Zura Privacy Policy

Last Updated: 2025‑09-15

Your privacy matters. This Privacy Policy explains what information Fondant, Inc. ("Fondant," "we," or "us") collects through the Zura iOS app, zura.gg website, and any related services (together, the "Service"), how we use it, and the choices you have. We keep the language plain and avoid legal jargon wherever possible. By using the Service you agree to this Policy. If you do not agree, please stop using Zura.

1. Information We Collect

We only gather what we need to run and improve Zura.

A. Information you provide

• Account details – email, password (hashed), display name. If you sign in with Apple or another SSO provider we receive the address they share.
• Phone number (optional) – if you enable SMS reminders or verification.
• Prompts & media – any text, images, voice clips, or other content you upload or record while chatting with a character.
• Payment info – if you buy a subscription, Apple or Stripe handles your card. We see your Apple or Stripe receipt ID and the last 4 digits of the card, never the full number.
• Support messages – emails or in‑app tickets you send us.

B. Information we collect automatically

• Device & app data – IP address, device model, OS version, app version, unique device ID, push‑notification token.
• Usage data – screens viewed, session length, feature taps, error logs.
• Cookies / SDK events – on our website we set first‑party cookies for sign‑in and analytics; in the app we use analytics SDKs (e.g., PostHog) for the same purpose. No ads, no cross‑site tracking.

C. Information from others

• Discord – if you join the Zura community server we receive your Discord username and messages in that server.

2. How We Use Your Information

We never use your data for reasons that are incompatible with these goals.

3. AI Training & Prompt Logs

To keep Zura learning, we  our team and automated systems may review user prompts and ai generated responses to refine our models and filters. We strip or mask direct identifiers before using logs for training.

4. Who We Share Information With

We do not sell or rent your personal information. We share it only with:

• Service providers – secure cloud hosting, analytics, AI infrastructure, payments, SMS, email. They get only what they need and must keep it confidential.
• Affiliates & partners – other Fondant‑owned services, for the same uses listed above.
• Legal or safety reasons – if required by law or to protect you, us, or the public.
• Business transfers – if Fondant is acquired or merges with another company, your data moves with the business (you will be notified).
• With your consent – e.g., when you link Zura to a third‑party account.

5. Cookies & Similar Tech

• Essential cookies keep you logged in on the website.
• Analytics cookies/SDKs let us see usage patterns so we can improve Zura.
• You can block cookies in your browser; some site features may stop working.

The Zura app itself does not embed third‑party advertising SDKs.

6. Data Storage & Security

Data is stored on encrypted servers in the United States. We use HTTPS, encryption at rest, access controls, and monitoring, but no system is 100 % secure. Keep your password private and let us know right away if you think your account was compromised.

7. How Long We Keep Data

You can delete your account at any time from in‑app settings or by emailing support@fondant.design. We will erase or anonymise your personal data except what we must keep for legal reasons.

8. International Users

We are based in the U.S. If you live outside the U.S., your data will be transferred here. Where local law (e.g., EU/UK GDPR) requires, we rely on Standard Contractual Clauses or equivalent safeguards for that transfer.

Legal bases for EEA/UK users: contract (to provide the Service), legitimate interests (improve & secure Zura), consent (marketing), and legal obligation (tax, safety).

At Fondant Inc, we recognize and respect your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:

Your Rights:

• Right of Access (Article 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
• Right to Rectification (Article 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
• Right to Erasure (‘Right to be Forgotten’) (Article 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
• Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
• Right to Data Portability (Article 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
• Right to Object (Article 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
• Right to Withdraw Consent (Article 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.

To exercise any of these rights, please contact us at support@fondant.design. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

9. Your Rights & Choices

• Access / portability – ask for a copy of your data.
• Correction – update inaccurate info.
• Deletion – delete specific content or your whole account.
• Opt‑out – unsubscribe from marketing emails; reply STOP to marketing texts; disable push in iOS settings.
• Objection / restriction – in certain cases, ask us to stop or limit processing.

California residents have additional rights under the CCPA. We do not sell personal information.

To exercise any right, email support@fondant.design. We may verify your identity before acting.

10. Children’s Privacy

Where applicable, Zura and Fondant Inc. comply with the provision of the FTC's COPPA rule. For details and questions about COPPA - https://www.ftc.gov/business-guidance/resources/complying-coppa-frequently-asked-questions

Fondant Inc. is the sole operator collecting and maintaining the following personal information: Name, Age, Gender. Please contact us with any inquiries from the Contact Us section in this policy.

Information we collect from children:

• Name
• Age
• Gender

Anything children might disclose while speaking with the AI assistant in app is encrypted and stored in chat logs. We strip or mask personal identifiers before accessing chat logs for training.

We do not enable children to make their information publicly available. There is no social or sharing component to Zura.

We do not disclose any personal information unless required by law.

Before collecting information from children, guardians will provide verifiable consent using one of the methods listed in the COPPA rule.

Guardian's may review the information we have collected, prevent further collection and use, and request it's deletion at any time by contacting us using the information provided below.

We may verify your identity before acting.

11. Changes to This Policy

We may update this Policy as Zura evolves. If changes are significant we will notify you in‑app or by email 30 days before they take effect. The “Last Updated” date shows the latest revision.

12. Contact Us

Questions or concerns? We’re here to help.

Name: Fondant Inc.

Email: support@fondant.design

Phone: +1 (404) 514 3576

Data Protection Officer: support@fondant.design

Address:

16192 Costal Highway

Lewis Delaware 19958

USA
 

Thank you for trusting Zura! We’re committed to protecting your privacy while giving you the best character experience possible.