Privacy Policy

Information we collect

• Account information: email address, display name, sign-in provider identifiers, account timestamps, and profile image.
• Creative content: prompts, story ideas, scripts, characters, sets, reference images, uploaded audio or video, generated media, edits, approvals, and publishing choices.
• fal.ai connection data: an encrypted copy of the API key you choose to connect, its last four characters, verification and usage timestamps, and your selected video model. The full key is not returned to the app after it is saved.
• Device and service data: installation and session identifiers, IP address, browser or device type, request metadata, security events, job status, and limited crash or performance diagnostics. Zeroshot does not use this data for targeted advertising.
• Optional device access: photos, camera, microphone, speech recognition, and media-library access only when you invoke a feature that needs it and grant the relevant permission.

How we use information

We use information to authenticate accounts; provide creation, generation, storage, playback, download, and publishing features; process support and deletion requests; protect the service; diagnose failures; comply with law; and improve product reliability. Where applicable, we rely on performance of our contract, your consent, legitimate interests in operating and securing the service, and legal obligations.

Service providers and disclosures

We disclose information only as needed to operate Zeroshot, at your direction, or when legally required. Current infrastructure and subprocessors include Cloudflare for application hosting, databases, queues, and media storage; fal.ai for AI inference when you request a generation; Apple and Google for optional sign-in; Plunk for account email delivery; Sentry for limited error diagnostics; and Expo for app builds and updates. Creative inputs and reference media required for an AI request are sent to fal.ai using the API key connected to your account.

Content is private by default unless you choose a publishing or sharing feature. We do not sell personal information or share it for cross-context behavioral advertising.

Storage, security, and retention

We use encrypted transport, access controls, scoped media links, and encryption at rest for connected provider credentials. Browser sessions may use local storage or secure device storage to keep you signed in. No system is completely secure, and you are responsible for protecting your account and third-party API keys.

We retain account and creative data while your account is active and as needed to provide the service. When you delete your account, we delete associated database records and stored media, subject to short-lived operational copies and limited retention required for security, fraud prevention, dispute resolution, or law. Revoked provider credentials are kept encrypted while associated account or job records require them and are removed when the account is deleted.

Your choices and rights

You can update your profile, disconnect fal.ai, revoke device permissions, sign out, or delete your account from the Profile screen. You may also use our account-deletion page. Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal data, withdraw consent, and appeal or complain to a data-protection authority. California residents may also request information about collection and disclosure and exercise applicable privacy rights without discrimination. We do not sell or share personal information as those terms are defined by California privacy law.

Children

Zeroshot is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Users who have not reached the age required to consent to online services where they live must use Zeroshot only with authorization from a parent or legal guardian.

International use and changes

Zeroshot and its providers may process data in countries other than your own. Where required, we use legally recognized transfer safeguards. We may update this policy as the product or law changes; the effective date above will be revised, and material changes will be communicated through the service when appropriate.

Contact

For privacy questions or requests, use our contact page. We may need to verify your account before completing a request.