Privacy Policy

Last updated October 12, 2026

This policy describes what data the Zarok app processes on Google Play and in Telegram: why it is needed and on what basis, where and for how long it is stored, which features use it, when data is passed to external services, which consents you give, how to withdraw them and what rights you have. The app is developed by Zarok Studio. It decides why and how data is processed and is responsible for it: in terms of the EU General Data Protection Regulation (GDPR), it is the data controller. Contact us: support@zarok.app. The app is intended for users aged 13 and over, the assistant for users aged 14 and over.

What Zarok is. It is a calendar and a planner for your personal routine. Supplement courses (dietary supplements and vitamins), meals, workouts and rituals in it are suggested types of entries: examples of what you can track, not recommendations. The app does not prescribe or advise anything: what to record and what to follow is for you to decide.

1. Data inside the app

1.1. What data and why

Your entries. Meals and what they contain, supplement courses with doses and phases, workouts and events, ritual steps, vows, check-offs, notes and video links. This also includes task tags and priorities, saved search filters, the history of “Focus time” timer sessions and events from calendar files that you uploaded yourself. You enter this data yourself. It is needed to show your schedule, calculate progress and remind you about tasks.

Settings. The name we use to address you, if you provided one, the theme and background pictures, the sections on the tab bar, status and category colors, reminders, the meal plan. They are stored together with your entries so that the app works the way you set it up. For tasks you have moved to another day, the app stores the number of moves; it syncs together with the other settings and is removed after 60 days. The choice of welcome pictures (female or male version) is stored only on the device and is not sent to the server. A profile photo, if you chose one, is also stored only on the device.

Service data of the user record.

User record number. In Telegram it is your numeric Telegram identifier; in the app from Google Play it is a random number that the app creates on the device. This number is used to open your data on your devices.
Account: if you created one (it is optional). When signing in by email: the email address, whether it has been confirmed, and the password as an irreversible hash; we do not store or know the password itself. When signing in with Google: the identifier of your Google account, the email address and the name that Google passes on (section 3.8). Also the date when you accepted the Terms and this policy, and their version. The account is needed so that your data, your Zarok, settings and subscription are not lost when you change phones.
Access to the “Zarok Plus” subscription (the assistant, connecting AI clients, glossy themes and widget palettes): whether it is active, until what date and on what basis (a subscription or a beta-test promo code). For a Google Play subscription: the purchase confirmation (token), the plan, the term and the renewal status. If you have been issued a permanent code for signing in from other devices, that code and the list of devices signed in with it are stored. For each such sign-in we store the device type as one word (Android, iPhone, Windows and so on), the sign-in time and the time of the last request. No more than five devices can be connected with a code. A one-time sign-in code is valid for 10 minutes and is not stored after that; the promo code itself is not stored.
Connected AI clients (if you connected any): the client name, the permissions granted to it, the connection date and the history of changes it made to the plan (section 3.13). One Zarok can have no more than five connections. When there are already five, a new connection of the same client replaces its oldest connection; for a different client, you first need to revoke one of the connections.
Consent to use the assistant: the age confirmation, the date of consent and the version of the terms text, and if you withdrew it, the date of withdrawal.
Usage counters: how many times sections and features were opened and on which days you opened the app (over the last 60 days). The content of your entries does not go into the counters. They are needed to understand which features are useful. The counters can be turned off: Profile → “Data & sync” → “Usage statistics”. The collected counters are then deleted, and new ones are not recorded.

Conversation with the assistant. Your requests to the assistant, including those recognized from voice, and its answers are stored on our server together with which changes the assistant suggested, whether you applied them and what could not be applied. The content of attached files is not saved, only their number. We use this conversation to understand which features are used, what the assistant gets wrong and what should be improved. Only the developer has access to it. We do not use it for advertising and do not sell it.

Together. This section is for keeping one task list with one other person or with your family: assigning tasks, checking off what is done and discussing them. It opens after you sign in to an account. The list name, tasks, notes, check-offs and comments are stored on our server and are visible to all members of that list. Members see the name that you entered yourself when joining the list; they do not see your email or your account. An invitation is a one-time code valid for seven days, which you pass on yourself.

How shared lists are protected: on the server they are stored in encrypted form, and the key is kept separately from the data itself; between the app and the server, data travels only over a secure connection. Only the developer has access to the server.

How shared lists are deleted: a completed task, together with the comments on it, is erased 180 days after it was checked off; the activity feed is kept for 30 days. A task or a comment can be deleted right away, and it disappears for all members. When you leave a list or are removed from it, your tasks stay with the other members, but without your name. The owner can delete the whole list; if the owner deletes their account, the list is deleted for everyone.

Reports and support requests. If you report a task or a member of a shared list, we receive the list name, the task text and the member's name; the other members will not learn about the report. If you report an answer from the assistant, we receive the reason for the report, your comment, the request and the answer. They are needed to check how the assistant works. If you write to us in the app (Profile → “About” → “Message the developer”), we receive the text of your messages, the time and technical details: the app version, the device's system and its version, the language and whether a subscription is active. The messages and the replies to them are stored on our server; the developer learns about a new message from a notification in the Telegram messenger (section 3.11). If you write by email, we receive your address and the text of the email. Support requests are used only to reply to you and to fix errors.

IP address. The server sees the device's IP address on every request. It is used only for protection against abuse, for example to limit the number of requests from one address. The IP address is recorded only in the server's technical logs.

1.2. Which features use the data

Schedule, check-offs and progress: your entries and check-offs. Everything is calculated on the device.
Reminders: the time and names of tasks. Notifications are scheduled on the phone itself and arrive without an internet connection; our server is not involved. Besides task reminders, these are the day recap, one reminder from Zarok on a day when nothing is checked off, and reminders after 3 and 7 days if you have not opened the app. Each type can be turned off separately: Profile → “Reminders”.
Home-screen widget (Android): the items of today and the next two days, their check-offs, the count of completed items by day for the current week and the two previous ones, and also for the days of the current month (for the “Calendar” widget), the names of tasks from the schedule for six weeks back and ahead and their check-offs for the last 42 days (for the “My steps and dates” widget), the day when the app was last opened, the chosen Zarok form, the colors and look of the theme, and indicators of whether the assistant is unlocked and whether the subscription is active. The “My steps and dates” widget also has its own settings: the chosen tasks, the name and date of an important event, the look. All of this is stored only on the device, so that the widget can show the day and Zarok's mood without opening the app. Check-offs made in the widget are recorded by the app the next time it is opened.
Phone calendar (Android): only if you connected it. The app reads the events of the selected calendars from two weeks back to about two and a half months ahead: title, description, time and recurrence, and brings them into your schedule. It adds its own entries of the selected types to one phone calendar and updates them there. Which events are linked to which entries is stored only on the device (section 3.10).
Sync: a copy of your entries and settings on our server, so that data is not lost and opens on your other devices.
Account: sign-in with Google, with an email and password, or with a one-time code from an email, to open the same data on a new phone. Emails are sent to confirm the email address, to sign in with a code and to recover the password (section 3.9). You can also use the app without an account.
Conversation with the developer: your messages, the technical details attached to them and the replies. It is not included in the export file or in the copy of your entries.
Export and import: a file with your data that you save and open yourself.
Undoing the last change: a snapshot of the previous state is stored only on the device, for 24 hours.
Assistant: the request and the part of the schedule needed for the answer go to a third-party AI service (section 3.1), only after your consent (section 4).
Voice input: speech is recognized by the device's service (section 3.2).
Video: videos from your links open in embedded players (section 3.5).

1.3. Where the data is stored

In Telegram and in the app from Google Play: on the device and on our server in Germany (European Union), so that data is not lost and opens on your other devices. After the user record is deleted, data is stored only on the device until you turn sync on again.
The conversation with the assistant is visible on the device for 7 days; its copy is stored on our server (see “Conversation with the assistant”).
The server keeps earlier versions of your entries for up to 30 days, so that data can be restored after a failure.
Between the app and the server, data travels only over a secure connection (HTTPS). Only the developer has access to the server. Passwords are stored only as an irreversible hash; links from emails are single-use and valid for a limited time.
If a data breach occurs that threatens your rights, we will inform you and the supervisory authority within the time limits required by law.

1.4. How long the data is stored and how to delete it

Entries, account data and service data are stored while you use the app. A user record with no activity at all for a year is deleted automatically together with all its data, unless it has a paid period.
Reports are stored for no longer than a year. The conversation with the developer is stored for up to 180 days after the last message in it; you can delete it earlier with the “Delete conversation” button in the same window, and a conversation started in the bot chat with the /support_delete command. The conversation with the assistant is stored on the device for 7 days, and its copy on the server for up to 180 days. Earlier versions of entries are stored for up to 30 days. The server's technical logs are stored for 14 days.
The “Clear” button in the assistant chat erases the conversation both on the device and on the server. The same happens when consent to AI is withdrawn (section 4).
You can delete data in the app: Profile → “Data & sync” → “Reset data…” or Profile → “Account” → “Manage account” → “Delete account…”. You can erase individual sections, everything at once, or the whole user record together with the account, the copy on the server, its earlier versions, the conversation with the assistant and the conversation with the developer. Without the app, you can do this at zarok.app/delete-account.
You can export a copy of your data at any time: Profile → “Data & sync” → “Export”.

1.5. Legal bases

We process data only when there is a basis for it that is provided by law (Article 6 of the GDPR):

Contract. So that the app works the way you use it: to store and show entries, calculate progress, provide sync and the account, link the schedule with the phone calendar, send sign-in emails and open the subscription features. Without this data, such features do not work.
Consent. For the assistant: requests go to the AI service, and the conversation is stored on the server, only after your separate consent (sections 3.1 and 4). Consent can be withdrawn at any time.
Legitimate interest. To protect the service from abuse (IP address, limiting the number of requests, technical logs), to review reports about the assistant's answers, to reply to support requests and to understand from the usage counters what to improve. You can object to the counters by turning them off (section 4).
Legal obligation. If the law obliges us to store or disclose data.

2. What we do not do with data

We do not ask for your phone number, contacts, location or advertising identifier. You do not need to give a name: the field in the profile is optional, and we do not show the name from your Google account to anyone.
We do not sell data.
We do not use data for advertising, marketing or profiling, and we do not pass it to other companies for those purposes.
We do not show ads and do not embed third-party advertising or analytics services.
We do not make decisions that have legal or similarly significant consequences for you solely on the basis of automated processing: the assistant only suggests changes, and you are the one who applies them.
Data goes to external services only in the cases listed in section 3: when you use the corresponding feature, and only the data that the feature needs.
We may disclose data in other cases only if required by law.

3. External services for individual features

3.1. The assistant: a third-party artificial intelligence service

When. Only when you yourself send a request to the assistant, and only after your consent. If you do not use the assistant, nothing is passed to the AI service.

In the Telegram chat. If you connected Telegram, you can write to the assistant there too. Such messages are processed in the same way as requests in the app: they go to a third-party AI service and are stored on our server on the same terms. The schedule changes only after your “Yes”.

What data. The text of the request, including text recognized from voice; the content of an attached text file, for example a spreadsheet; an extract of the schedule needed for the answer: today's date, courses and habits with phases, doses, intake times and steps, today's meals with what they contain, events with times and days of the week, the dates of the meal plan. The user record number, your device's IP address and payment information are not passed to the AI service.

To whom. To the provider of the AI service that our server calls through an API. We have no AI model of our own. The service may process data outside your country, including outside the European Union, where the level of data protection may be lower. Such a transfer takes place only with your explicit consent (section 4).

Why. To compose an answer and suggest changes to the schedule. Changes are applied only after your confirmation.

Storage. A copy of the request and the answer is stored on our server for up to 180 days, to improve the assistant (see section 1.1, “Conversation with the assistant”, for details). The storage and use of the received data by the AI service are governed by its terms.

What not to enter. The service receives everything you wrote or attached. Do not include a phone number, an address or other details that are not needed for the schedule in your requests.

Age and consent. The assistant can be used from age 14; from 14 to 17, with the permission of parents or legal guardians: the rules of the AI service require this. Before the first request or the purchase of a subscription, the app shows the assistant's terms: what data goes to the service and where the conversation is stored. Once you have read the text to the end, the “Continue” button becomes available. Then you need to separately check “I'm 14 or older” and “I consent to my requests being processed using AI” and tap “Turn on the assistant”. For how to withdraw consent, see section 4.

Your own key. In developer mode you can enter your own access key to an AI model. Requests then go from the device directly to the provider of that key, bypassing our server, and are processed under its terms. The key is stored only on the device and is not sent to the server or included in the export file.

3.2. Voice input

Speech is recognized by the service of your device or browser (on Android and in Chrome, this is Google) under its own rules. The app receives only the finished text; voice recordings do not reach us. The phone asks for access to the microphone the first time you use voice input.

3.3. Subscription payment: Google Play

Payment is handled by Google Play; we do not have access to your card number or other payment data. To unlock access, our server sends the purchase confirmation (token) to Google Play for verification.

3.4. Sign-in through Telegram

When you open the app in Telegram, Telegram passes it the details of your profile. The server uses them only for sign-in and saves only the numeric identifier: it serves as the user record number. When you tap “Start” in the bot chat, the server remembers this identifier, the username or profile name, the Telegram language and the tag of the link you followed, if there was one. If you connect Telegram to a Zarok account, the account stores the list of connected Telegram accounts: the identifier, the name and the connection date. These details are erased together with the user record: on “Reset everything”, when the account is deleted and when inactive user records are cleaned up; an individual Telegram account can be disconnected in the account settings. So that Telegram cannot be linked more than three times a day, the ID of the last linked Telegram account and the linking time are stored.

The mini app in Telegram. It has no built-in assistant: you can write to AI Zarok in the bot chat. In its place there is a “Telegram” section with the settings of group chats for Together lists: a reminder on the due day and its hour, a day recap, direct messages to members, pinning the panel and the language of the chat messages. These settings are stored with the shared list.

3.5. Video

Videos that you attached yourself are played by the embedded YouTube or Vimeo players. The player loads only when you open a video. The service receives viewing data, the IP address and device details under its own rules.

3.6. Fonts and the Telegram library

When opened, the app loads fonts from the Google Fonts servers, and the Telegram version also loads the Telegram library from telegram.org. These servers receive the technical details of the request: the IP address and browser data. Your entries are not passed to them.

3.7. Android backup

If backup is turned on on the phone, Android saves the data of apps, including Zarok, in your Google account under Google's rules. After a reinstall, the app itself will ask whether to continue with the data from the backup or to start over. You can turn backup off in the phone settings.

3.8. Sign-in with Google

If you tap “Sign in with Google”, Google shows its own account selection screen and, with your permission, passes the app a sign-in confirmation: the account identifier, the email address and the name. Our server verifies the confirmation with Google and stores the identifier, email and name in your account. No password is created in this case. To sign in by email as well, you can set a password using a link sent by email: Profile → “Account” → “Manage account” → “Set password”. Data processing on Google's side is governed by its rules.

3.9. Emails

Service emails are sent from an address on the zarok.app domain through the email service that hosts this mailbox. There are five such emails: an email confirmation, a sign-in code, a link for a new password, a message that the password has been changed, and one email about the creation of the account. The service receives the recipient's address and the text of the email with the link or code. Links and codes are single-use: the confirmation link is valid for 24 hours, the new-password link for 1 hour, and the sign-in code for 10 minutes. The emails address you in the polite or the casual style, as chosen in “Reminders”. We do not send promotional emails.

3.10. Phone calendar

Connecting the calendar is your choice: Profile → “Device calendar” → “Connect a calendar”, after which the phone asks for permission to read and change the calendar. Events from the calendar become your entries in the app: with sync turned on, their copy is stored on our server together with the other entries (section 1.3). Entries that the app added to the phone calendar are then stored by the calendar itself and, if it is linked to an account such as Google, also by that account's service under its own rules. Repeating events and all-day events are brought over for viewing only: changing them in the app does not change the series in the calendar.

Tidying up the calendar. If you wish, the phone calendar can be managed right from the app: you choose the calendar, the period and the events, and what is not needed is removed with one tap. All of this happens on your phone: the list of events is not sent anywhere from it and does not get to our server. Only the events you selected yourself are deleted.

3.11. Conversation with the developer: a notification in Telegram

When you write through “Message the developer”, our server sends the developer a notification in the Telegram messenger, in the same way as an email is delivered by the email service (section 3.9). The notification contains the message text, the support request number, a depersonalized label of the user record and the technical details from section 1.1; the user record number itself is not included in it. The developer replies there; the reply returns to our server and is shown to you in the app. Do not include passwords, payment data or other details that are not needed for your question in your messages.

Support in the bot chat. A question written to the bot in Telegram after the /support command goes to support and is stored in the same way and for as long as requests from the app. The conversation is kept under the record of that Telegram account; the developer is not shown the Telegram ID. You can delete it with the /support_delete command.

Hints and reply time. While you type a question in the “Message the developer” window, the app picks help topics on the device: the text you type is not sent anywhere until you tap “Send”. We usually reply within a day.

3.12. The zarok.app website

On the pages of the website you can try out the look and Zarok. The choice is remembered only if you yourself turn this on in “Site settings”: then a record with your choice is kept in the browser's storage (localStorage) for no longer than a year. It is not sent to the server and is not linked to the app; you can delete it in the same place. There are no advertising or third-party analytics scripts on the website.

3.13. Connected AI clients

You can connect a third-party AI client to your plan, for example ChatGPT, Claude or Gemini: Profile → “Integrations & import” → “Connect an AI app”. This is optional and is included in the “Zarok Plus” subscription.

What the client receives. Only what you allowed when connecting: the tasks and events of the selected days, habits and rituals, the count of check-offs for a period, Zarok's state. If you allowed changes to the plan, the client can add, move, change, remove and check off tasks. Passwords, account keys, the conversation with the assistant and shared lists are not passed to it.

Who the data goes to. To the service that you chose and connected yourself. From then on it processes the data under its own rules; we do not control them. Read its policy before connecting.

What we store. The list of connections (client name, permissions, date) and the history of its edits are stored for 30 days. The data for undoing an edit is stored for 24 hours. The client's access keys are stored only as fingerprints. If a client registers by the address of its own description, we store that address, the client name and the time the description was read.

How to disconnect. Profile → “Integrations & import” → “Connect an AI app” → “Access” → “Revoke access”. The client loses access immediately. Connections are also erased when the account is deleted and stop working when the subscription ends.

4. Consents and how to withdraw them

Processing of AI requests. A separate consent before the first use of the assistant (section 3.1). The fact of consent, its date and the version of the text are stored. You can withdraw consent at any time in the profile: Profile → your name → “Account” → “AI & subscription” → “Withdraw AI consent”. After withdrawal, requests are no longer sent to the AI service, and the conversation is deleted from the device and from the server. This does not cancel the subscription: it is managed by Google Play. You can turn the assistant on again in the “Assistant” section by consenting again.
Account. By creating an account, you accept the Terms of Use and this policy; the date and their version are stored. The account works on the basis of a contract (section 1.5), and you can delete it at any time: Profile → “Account” → “Manage account” → “Delete account…”. You can sign out of the account in the same place: the data will stay in the account and will be removed from the device.
Usage statistics. The counters from section 1.1 are recorded on the basis of legitimate interest. You can object at any time: Profile → “Data & sync” → “Usage statistics”. The collected counters are deleted when you do.
Marketing. We do not send advertising or marketing emails and do not use data for marketing. If this changes, we will ask for a separate consent, and without it we will not send anything.
Reminders. The phone asks for permission for notifications when you turn reminders on. You can turn them off (all at once or by kind) in the profile: Profile → “Reminders”, and you can withdraw the permission in the phone settings.
Microphone. Permission is requested the first time you use voice input; you can withdraw it in the phone settings.
Calendar. The phone asks for permission to read and change the calendar when you connect the calendar. You can stop the link in the profile: Profile → “Device calendar” → “Disconnect calendar”, and you can withdraw the permission in the phone settings. Entries already brought into the app or into the calendar stay where they are; you can delete them like ordinary entries.
If the assistant's terms change materially, the app will show them again and ask for consent again.
Withdrawing consent does not affect processing that took place before it and does not prevent you from using the rest of the app.

5. Your rights

Under the GDPR and the data protection laws of many countries, you have the rights below. Most of them can be exercised right in the app, the rest by emailing support@zarok.app.

Access. You can find out what data about you is processed and get a copy of it: Profile → “Data & sync” → “Export” or on request by email.
Rectification. Any entry can be changed in the app itself. If the account's email needs to be corrected, write to us.
Erasure. In part or in full, in the app or on the page zarok.app/delete-account (section 1.4).
Restriction of processing. You can ask us not to process data while it is being checked whether the data is accurate and whether the processing is lawful.
Portability. The export file contains your data in the machine-readable JSON format: it can be saved and moved to another service.
Objection. You can object to processing based on legitimate interest, for example by turning off usage statistics (section 4).
Withdrawal of consent: at any time (section 4).
Complaint. If you believe that your rights have been violated, you can contact the data protection authority of the country where you live or work or where, in your opinion, the violation took place.

We answer requests free of charge and within one month, at the address you wrote from. To avoid disclosing data to the wrong person, we may ask you to confirm that the account is yours, for example by writing from the account's email.

6. Age of users

The app is intended for users aged 13 and over. The assistant can be used from age 14; from 14 to 17, with the permission of parents or legal guardians. We do not knowingly collect children's data. If you are a parent and believe that a child under 13 has given us data, write to support@zarok.app, and we will delete it.

7. Documents and contacts

Terms of Use: Profile → “About” or zarok.app/terms.
Account deletion, including without the app: zarok.app/delete-account.
Policies of external services: Google: policies.google.com/privacy (sign-in with Google, Google Play, YouTube, speech recognition, Google Fonts, Android backup); Telegram: telegram.org/privacy; Vimeo: vimeo.com/privacy.
If the policy changes, the new version will appear in the app and at zarok.app/privacy with a new date. We will notify you of material changes in the app.
Questions about data and deletion requests: support@zarok.app.