Privacy Policy

Last updated: May 27, 2026

Overview

Zzzap is a product of Rhapsy LLC, a limited liability company formed in Oregon ("Rhapsy", "we", "our"). This Privacy Policy describes how we collect, use, and share information when you use the Zzzap mobile app and zzzap-app.com (collectively, "the app"). We take your privacy seriously and collect only what we need to make the app work.

Information We Collect

• Account information: When you sign in with Apple, we receive your Apple ID identifier and, if you choose to share it, your email address and display name. You may also add a real name and phone number to your profile.
• Profile photo: If you upload a profile photo, it is stored on our servers (Firebase Storage).
• Zzzap data: Questions, answer options, votes, recipient lists, and photos you include in photo zzzaps are stored on our servers (Firebase) to deliver the experience.
• Social connections: Your follower and following relationships, groups, and nicknames you set for friends and groups are stored to power the app's social features.
• Invite codes: Each user receives a unique invite code. When codes are redeemed, we track who invited whom to enable mutual follow and measure growth.
• Push notification tokens: We store your device token to send you notifications about zzzaps you've received or created.
• Searchability preferences: You control whether other users can find you by name, email, or phone number. These preferences are stored with your account.

Photo Zzzaps

When you create a photo zzzap, the images you select are uploaded to our servers (Firebase Storage) and delivered to the recipients of that zzzap. Photos are only visible to the zzzap creator and recipients. They are never publicly accessible or discoverable.

Content Moderation

To keep Zzzap safe for everyone, images in photo zzzaps are automatically screened for inappropriate content using Google Cloud Vision API before they are delivered to recipients. Google processes the image to return a safety assessment. No images are retained by Google after processing. Images that are flagged as unsafe may be blocked from delivery. We may also review reported content manually. No human reviews your photos unless another user reports the content.

AI Processing

Parts of Zzzap rely on AI to function. We send certain content to OpenAI for the following purposes:

• Text moderation: Poll questions and answer options are checked against an AI safety filter before delivery.
• Storm summarization: When a voter writes a long-form answer in a Storm, we send the text to OpenAI to generate a short headline for the leaderboard. The voter sees the suggestion and may edit or replace it.
• Storm clustering: After a Storm closes, we send the full set of write-in answers to OpenAI to cluster similar ideas so the creator can merge duplicates efficiently.
• Decision metadata: Poll questions and options may be sent to OpenAI to classify them (e.g., intent, urgency, category) so future features can offer smarter recommendations.

Content sent to OpenAI is processed under their API terms and is not retained by OpenAI for model training. These AI assists are built into the foundation of the app, so they cannot be disabled by individual users.

Contacts

If you use Find Friends, your contacts are matched against existing Zzzap users to help you connect. Contact data is hashed for matching and is not stored on our servers.

Information We Do Not Collect

• We do not sell your data to third parties.
• We do not use your data for advertising.
• We do not track you across other apps or websites.

Data Storage and Security

Your data is stored on Google Firebase servers in the United States. We use industry-standard security measures including encrypted connections (TLS) and Firebase Security Rules to protect your data.

Data Retention

Zzzap data (questions, options, votes, and recipients) is stored on our primary servers for 7 days after a zzzap closes. After 7 days, it is moved to archived storage where it is retained for record-keeping and support purposes. You can delete your account at any time, which removes all associated data, including archived data, from our servers.

Your Data Rights

You can request a copy of all data associated with your account at any time. In the app, go to Profile → Privacy → Request My Data. You can also email us directly at support@zzzap-app.com. We will respond to data requests within 30 days.

Children's Privacy

Zzzap is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes through the app or by updating this page.

Contact Us

If you have questions about this privacy policy, contact Rhapsy LLC at support@zzzap-app.com.