought – counts only, not linked to a person; the label is deleted after 30 days and never shared with advertising platforms (click identifiers such as fbclid or gclid are only removed from the address and never stored) | Legitimate interest |
| Your answer to a short survey (e.g. why you are not continuing with Premium or why you are deleting your account), an optional comment, and the cancellation reason if you give one in Stripe | Improving Zyvora | Legitimate interest |
| Your emails to our addresses | Answering your question or request. Emails to info@zyvora.ai and privacy@zyvora.ai are sorted, and replies drafted, by artificial intelligence (Anthropic); we keep only a technical record of the processing (message identifier, times, category and what the agent did), not its content or sender | Legitimate interest; performance of the contract |
Providing data is not mandatory. Without an email, however, you cannot create an account, and without explicit consent to processing your messages Zyvora cannot reply to you. Consent to memory is optional: everything else works without it, including stored conversations.
How you give consent
- Without an account: with the “Agree and send” button in the window that opens when you send your first message; until then the message does not leave your device. Your browser remembers the consent so that we do not ask again; we store the time of consent with the technical identifier. Crisis help (crisis line numbers) is available without consent too.
- At sign-up: consent to processing your messages is required, consent to memory is optional. Each has its own box and neither is ticked in advance.
- After a purchase without an account: someone else can pay for Premium and enter your email. That is why you open the account only through the link in the email: you set your password and choose both consents yourself. Until then, nobody can sign in to the account and memory is off.
- Withdrawal: you withdraw consent to memory by switching it off (Account → What Zyvora remembers); you can delete the memory at the same time. You withdraw consent to processing your messages by deleting your account or, without an account, by no longer using Zyvora – data without an account is deleted after 30 days at the latest. You can remove the consent stored in your browser by clearing the site data in your browser.
Storage in your browser
The app stores in your browser only what it needs to work: your sign-in, chosen language, appearance, country, the form of address chosen without an account (formal or informal), interface state (e.g. dismissed notices) and the time you gave consent to processing your messages without an account. This is not used for tracking and does not require consent. We use no third-party advertising or analytics tools; the campaign label of the link is not stored in the browser.
Who processes data for us
| Processor | What it does | Where |
|---|---|---|
| Supabase, Inc. | Database, sign-in, server functions | EU (Frankfurt) |
| Anthropic, PBC | Artificial intelligence that creates replies, titles, summaries and memory, and checks risk; with Premium it also searches the web (only a general query – for example for a study, a contact or a service – and, where relevant, your country go to the search, never your name, contact details, health information or other personal data); sorts emails sent to info@zyvora.ai and privacy@zyvora.ai and drafts replies to them | USA |
| Render Services, Inc. | Running the web application | EU (Frankfurt) |
| Cloudflare, Inc. | Network protection of the zyvora.ai website: the site's traffic passes through its servers (secure connection, protection against attacks and bots, including the Turnstile check) – it briefly processes your IP address and technical data about the request; no advertising cookies | worldwide, including the USA |
| Amazon Web Services EMEA SARL | Sending account emails (Amazon SES) | EU (Stockholm) |
| Microsoft Ireland Operations Ltd. | Company email (when you write to us) | EU |
| Stripe Payments Europe Ltd. | Payments and subscriptions (an independent controller for part of the processing) | EU, USA |
Anthropic does not use message content to train its models and keeps it only for a limited time (by default at most 30 days; messages flagged by its safety systems as violating its policies, up to 2 years). If you pay via PayPal or another payment service, that service also processes your payment data.
Transfers outside the EU: some data is processed by US companies. Transfers are protected by the EU–US Data Privacy Framework where the company is certified, or by standard contractual clauses approved by the European Commission.
How long we keep data
- Account, conversations and memory: for as long as the account exists. You can delete individual conversations and memory items at any time.
- After a Premium trial or Premium ends: we email you and delete the account with all its data after 14 days unless you renew Premium; we remind you 3 days before.
- Deleting your account in the app: immediately and permanently.
- Backups: deleted data (account, conversations, memory items) remain for at most 7 days in database backups, which serve only to recover from a failure; then they are gone from there too.
- Use without an account: the technical identifier, the time of consent and trial data for at most 30 days.
- Unconfirmed sign-up: if you do not confirm your e-mail within 30 days, we delete the sign-up, including the address. An account created when buying Premium without signing in, which you never sign in to, is kept for the duration of the subscription and deleted 30 days after it ends.
- Problem reports: at most 6 months; deleted at once when the account is deleted (also automatically), and after 30 days when used without an account.
- Usage data: for as long as the account exists (at most 30 days when used without an account); deleted together with the account.
- Campaign label of the link: 30 days from storing it; the summary daily counts, not linked to a person, remain.
- Survey answers and cancellation reasons: at most 24 months; after account deletion only the answer (and the cancellation reason code) is kept, without any link to the account, and your comment is deleted.
- Partner code from a booking: the record of its issue and use (workplace, booking identifier, dates) – an unused code for at most a year after it expires, a used one for 12 months from its use; after that only the code, the workplace and the dates remain for aggregate counts, with no link to the account and without the booking identifier.
- IP address hash: 30 days. Email hash: 12 months (also after account deletion – the email itself cannot be derived from it).
- Payment and accounting records: for the period required by accounting and tax law (usually 5–10 years).
- Technical record of processing an email (message identifier, times, category, no content): 60 days.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You can withdraw consent at any time (see How you give consent); this does not affect processing before the withdrawal.
- Download your data: Account → Download my data
- Memory: Account → What Zyvora remembers
- Delete your account: Account → Delete account
- Other requests: privacy@zyvora.ai. We will reply within one month at the latest.
You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or with the authority in your EU country of residence.
Automated processing
Zyvora's replies, memory and risk check are created automatically by artificial intelligence. They are not used to decide about your rights or anything with a similarly significant effect; the risk check only serves to offer you help.
Age
The service is intended for people over 18. We do not knowingly process data of younger people.
Security
Communication is encrypted, access to data is limited to what is necessary, passwords and IP addresses are never stored in readable form, and payment cards are not stored at all.
Changes
We will inform you about material changes to this policy by email or in the app. This policy applies from 11 November 2026.