Privacy Policy

Version 1.0 — Effective 2026-03-01 — Last updated 2026-03-27

Overview

zakki (“the Service”) is operated by CAPH TECH Inc. (Japanese legal entity name: 合同会社 CAPH TECH, a Japanese limited liability company; “we”, “us”, “our”). This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and related services.

Information We Collect

Information You Provide

• Text records: Notes, memos, and text content you save to zakki
• Images: Photos and images you upload to zakki
• Account information: Email address and authentication credentials
• Support inquiry information: Your name, email address, and message when you contact us through the support form or email
• Early access / interview application information: Your name, email address, selected interest, and any optional note you submit through the early access form

Information Collected Automatically

• Device information: Device type, operating system version
• Usage metadata: Timestamps, record counts, feature usage patterns
• Error logs: Crash reports and performance data
• Form verification data: Cloudflare Turnstile verification results, IP address, timestamp, and similar anti-abuse metadata required to protect our support and early access forms
• MCP access metadata: When AI tools access your records via MCP, we collect access timestamps and aggregate request counts for operational monitoring

How We Use Your Information

• To provide and maintain the zakki service
• To enable MCP (Model Context Protocol) access so your AI tools can read your records with your authorization
• To improve the Service and develop new features
• To communicate with you about your account and service updates
• To manage waitlist signups, early access invitations, and user interview outreach

MCP Access

zakki provides MCP server functionality that allows AI tools (such as Claude, ChatGPT, and others) to read your records when you authorize the connection. This access is:

• Initiated by you: You must explicitly configure your AI tools to connect to zakki’s MCP server
• Read access is the default: AI tools can search and read your records. When the dedicated write path is available and you use it, AI tools can also save follow-up records with provenance marking as AI-authored. Those AI-saved records use a separate usage meter from your human-authored records
• Revocable: You can disconnect MCP access at any time from your account settings

Data Storage

Your data is stored securely using Supabase infrastructure. All data is encrypted in transit (TLS) and at rest.

Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Cloudflare: Website hosting, CDN, and anti-spam protection for support and early access forms
• Resend: Delivery of support inquiry and early access application emails
• Apple / Google: App distribution and in-app purchases

We do not sell your personal information to third parties. We do not use your records to train AI models.

Data Retention and Deletion

• Your records are retained as long as your account is active
• You can delete individual records at any time within the app
• You can delete your account from the app, or follow the public instructions on the account deletion page
• Account deletion removes the account and related records stored for zakki, including uploaded images associated with your entries, except where retention is required for legal compliance, fraud prevention, billing reconciliation, or refund handling
• If uploaded image cleanup is delayed by a temporary service issue, zakki retries that image deletion automatically after the account record is removed, subject to the same retention exceptions
• MCP access logs (access timestamps and aggregate counts) are retained for up to 90 days and then automatically deleted. If you delete your account, all MCP access logs are removed immediately
• We may retain information that must be preserved for legal compliance, fraud prevention, billing reconciliation, or refund handling for the required period
• Support form submissions are not stored in the Service’s user database; they are received by Cloudflare Workers and forwarded to our support mailbox through Resend
• Support inquiries are retained until the case is resolved and no longer needed for follow-up, fraud prevention, or legal compliance. After that, we periodically review the support mailbox and delete inquiries that are no longer required
• Early access / interview form submissions are not stored in the Service’s user database; they are received by Cloudflare Workers and forwarded to a dedicated lead capture mailbox through Resend
• Early access / interview submissions are retained only while they are needed to manage waitlist communications, interview coordination, fraud prevention, or legal compliance, and are periodically deleted when no longer required

Children’s Privacy

zakki is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the “Last updated” date and, for significant changes, by in-app notification.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: [email protected]