What data Zoe collects, who receives it, why, and what you can do about it.
Last updated 15 October 2026
VajraCode (“we”) operates Zoe at https://zoeai.info and is responsible for your personal data as described here. Contact for anything about your data: zoe@zoeai.info.
1. What we collect
- Account data: your email address; your name and picture if you sign in with Google; the display name, picture and preferences (theme, response style, sidebar width, typing effect) you set.
- Your conversations: the messages you send, Zoe’s replies, conversation titles, and summaries Zoe writes of them.
- Files you attach: images, PDFs, Word, text and Markdown files. We keep a copy so you can open it again in the conversation, and the text of documents so Zoe can read it. Images are re-saved without their hidden metadata (such as location). They are deleted with the conversation.
- Voice dictation: if you use the microphone button, the recording is sent to be turned into text and is not kept afterwards. Only the text is returned to you.
- What Zoe remembers: short facts and notes she derives from your conversations so she can help later. You can see, correct or delete them (section 7).
- Usage data: how many messages you send, which determines your daily allowance.
- Technical data: your IP address, browser and device type, and error reports, in server logs and error monitoring, used to run, secure and fix the service.
2. Why we use it
- To provide Zoe: sign you in, answer you, keep your conversations and remember what you asked her to.
- To keep the service safe: limit abuse, filter harmful content, and fix faults.
- To meet legal duties.
Where the law requires a legal basis (for example the GDPR), it is performing our agreement with you for the first, our legitimate interest in a safe, working service for the second, and legal obligation for the third. We do not sell your personal data and we do not use it for advertising.
3. Who receives your data
We use service providers who process data for us:
| Provider | What for | What it receives |
|---|---|---|
| OpenAI | Writing Zoe’s replies, checking content for safety, creating the search indexes behind her memory, and turning dictated speech into text. | Your message, the recent conversation, the memory context and the content of files you attach for that reply; the audio of a dictation. |
| Database and hosting providers | Storing your account and conversations, and running the service. | All the data in section 1. |
| Email delivery provider | Sending your sign-in link. | Your email address and the link. |
| Sign-in, only if you choose “Continue with Google”. | Your sign-in request. Google gives us your name, email and picture. | |
| Gravatar | Showing your Gravatar picture, if you have one. | A one-way hash of your email address. Our server asks, so Gravatar does not see your browser or IP address. |
| Error monitoring | Finding and fixing faults. | Technical error details. We aim to keep message content out of them. |
OpenAI handles the data it receives under its own terms and privacy policy. We may also disclose data where the law requires it. We do not share your conversations with anyone else.
4. Transfers abroad
Our providers may process data outside your country, including in the United States. Where the law requires safeguards for such transfers, we rely on the ones our providers offer, such as standard contractual clauses.
5. How long we keep it
We keep your data while your account is open. When you delete a conversation, or ask us to delete your account, we delete the related data. Some copies may remain briefly in backups, and we keep what the law requires us to keep. Sign-in links expire after one hour.
6. Cookies
Only strictly necessary ones. See Cookies and local storage.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it elsewhere. Write to zoe@zoeai.info and we will answer within one month. You can also change your display name, picture and preferences in Settings, delete conversations from the conversation list, and ask Zoe in a conversation what she remembers about you and to correct or forget something.
If you think we have handled your data wrongly, you may complain to your data protection authority: in Australia, the Office of the Australian Information Commissioner; in the European Union, the authority of your country.
8. Children
Zoe is not for people under 16. If you think a child has given us data, write to us and we will delete it.
9. Security
We protect your data with access controls, encrypted connections and keeping provider keys on the server only. No system is perfectly secure, and we will tell you and the authorities where the law requires us to if a breach affects you.
10. Changes
If we change a provider or how we use your data, we update this page the same day, and tell you directly if the change is significant.