Privacy Policy

This Privacy Policy describes how DIMA S SOFTWARE SRL (“we”, “us”, or “our”) collects, uses, and shares information when you use the Zen: Daily Affirmations mobile application (the “App”). Please read this policy carefully.

The App is available on iOS (Apple App Store) and Android(Google Play), and this policy applies to both versions. Some features exist on only one platform. Sign in with Apple, home screen and lock screen widgets, and Apple's tracking permission (App Tracking Transparency) are iOS only.

1. Information We Collect

Account Information

You can start using the App without signing in, in which case we create an anonymous account identified only by a user ID. We collect:

• Name: the name you enter in the App
• Email address: only if you sign in with Google or with Apple (iOS only)
• User ID: your Firebase user ID, which we also use as your customer ID with RevenueCat for managing subscriptions

Onboarding and Profile Answers

During onboarding and in your profile, you can tell us about:

• Your age range, gender, relationship status, and employment status
• Whether you are religious and, if so, which religion
• Your zodiac sign
• Your mood and mental wellbeing, such as how you feel, what you have already tried, and the self-care challenges you face
• An optional free-text note about how you feel
• Your goals and the topics you are interested in

We use these answers to run and personalise the App and for product analytics.

Content You Create

Custom affirmations, favourites, viewing history, reminder settings, and streaks.

Purchases

If you subscribe, we receive your subscription status and purchase history through RevenueCat. Payments are processed by Apple (App Store) or Google (Google Play). We never receive your card or other payment details.

Usage and Device Data

When you use the App, we and our service providers automatically collect:

• App interactions and analytics events, such as the screens and features you use
• Crash logs, performance data, and other diagnostics
• Device identifiers, including the advertising ID. On iOS, the advertising identifier (IDFA) is accessed only if you allow tracking. On Android, the Android advertising ID is used.
• Approximate location inferred from your IP address, used by Google AdMob for ads and by PostHog for analytics

Information We Do Not Collect

We do not collect your precise location, contacts, or messages. We do not record from your microphone, and we do not read your photo library.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Create and manage your account
• Personalise your affirmations and quotes based on your answers and preferences
• Schedule the reminders you have configured
• Process and manage your subscription
• Show ads to free users and measure how ads perform
• Analyse usage trends to improve the App
• Diagnose crashes and technical issues and fix bugs
• Protect the App and our systems against fraud and abuse
• Respond to your support requests
• Display daily quotes in home screen and lock screen widgets (iOS only)

3. Legal Bases for Processing

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the GDPR:

• Contract: to provide the App and your subscription
• Consent: for personalised ads and tracking, for the special-category answers you choose to provide (religious beliefs, health and wellbeing), and for notifications
• Legitimate interests: for security, crash diagnostics, and improving the App

You can withdraw your consent at any time. Withdrawing consent does not affect processing that took place before you withdrew it. See Advertising and Your Choices and Data Retention and Deletion for how to do this.

4. Third-Party Services

We share information with the following service providers, which we use to operate the App:

• Google Firebase for authentication (Firebase Authentication), database (Cloud Firestore), file storage (Cloud Storage), crash reporting (Crashlytics), and app security (App Check) (Privacy Policy)
• Google AdMob for the ads shown to free users. Personalised ads are shown only with your consent (Privacy Policy, How Google uses data from apps)
• Google User Messaging Platform for the consent form shown in the EEA, the UK, and Switzerland (Privacy Policy)
• Meta (Facebook SDK) for app events and ad measurement, which uses the advertising ID (Privacy Policy)
• PostHog for product analytics and error tracking (Privacy Policy)
• RevenueCat for subscription and in-app purchase management (Privacy Policy)
• Google Sign-In for account authentication (Privacy Policy)
• Sign in with Apple for account authentication, iOS only (Privacy Policy)
• Expo for delivering app updates (Privacy Policy)

We do not sell your personal information for money. However, when personalised ads or ad measurement are enabled, your advertising ID and related usage data are shared with Google and Meta. Some US state privacy laws treat this as “selling” or “sharing” personal information for targeted advertising. You can opt out as described in Advertising and Your Choices.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Advertising and Your Choices

Free users see ads from Google AdMob, including banner, interstitial, and app-open ads. Zen Pro subscribers do not see ads.

• EEA, UK, and Switzerland: we show you a consent form for ads. You can change your choice at any time in the App under Settings → Privacy Choices.
• iOS: personalised ads and tracking require your permission. You can change this at any time in your device's Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in your device's Settings → Google → Ads (on some devices, Settings → Privacy → Ads).

6. Data Storage and Security

Your account data is stored on Google Firebase servers. We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), Firebase App Check for request verification, access controls that ensure you can only access your own data, and secure authentication protocols.

While we take reasonable steps to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention and Deletion

We keep your data for as long as your account is active. You can delete your account at any time:

• In the App, under Profile → Settings → Delete Account
• By emailing contact@dimas-software.com from the email address linked to your account, or with your user ID

When you delete your account:

• Your account data, including your profile, onboarding answers, and content you created, is deleted within 30 days.
• Some analytics and crash records may remain with our service providers for their standard retention periods.
• Backups may keep copies of your data for a limited period (up to 30 days) before they are overwritten.
• Purchase records may be kept as long as required by law or by Apple and Google.

For step-by-step instructions, see our Account Deletion page.

8. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Request a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time

California and other US states: if you live in California or another US state with a consumer privacy law, you may have the right to know what personal information we collect and how we use and disclose it, to access, correct, and delete it, to opt out of the “sale” or “sharing” of your personal information for targeted advertising, and to limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.

To exercise any of these rights, email us at contact@dimas-software.com and we will respond within 30 days. If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

9. Notifications

The App can send you the reminders you configure, such as daily affirmation reminders. These reminders are scheduled locally on your device. You can turn them off at any time in the App's settings or in your device settings.

10. Saving Quote Images and Widgets

You can save quote images you create to your device. On iOS, the App asks for permission to add photos to your photo library. On Android, the App writes the image to your gallery without reading your existing photos. On both platforms, we never access or upload any other photos from your device.

On iOS, home screen and lock screen widgets show quotes using data that the App shares with the widget on your device.

11. Children's Privacy

The App is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. International Data Transfers

We are based in the Republic of Moldova. Several of our service providers, including Google, Meta, PostHog, RevenueCat, and Expo, are based in the United States and may process your data there or in other countries. When personal data from the EEA, the UK, or Switzerland is transferred to a country that does not provide an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Last updated” date at the top of this page. For significant changes, we may also notify you through the App or by email. Your continued use of the App after any changes means you accept the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us:

DIMA S SOFTWARE SRL
MD-6524, str. Independenţei
s. Hîrbovăţ, rl. Anenii Noi
Republica Moldova

Email: contact@dimas-software.com
Website: www.dimas-software.com