Privacy Policy
Last updated: April 6, 2026
This Privacy Policy governs your use of the Zori mobile application (the "App") and the website located at zori.co (the "Website"), collectively referred to as the "Service," and describes the data we collect, how it is stored, how that data may be used, with whom it may be shared, and your choices about such uses and disclosures. Please be sure to carefully read the entirety of this Privacy Policy when using our Service.
"GDPR" means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
"EEA" includes all current Member States to the European Union and the European Economic Area.
"CCPA" means the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020.
"Process", in respect of personal data, includes to collect, store, use, and disclose to others.
Check the Zori Terms of Use (the "Terms") for the meaning of defined words (those with capital letters) not explicitly defined in this Privacy Policy.
1. Personal Data Controller
Zori is operated by an individual entrepreneur registered in Portugal. For any privacy-related inquiries, data access requests, or concerns regarding your personal data, please contact us at: product@zori.co
2. What Categories of Personal Data Do We Collect?
We collect data you make available to us voluntarily (for example, email address, name, date of birth). We also collect data automatically when you use the Service (for example, your IP address, device type).
2.1. Data You Give Us
You provide us data about yourself when you register for and/or use the Service, for example, when you create a user account ("Account"), complete quizzes, write journal entries, or report a problem. The data that you give us includes:
Account data. This includes your email address and password.
Birth chart data. This includes your date of birth, time of birth (if provided), and place of birth, which are used to generate personalized astrological content.
Journal data. If you use the reflection journal feature, we collect the text, timestamps, and any tags or metadata associated with your journal entries.
Quiz and preference data. This includes your responses to quizzes, personality assessments, and any preferences you set within the App.
By providing Account data you agree and understand that certain profile information may be visible to other users if you choose to share it. Please do not provide personal data that you would not want to be accessible.
2.2. Data We Collect Automatically
Data about how you found us. We collect data about your referring URL (that is, the place on the Web where you were when you tapped on our ad).
Cookies and similar technologies. As applicable, our Website and App use cookies and similar technologies that record data about the use of our Service to distinguish you from other users. You can control cookies through your browser settings.
Browser and device data. We collect data from or about the devices from which you access the Service, depending on the permissions you have granted. Examples of such data include: language settings, IP address, location, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, and hardware ID.
We may also collect your Apple Identifier for Advertising ("IDFA") or Google Advertising ID ("AAID") (depending on the operating system of your device). You can typically reset these numbers through the settings of your device's operating system (but we do not control this).
Usage data. We record how you interact with our Service. For example, we log the features and content you interact with, how often and how long you use the Service, what sections you use, and other interactions.
2.3. AI-Generated Content
Our Service uses artificial intelligence provided by third-party AI service providers to generate personalized astrological insights, horoscopes, and responses based on the data you provide. The inputs you submit (such as birth data, quiz responses, and chat messages) may be transmitted to these providers solely for the purpose of generating content within the Service. We do not use your personal journal entries to train AI models.
3. For What Purposes Do We Process Your Personal Data?
We process your personal data:
3.1. To Provide the Service to You
This includes enabling you to use the App in a seamless manner, generating personalized astrological content, powering the AI astrologer chat, and preventing or addressing Service errors or technical issues.
3.2. To Research and Analyze Your Use of the Service
This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and new products. We conduct surveys, research, and test features in development. We analyze the data we have to evaluate our Service and conduct audits and troubleshooting activities to improve content and layouts.
3.3. To Customize the Service for You
We use your data to personalize your experience, including the astrological content, daily horoscopes, and recommendations presented to you.
3.4. To Process Your Payments
If we introduce paid products and/or services within the Service in the future, we will use third-party services for payment processing (for example, Apple's In-App Purchase system). We do not and will not collect or store full credit card number data.
3.5. To Enforce the Terms and Prevent Fraud
We use personal data to enforce our agreements and contractual commitments, to detect, prevent, and combat fraud. As a result of such processing, we may share your information with others, including law enforcement agencies (in particular, if a dispute arises in connection with the Terms).
3.6. To Communicate with You Regarding Your Use of Our Service
We may communicate with you, for example, by email or push notifications. As a result of such processing, we may send you messages about your astrological updates, journal reminders, and Service-related information.
3.7. To Show and/or Send You Marketing Communications
We process your personal data for our marketing campaigns. We may add your email address to our marketing list. As a result, you will receive information about our Service, features, offers, promotions, and events. You can opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us at product@zori.co.
3.8. To Provide You Customer Service and Support
As a result of such processing, we will send you messages about the availability of our Service, security, payment transactions, legal notices, or other Service-related information.
3.9. To Personalize Our Ads
We and our partners may use your personal data to tailor ads and show them to you at relevant times.
3.10. To Comply with Legal Obligations
We may process, use, or share your data when the law requires it, in particular, if a law enforcement agency requests your data by available legal means.
4. Legal Basis for Data Processing (EEA Only)
In this section, we identify the legal basis we use for each particular purpose of processing. For more information on a particular purpose, please refer to Section 3. This section applies only to EEA-based users.
We process your personal data under the following legal grounds:
4.1. Your Consent
Where you have provided explicit consent, for example, to receive marketing communications or to process special categories of data.
4.2. To Perform Our Contract with You
Under this legal basis we:
- Provide the Service
- Customize your experience
- Generate personalized astrological content
- Communicate with you regarding your use of the Service
- Manage your Account and provide you with customer support
- Process your payments (if applicable)
4.3. For Our (or Others') Legitimate Interests
Unless those interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data. We rely on legitimate interests:
- To communicate with you regarding your use of our Service — our interest is to encourage you to use our Service more often. We also take into account the potential benefits to you.
- To research and analyze your use of the Service — our interest is in improving the Service so that we understand users' preferences and are able to provide a better experience.
- To send you marketing communications — our interest is to promote the Service in a measured and appropriate way.
- To personalize our ads — our interest is to promote the Service in a reasonably targeted way.
- To enforce the Terms and to prevent and combat fraud — our interests are enforcing our legal rights, preventing and addressing fraud and unauthorized use of the Service.
4.4. To Comply with Legal Obligations
Under this legal basis we, in particular, verify your identity and respond to lawful requests from authorities.
5. California Privacy Rights
This section provides additional details about how we process personal data of California consumers and the rights available to them under the California Consumer Privacy Act of 2018 ("CCPA") and California's Shine the Light law. This section applies only to residents of California, United States.
If you are a resident of California, you have the right to:
- Know what personal data we collect, use, disclose, and sell about you.
- Request deletion of your personal data.
- Opt out of the sale of your personal data (we do not sell personal data).
- Non-discrimination for exercising your privacy rights.
If you are a California resident and wish to exercise any of these rights, please contact us at product@zori.co with "California Privacy Rights Request" in the subject line. You may make this request once per twelve-month period. We will respond within forty-five (45) days of receiving your verified request.
We do not sell personal data of California consumers. We do not have actual knowledge that we sell the personal data of consumers under 16 years of age.
6. Data Retention
We will retain personal data for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.
Even if you disable or delete your Account, we may retain certain data to meet our legal obligations, resolve disputes, and enforce our agreements.
Journal entries and personal astrological data will be deleted within thirty (30) days of Account deletion, unless retention is required by applicable law.
7. With Whom Do We Share Your Personal Data?
We share information with third parties that help us operate, provide, improve, integrate, customize, support, and market our Service. The types of third parties we share information with include:
7.1. Service Providers
We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. These may include:
- Cloud storage providers
- Data analytics providers (e.g., Firebase, Amplitude)
- Third-party AI service providers (for generating astrological content)
- Marketing partners (social media networks, email delivery services)
- Payment processing contractors (e.g., Apple In-App Purchase), if applicable
7.2. Law Enforcement Agencies and Other Public Authorities
We may use and disclose personal data to enforce the Terms, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.
7.3. Third Parties as Part of a Merger or Acquisition
We may share personal data with any affiliated entity and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
8. International Data Transfers
We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.
In particular, if we transfer personal data originating from the EEA to countries without an adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission, or (ii) the European Commission adequacy decisions about certain countries.
9. Changes to This Privacy Policy
We may modify this Privacy Policy at any time. If we decide to make material changes to this Privacy Policy, you will be notified through our Service or by other available means and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.
10. Age Limitation
We do not knowingly process personal data from persons under 18 years of age. If you learn that anyone younger than 18 has provided us with personal data, please contact us at product@zori.co.
11. Privacy Rights
To be in control of your personal data, you have the following rights:
Accessing / reviewing / updating / correcting your personal data. You may review, edit, or change the personal data that you had previously provided to us by accessing your Account settings. You may also request a copy of your personal data collected during your use of the Service at product@zori.co.
Deleting your personal data. You can request erasure of your personal data by sending us an email at product@zori.co. When you request deletion of your personal data, we will use reasonable efforts to honor your request. In some cases, we may be legally required to keep some of the data for a certain time; in such event, we will fulfill your request after we have complied with our obligations.
Objecting to or restricting the use of your personal data. You can ask us to stop using all or some of your personal data or limit our use thereof by sending a request at product@zori.co.
The right to lodge a complaint with a supervisory authority. We would love you to contact us directly so we could address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work, or where the alleged infringement has taken place. In Portugal, the relevant authority is the Comissão Nacional de Proteção de Dados (CNPD).
The right to data portability. If you wish to receive your personal data in a machine-readable format, you can send a respective request at product@zori.co.
You may submit requests through an authorized agent, in which case we will need to verify the agent's identity, your identity, and their authority to act on your behalf before we can process the request.
12. How Do We Handle "Do Not Track" Requests?
Except as otherwise stipulated in this Privacy Policy, the Service does not support "Do Not Track" requests. To determine whether any of the third-party services it uses honor "Do Not Track" requests, please read their privacy policies.
13. Disclaimer Regarding Astrological Content
The astrological insights, horoscopes, personality profiles, and other content generated by the Service are provided for entertainment, self-reflection, and personal growth purposes only. They are not intended to serve as professional medical, psychological, financial, or legal advice. Always consult qualified professionals for matters requiring professional expertise.
14. Contact Us
If you have any questions or concerns about this Privacy Policy or our collection, use, or storage of your data, please do not hesitate to contact us at:
Email: product@zori.co
Zori is operated by an individual entrepreneur registered in Portugal.
© 2026 Zori. All rights reserved.