Last updated: October 17, 2026
Zzzap is a product of Rhapsy LLC, a limited liability company formed in Oregon ("Rhapsy", "we", "our"). This Privacy Policy describes how we collect, use, and share information when you use the Zzzap mobile app and zzzap-app.com (collectively, "the app"). We take your privacy seriously and collect only what we need to make the app work.
When you create a photo zzzap, the images you select are uploaded to our servers (Firebase Storage) and delivered to the recipients of that zzzap. Photos are only visible to the zzzap creator and recipients. They are never publicly accessible or discoverable.
On most zzzaps, the app does not show anyone how you voted. Everyone sees the totals. Comments appear without your name or photo, to the creator and to other voters alike. The exception is an Open Ballot: the creator can see how you voted and which comment is yours, and the app tells you before you vote. In a very small zzzap, people may still be able to guess who wrote something.
If you hide a comment or mute a commenter, that choice is stored privately with your account. No one else can see it, and the person is never told. If a comment is reported, our team can see which account wrote it so we can review the report.
To keep Zzzap safe for everyone, images in photo zzzaps are automatically screened for inappropriate content using Google Cloud Vision API before they are delivered to recipients. Google processes the image to return a safety assessment. No images are retained by Google after processing. Images that are flagged as unsafe may be blocked from delivery. We may also review reported content manually. No human reviews your photos unless another user reports the content.
Web links included in zzzaps or comments may be checked against Google Safe Browsing, a service that identifies known phishing and malware sites, before other users are allowed to open them. Only the link itself is checked; no other content is shared.
Parts of Zzzap rely on AI to function. We send certain content to OpenAI for the following purposes:
Content sent to OpenAI is processed under their API terms and is not retained by OpenAI for model training. These AI assists are built into the foundation of the app, so they cannot be disabled by individual users.
If you use Find Friends, your contacts are matched against existing Zzzap users to help you connect. Contact data is hashed for matching and is not stored on our servers.
Each account has a profile code, shown as a QR code in the app. Anyone who has your code can use it to open your profile and follow you. Using your code does not make you follow them back. You can reset your code at any time in Profile → Privacy → Reset My QR Code, and the old code stops working right away.
When you share Zzzap, the app creates an invite link. Anyone who opens it and signs in within 30 days is connected with you, meaning you each follow the other. We store each invite link along with who sent it, who used it, and when, so we can make the connection and let you know when someone joins. Invite links expire after 30 days. Your invite links and profile code are deleted when you delete your account.
The first time you open the app, it may offer a Paste button so you can bring in an invite link you copied. The app reads what you copied only if you tap that button.
Your data is stored on Google Firebase servers in the United States. We use industry-standard security measures including encrypted connections (TLS) and Firebase Security Rules to protect your data.
Zzzap data (questions, options, votes, comments, and recipients) remains stored on our servers after a zzzap closes. The app's feed shows the most recent 7 days; older zzzaps no longer appear in the app but are retained on our servers for record-keeping and support purposes. You can delete your account at any time, which removes all associated data from our servers.
If you turn on Face ID protection for private zzzaps, authentication happens entirely on your device through Apple's Face ID system. We never receive or store any biometric data.
You can request a copy of all data associated with your account at any time. In the app, go to Profile → Privacy → Request My Data. You can also email us directly at support@zzzap-app.com. We will respond to data requests within 30 days.
Zzzap is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us at support@zzzap-app.com and we will delete the account and its data.
We may update this privacy policy from time to time. We will notify you of any material changes through the app or by updating this page.
If you have questions about this privacy policy, contact Rhapsy LLC at support@zzzap-app.com.