Privacy Policy

Everything your AI apps save to Zaaheen, and everything you add yourself, is stored in a folder on your own computer and encrypted there. The key that unlocks it is kept in Windows' own secure store on the same computer. Zaaheen never uploads your memories to us or to anyone else, so we have no copy and no way to read them. The AI apps you connect can send memories to their makers, as explained below.

That also means we can't recover them for you. If you lose your computer or delete the folder, your memories go with it, so keep your own copy: Download my memories in the app saves everything as one readable file, whether or not you subscribe. That file is not encrypted, so keep it safe. Delete everything destroys the key and the memory files for good; it does not remove files you downloaded.

Zaaheen uses small AI models to search your memories and to tidy them up (merging duplicates and settling facts that contradict each other). These models run on your computer, not on a server, so your memories never pass through an online AI service on their way.

The app downloads the models the first time it needs them, from Hugging Face, a public library of AI models. The download sends nothing about you or your memories, but like any download, Hugging Face sees your computer's IP address.

Zaaheen never uses your memories to train AI models.

You choose which AI apps to connect to Zaaheen, such as Claude, ChatGPT or Cursor. A connected app reads memories from Zaaheen on your computer and saves new ones to it. When it uses a memory to answer you, that app may send it to its maker's servers as part of your conversation, just as it sends anything else you type.

What happens to it there is covered by that app's own privacy policy and your settings in it, including whether conversations are used to train its models. Zaaheen doesn't control that. You can remove Zaaheen from any of them at any time, and Zaaheen shows which apps are connected on its Agents tab.

You need an account to start your free trial and subscribe. It holds:

The fingerprint is made with a secret key, so it can't be turned back into your email address.

You need to give your name and email address to create an account, because we cannot give you a trial or a subscription without them. Everything else is optional. We make no decisions about you by automated means that have legal or similarly significant effects. Where we rely on your consent, such as for tips and product news, you can withdraw it at any time, and that does not affect what we did before. For people in the United Arab Emirates, where the law's starting point is consent, we rely on the exceptions for performing our contract with you and meeting our legal obligations, and on your consent for tips and product news.

If you choose Continue with Google, Google shares your name, email address and profile picture with us. We use your name and email address only to create your account and sign you in, and we don't use the picture. We ask Google for nothing else: no access to your Gmail, contacts, calendar or files.

We don't use information from Google for advertising, don't sell it, and share it only with the companies below that run your account for us. Zaaheen's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle collects your payment details, works out and pays the tax, and sends your invoices, as a separate data controller under Paddle's privacy policy. We never see or store your card details.

When you subscribe, we give Paddle your email address so it can set up your checkout, and Paddle tells us your plan and whether it is paid.

About once a day, and when you sign in or open it, the Zaaheen app checks your subscription with our account service. It sends your sign-in token, the app's version number and your computer's clock time, so the app can keep working offline for a while. That is all: no device ID, no usage statistics, and nothing from your memories. The version number is checked and not kept.

The app has no analytics, no tracking and no crash reporting. Its activity record stays on your computer, never contains your memories, and only leaves your computer if you save it with Save activity record… and send it to us yourself.

Like any server, ours sees your IP address when the app connects. We use it only to stop too many requests arriving from one place, count it for one minute, and never write it to our logs.

zaaheen.com sets no cookies and uses no analytics, advertising or tracking. Because we don't track you across websites, there is nothing for a browser's "Do Not Track" signal to switch off. The site is hosted by Hostinger and delivered through Cloudflare, whose servers see your IP address and keep standard server logs for security, under their own policies.

The payment page opens Paddle's checkout, which runs under Paddle's own privacy policy and may set its own cookies to complete your payment.

Our sign-in and sign-up pages use cookies only to keep you signed in while you use them. They are strictly necessary, so they don't need your consent, and they are never used for advertising. When you create an account, Cloudflare Turnstile checks that you are a person and not a bot, which means it looks at information about your browser.

We use a small number of companies to run Zaaheen. Each sees only what it needs to do its job:

We may also share information if the law requires it, or to protect Zaaheen and its users from fraud or abuse. None of these companies ever receives your memories.

Zaaheen is based in the United Arab Emirates, and the companies above handle data in the United States, the European Union and elsewhere. When personal data from the European Union or the United Kingdom goes to a country without an adequacy decision, we rely on the European Commission's standard contractual clauses, the United Kingdom's International Data Transfer Addendum, or the EU US Data Privacy Framework where the company is certified under it, as set out in each company's data processing terms. You can ask us for a copy of the relevant safeguards.

• We never sell or rent your personal information, and never share it for advertising.
• We never show you ads or build an advertising profile of you.
• We never use your memories to train AI models, and we never see them.

• Your memories: only on your computer, for as long as you keep them. We hold none.
• Your account: for as long as you have one. You can delete it yourself at any time with Delete my account in the app or on our website, and it is deleted straight away. If you email us instead, we delete it within 30 days. Deleting your account cancels any subscription.
• The trial fingerprint: for two years after your trial started, even if you delete your account, so the same person can't start a second free trial. It can't be turned back into your email address.
• Payment records: Paddle keeps these as long as tax law requires, under its own policy.
• Emails with us: for as long as we need them to help you, and no more than two years after the conversation ends.

Delete everything in the app deletes your memories and leaves your account in place. The Delete my account page on our website deletes your account and leaves your memories in place. Delete my account in the app does both: it deletes the memories on that computer, then opens the page where you confirm deleting your account.

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct anything that's wrong;
• delete your account and the information in it;
• stop or limit how we use it, or object to a use;
• give it to you in a format you can take elsewhere;
• stop emailing you, if you said yes to tips and product news.

Email customerservice@zaaheen.com from the address on your account. We reply within one month, free of charge. These are your rights under the European and UK GDPR, California's privacy laws and the UAE's data protection law, and we give them to everyone. We will never treat you differently for using them.

For your memories, you don't need to ask: Download my memories and Delete everything in the app do it straight away.

We email you about your account and subscription only when we need to. We send tips and product news only if you ticked the box for them. Every one of those emails says who we are and has an unsubscribe link, and you can also just reply and ask. We act on an unsubscribe within 10 days.

If you're unhappy with how we handle your data, email customerservice@zaaheen.com with "Privacy complaint" in the subject. We reply within 5 working days, look into it, and tell you what we found and what we have done. You can also complain to a data protection regulator: in the UK the Information Commissioner's Office, in the European Union the regulator where you live, and in the UAE the UAE Data Office.

Zaaheen is the trading name of Zaaheen Artificial Intelligence Developing Services, a business licensed in Dubai, United Arab Emirates (Dubai trade licence 1651252). "We" and "us" in this policy mean us. We are responsible for your account information. We are not responsible for your memories, because they stay with you and we never receive them.

This policy covers the Zaaheen app, your Zaaheen account, zaaheen.com and account.zaaheen.com. Coaching sessions booked through the Knowledge Centre are a separate service with their own privacy notice, which you see before you book.

Zaaheen is for people aged 18 and over. We don't knowingly create accounts for anyone younger, and if we learn that we have, we delete it.

Your memories are encrypted on your computer, and the key never leaves it. Your sign-in is kept in Windows' own secure store. Everything the app and our websites send travels encrypted, and our account service holds no memories at all, so even a break-in at our end could not expose them. If something ever went wrong with the account information we do hold, we would tell you and the regulators as the law requires.

When we change this policy, we update the date at the top of this page. If a change means we collect something new or use what we hold in a new way, we email account holders at least 30 days before it takes effect, and we ask for your consent first wherever the law requires it. We will never start receiving your memories, or using anything we hold to train AI, through a change to this policy alone.

Questions about this policy or your data: customerservice@zaaheen.com.