Zaki, Privacy Policy
Version 2.1 · Effective 9 September 2026
Language: English. The English text is the authoritative version. Translations
are provided for convenience; where they conflict, the English text governs,
except where local law requires the local-language version to prevail.
1. Who holds your data
Zaki is operated by Moshe Zaudi, an individual sole trader registered in Israel. Under Israel's Protection of Privacy Law, 5741-1981 he is the controller of the database described here. Under the GDPR he is the controller for users in the European Economic Area.
Write to [email protected] about anything in this policy. It is the only address Zaki publishes and it is read by a person. We answer within 30 days, and usually much sooner.
Zaki has not appointed a data protection officer and is not required to. Under Amendment 13 to the Protection of Privacy Law, in force since 14 August 2025, that duty falls on public bodies, data brokers, direct-mailing services and organisations carrying out systematic monitoring or large-scale processing of especially sensitive data. Zaki is none of those. For the same reason the database is not registered with the Privacy Protection Authority: registration now reaches public bodies and data brokers holding data on more than 10,000 people, and notification reaches especially sensitive data on more than 100,000 people.
2. The short version
- You can use Zaki without telling us who you are.
- If you sign in, we hold an email address: Apple or Google hands us one, or you typed one with a password. That is the only contact detail Zaki ever holds.
- A photo you upload is deleted after 7 days. The video made from it stays until you delete it.
- Your photo and the words you write are sent to the companies that run the models. They are named in section 6, with the country each one is in.
- Zaki does not train any model on your photos or your words.
- Zaki does not sell your data, and does not run advertising.
- Delete your account from inside the app and it goes, immediately, with everything in it. What survives is listed in section 8 and it is not much.
3. What Zaki holds
3.1 Before you sign in
The app opens an anonymous account for you when it first launches, before the first screen appears. It is a real row in our database with a random identifier, and nothing in it identifies you. It exists so that a video you make belongs to something, and so that you can delete it.
We also hold a device identifier. Your phone gives the app an identifier the operating system provides; the app hashes it with a fixed salt and the server hashes the result again, with HMAC-SHA-256 and a secret only the server knows. What is stored is that final hash. It cannot be turned back into your device identifier, and it does one job: it stops the same phone claiming the free video more than once.
When you claim the free video we also store a hash of your IP address, made the same way, as a backstop against the same person claiming it from many devices. That hash is erased after 7 days.
3.2 If you sign in
Zaki offers three ways in: Sign in with Apple, Sign in with Google, and an email address with a password. There is no magic link and no phone number. The app itself cannot create an email account or reset its password: an email account exists only where we have set one up for a named person, and we send no mail.
With Apple or Google, the provider hands us an email address and our authentication service stores it. If you used Apple's Hide My Email, what we get is Apple's relay address rather than your own, and we neither know nor need the difference. With an email account, the address is stored the same way, and the password is held by that service only as a salted hash, which neither we nor anything we build can turn back into the password. The app never displays the address back to you and it is not included in your data export, because nothing in the product uses it: it is the key the sign-in service matches you against next time.
We also hold your language and market, so the app comes up in the right one.
3.3 What you make
| What | Held as |
|---|---|
| A photo you upload | The image file, in our storage. Up to 4 photos can accompany a written idea; a template takes one. |
| The words you write | Both what you typed and the English version the app makes of it, because the video models are trained on English and a Hebrew or Arabic or Polish sentence has to be carried across before one will read it. |
| The video | The finished MP4 and its thumbnail, in our storage. |
| The job | Which template or idea, which model ran, how long the video is, what it cost you in credits, whether it succeeded, and the times. |
| Screening results | Whether a photo or a sentence was allowed, flagged or refused, the reason code, and which of the two it was. |
| A report you send | Which video, which reason, and the note you wrote, if you wrote one. |
| A notification token | If you allow notifications, the push token your phone issues, so we can tell you a video is ready. |
3.4 Money
Apple and Google take the payment. Zaki never sees your card, your bank details or your billing address, and never holds your money. What reaches us is a record that a plan is live, which plan, when the period ends, and which store it came from, plus a line in your credit ledger for every grant and every spend.
3.5 What we measure
Two streams, described fully in section 12: crash reports, and usage data including session replay. Both go to one company, in Germany.
3.6 What we deliberately do not collect
- No contacts and no address book.
- No location, precise or coarse, in the foreground or the background.
- No advertising identifier, no advertising SDK, no advertising network. Zaki carries no advertising at all.
- No tracking across other companies' apps or websites, and no data sold to anyone.
- No face recognition. Your photograph is classified for what is in it and then used to make your video. No face template is derived from it, no face database exists, and nothing about your face is matched against anything.
Because Zaki does not track you across other companies' apps and websites, Apple's App Tracking Transparency does not apply and the app never shows that prompt. We intend to keep it that way.
3.7 Photographs with other people in them
A photograph you upload may contain somebody who is not you, and that person's data then reaches us through you rather than from them. The Terms of Service put the obligation where it belongs: you may only upload a photograph of another person if they have agreed to being put into a machine-made video.
If somebody tells us a photograph of them was used without their agreement, we delete it and the video made from it, and we do not require them to prove who they are first. Write to [email protected].
4. Why, and what happens if you refuse
Israeli law requires us to tell you whether you are obliged to give us something and what follows if you do not. Nothing here is required by law, and nothing here is required to look at Zaki. What each piece costs you to withhold is in the last column.
| What | Why | Basis | If you refuse |
|---|---|---|---|
| The anonymous account | So a video belongs to somebody and can be deleted | Performance of a contract, GDPR Art. 6(1)(b) | The app cannot run |
| Your photo, your words | They are the input the model works from | Performance of a contract, Art. 6(1)(b) | No video gets made |
| Screening them | To keep illegal and abusive material off the service, which both app stores require of us | Legitimate interests, Art. 6(1)(f) | Not optional. Everything is screened |
| Your email address | So the sign-in service recognises you next time | Performance of a contract, Art. 6(1)(b) | Stay anonymous. You then cannot buy or export |
| Your password, as a salted hash (email accounts only) | So the sign-in service can check it next time | Performance of a contract, Art. 6(1)(b) | Sign in with Apple or Google instead |
| The device hash | One free video per phone | Legitimate interests, Art. 6(1)(f) | No free video |
| Purchase records | To give you what you paid for, and for our tax records | Contract, and legal obligation, Art. 6(1)(c) | No purchase |
| Push token | To tell you a video is ready | Consent, Art. 6(1)(a), given at the system prompt | Nothing. Open the app and look |
| Crash reports, usage data | To find what is broken and what people cannot find | Legitimate interests, Art. 6(1)(f) | Nothing. Both switches are in Settings |
5. Decisions software makes about you
Zaki makes two automated decisions, and both of them can refuse you a service you asked for.
- Every photo is classified before it is stored. A vision model looks at it and refuses child sexual material, intimate images that look non-consensual, explicit sexual content, real people who have been killed or seriously hurt, and material that exists to commit a crime. A refused photo is never written to storage.
- Every sentence is checked before any money moves. A fixed list of rules runs first, on what you typed, in the script you typed it in. A classifier runs after, on the English version. A refusal costs you nothing, because the check happens inside the same transaction as the charge and before it.
These decisions do not profile you. They read one photo or one sentence at a time. Nothing about you is scored, ranked, or carried from one job to the next, and no automated decision is made about your account, your prices or what you are shown.
If you think a refusal was wrong, say so. Write to [email protected] with the date, the time, and the job reference if you have it. A person reads it, not a model, and answers within 14 days. This is your right under GDPR Art. 22 and under Amendment 13 to the Protection of Privacy Law, and it is how we find out that a classifier has started refusing something ordinary.
6. Who else processes it
Zaki is one person. The service runs on other companies' machines, and making a video means sending your photo and your words to the company that runs the model. Every one of them, and what reaches it:
| Company | What reaches them | Where |
|---|---|---|
| Supabase | The database and the sign-in service: everything in section 3 | Germany |
| Cloudflare R2 | Your photos, your videos and their thumbnails | European Union |
| PostHog | Crash reports and usage data | Germany |
| fal.ai | Your English prompt, and time-limited links to your photos. This is the company that renders most videos | United States |
| OpenRouter | Your photo, for screening. Your sentence, for translation and for screening. Your photo again, to compose it into a template's scene. It passes these to Google's Gemini models and, on one fallback path, to xAI's Grok | United States |
| Kling, by Kuaishou | A link to your composed photo and to the template's motion clip, when the first renderer refuses. Never your words | Singapore |
| RevenueCat | Your Zaki account identifier and which product you bought. No photo, no words | United States |
| Expo | Your push token and the text of the notification. Never your words | United States |
| Apple, Google | Payment, sign-in, and delivery of notifications to your phone | Their own terms apply |
We also send ourselves operational alerts over Telegram when something breaks. Those messages carry a fixed list of fields: an error code, a count, a truncated job reference. The code refuses to put a user identifier, an email address, a prompt or an image link into one.
None of these companies is permitted to train a model on your content on our instruction, and Zaki trains nothing. Each of them processes your data under its own terms as well as ours, and if you want to read those, their names above are enough to find them.
7. Where it goes
Your database record, your photos and your videos are stored in the European Union. The screening, translation and rendering steps send data to the United States, and one fallback renderer is in Singapore.
Israel's Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 permit a transfer where the recipient is bound to protect the data on terms no weaker than Israeli law requires. Our agreements with these companies carry that undertaking. For users in the European Economic Area, transfers out of it rest on the European Commission's standard contractual clauses. Israel itself holds an adequacy decision from the European Commission, so data reaching Israel needs nothing further.
8. How long it is kept
| What | How long |
|---|---|
| A photo you upload | 7 days, then deleted from storage. A sweep runs every two minutes |
| The hash of your IP address | 7 days, then erased from the row |
| An anonymous account you never sign in to | 30 days, then deleted with everything in it. An account holding a live subscription or unspent credits is never deleted by age, whatever its age |
| Your videos and thumbnails | Until you delete them, or delete the account |
| Your prompts, jobs, screening records and reports | Until you delete the account, then immediately |
| The device hash | Kept. On deletion the link to your account is severed, so the row can no longer be connected to you. Without it, deleting an account and making a new one would be a free video a day |
| Your credit and payment ledger | Kept for our accounting and tax records. On deletion the link to your account is severed. GDPR Art. 17(3)(b) permits this |
| Crash reports and usage data | Held by PostHog, under the retention configured for our project. Ask us and yours is deleted |
9. What you can ask for
Two of these you can do yourself, immediately, without asking anyone.
- A copy of everything. Settings → Export your data. One JSON file with your profile, your credit history, every job including the words you wrote, your screening records, your reports, and links to your videos that work for 24 hours. Available once an hour, and to signed-in accounts only, because an anonymous account has no way to prove it is yours.
- Deletion. Settings → Delete your account. It happens immediately, and section 8 says what survives it. There is a longer explanation at how to delete your account and your data.
For anything else, write to [email protected]. You can ask to see what we hold (Protection of Privacy Law §13; GDPR Art. 15), to correct something that is wrong (§14; Art. 16), to have something erased (Art. 17), to restrict or object to a use (Arts. 18 and 21), to receive it in a portable form (Art. 20), and to have a person review an automated refusal (Art. 22, and section 5 above).
We answer within 30 days. If we need longer we will say so and why, before the 30 days are up. We do not charge for any of this.
10. Children
Zaki is rated 13+ on the App Store, 12+ on older versions of iOS, and we tell Google Play that our audience is 13 and over. It is not built for young children. We do not ask your age, so we cannot tell how old you are, and we do not try to work it out.
In much of the European Economic Area you can agree to this on your own at 16, unless your country has set it lower, and in Israel the age is the one the Legal Capacity and Guardianship Law, 5722-1962 sets. If you are under it, a parent or guardian has to agree for you.
If you are a parent and your child has been using Zaki, write to [email protected]. We will delete the account and everything in it, and we will not ask you to prove anything first.
11. Security
Every table in the database has row-level security switched on and no browser-facing role holds a grant on any of them; the app never reaches the database directly, only through a server that checks a signed token on every request. Photos and videos are stored under keys that cannot be guessed and are served through links that expire. The device identifier and the IP address are never stored in a form we could reverse. Secrets live in the hosting provider's secret store and not in the app you download.
If a security incident affects your data and Israeli or European law requires us to tell you or the regulator, we will, in the time the law allows.
12. The two switches
Settings → Privacy has two of them. Both are on by default, and turning either off is an objection under GDPR Art. 21 that we record and honour permanently, including if you turn it off and later reinstall.
12.1 Share crash reports
When the app breaks, it sends the error and the stack trace. The server does the
same for its own errors, under the literal identifier server, and
never sends the text of an error message.
12.2 Share usage data
Which screens you open, a session replay, and five named events: a generation started, a generation finished, the paywall appeared, a purchase completed, a free video claimed.
The replay is masked on your phone before anything is sent. Every text input,
every image and every view the system marks as sensitive is painted over on the
device. What arrives is the shape of the screen and where you tapped. Screen
names are recorded as patterns, never with a real identifier in them: the result
screen is recorded as /result/[jobId] and never as the job you
actually opened.
Location lookup from IP addresses is switched off at the source. Your Zaki account identifier is attached to this data only while the switch is on; turn it off and the connection stops being made. No email address and no name is ever attached.
13. This website
zakiapp.art sets no cookies, runs no analytics and loads nothing from anyone else. There are no fonts fetched from another server, no tracking pixels, no embedded video and no third-party scripts. Every page you can read here is a static file. Our host records ordinary web server logs for security and abuse handling.
That is why this site has no cookie banner: there is nothing to consent to.
14. Marketing
Zaki sends no marketing. No promotional email, no promotional push notifications, no SMS. If that ever changes we will ask you first, in the form section 30A of the Communications Law (Telecommunications and Broadcasts), 5742-1982 requires, and every message will carry the word advertisement, our name and a way to stop it. The notifications the app sends today tell you a video is ready and nothing else.
15. Changes
When this policy changes the version number and the effective date at the top change with it. If a change materially affects what we do with data we already hold, we will tell you in the app before it takes effect.
16. Complaints
Tell us first, at [email protected]. If that does not settle it:
- In Israel, the Privacy Protection Authority (הרשות להגנת הפרטיות) at the Ministry of Justice takes complaints from the public.
- In the European Economic Area, your own national supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO).
Neither of them requires you to come to us first, and going to them costs you nothing.
Moshe Zaudi, trading as Zaki, Israel
[email protected]