Privacy Policy for Zymlora

Last Updated: July 24, 2025

Introduction

Welcome to Zymlora! We're committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our practices in simple, clear terms — because we know dense legal text is the last thing an ADHD brain wants to parse.

Zymlora is a productivity application built specifically for people with ADHD and easily distracted minds. Our AI-powered tools — including task management, smart scheduling, and Momentum Mode — are designed to reduce overwhelm, eliminate decision fatigue, and help you actually finish what you start.

Information We Collect

Personal Information You Provide

Account Information:

• Email address (for account creation and communication)
• Password (encrypted and securely stored)
• Full name (optional, for personalization)
• Profile picture (optional)

Productivity Data You Create

Task Information:

• Tasks and subtasks you create
• Task descriptions, due date, and priorities
• Task completion status and progress
• Time estimates for tasks
• AI priority scores and explanations for tasks

AI-Generated Data:

• AI task prioritization scores and reasoning
• AI-generated task breakdowns into subtasks
• AI-created daily schedules

Automatically Collected Information

Usage Analytics:

• How you interact with app features
• Which tools you use most frequently
• General usage patterns (to improve the app)
• Error logs and crash reports (anonymized)

Technical Information:

• Device type and operating system
• App version and settings
• Network connectivity status
• Local storage preferences

How We Use Your Information

Core App Functionality

• Provide ADHD-friendly task management and AI-powered prioritization
• Generate personalized productivity insights and recommendations designed for distracted minds
• Create AI-generated daily schedules based on your tasks, energy levels, subtasks, priorities, and durations
• Sync your data across your devices so your plan is always with you

AI-Powered Features

• Task Prioritization: Our AI analyzes your tasks to suggest optimal priorities based on deadlines, importance, and effort — reducing the decision fatigue common with ADHD
• Task Breakdown: AI automatically divides large, overwhelming tasks into bite-sized subtasks that an ADHD brain can actually start
• Smart Scheduling: Creates a realistic, time-blocked daily plan based on your tasks and energy — no blank-page paralysis
• Momentum Mode: A distraction-free flow mode that presents one task at a time, helping you push through the "getting started" wall
• Priority Explanations: AI provides clear reasoning for its recommendations so you always understand why

Service Improvement

• Improve app performance and fix bugs
• Develop new features based on the real needs of ADHD users
• Conduct research to better understand and serve people who struggle with focus (using anonymized data only)

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: To provide you with our services as agreed
• Legitimate Interest: To improve our services and provide AI-powered features
• Consent: For optional features and communications (you can withdraw at any time)

AI Services We Use

Anthropic's Claude AI:

• We use Claude 3 Haiku to power our AI features
• Your task and productivity data is sent to Claude (via our secure proxy server) to generate insights and recommendations
• Claude processes your data temporarily to provide responses and does not store your personal information
• All AI interactions are encrypted and processed securely

Important: Your data sent to AI services is used only to provide you with personalized recommendations and is not used to train AI models or shared with other users.

Automated Decision Making

Our AI features involve automated processing of your data to provide task prioritization and scheduling recommendations. You have the right to:

• Request human review of automated decisions
• Express your point of view
• Contest automated decisions
• Request explanation of the logic involved

Data Storage and Security

Where Your Data is Stored

• Primary Database: Supabase (secure PostgreSQL database with enterprise-grade security)
• Local Storage: Some data is cached on your device for offline access and better performance
• AI Processing: Temporarily processed by Claude AI through our secure proxy servers

Security Measures

• All data is encrypted in transit and at rest
• We use Row Level Security (RLS) to ensure you can only access your own data
• Regular security audits and updates
• Secure authentication with industry-standard protocols
• Rate limiting and abuse prevention measures

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of becoming aware of the breach
• Provide details about what information was affected
• Explain the steps we're taking to address the breach
• Offer guidance on how you can protect yourself

Data Retention

• Active account data is retained while your account is active
• Deleted tasks and data are permanently removed immediately
• Account data is deleted within 90 days of account deletion
• Anonymized analytics data may be retained longer for service improvement

Third-Party Services

Supabase:

• Provides our backend database and authentication services
• Your data is stored on Supabase's secure servers
• Subject to Supabase's security and privacy standards

Google Services:

• Google Fonts for app typography
• Flutter/Google services for app notifications
• No personal data is shared with Google beyond standard app analytics

Device Services:

• Camera and photo library access (only when you choose to add a profile picture)
• Local notifications service
• Device storage for offline functionality

Cookies and Local Storage

Local Storage:

• We store app preferences and settings locally on your device
• Authentication tokens are stored securely for seamless login
• Task data is cached locally for offline access

No Traditional Cookies:

• As a mobile/desktop app, we don't use web cookies
• We use local device storage for similar functionality

Your Privacy Rights

Access and Control

• View Your Data: Access all your data through the app's export feature
• Update Information: Edit your tasks anytime
• Delete Specific Data: Remove individual tasks
• Account Deletion: Permanently delete your account and all associated data

Data Portability

• Export your data in JSON format through the app
• Take your productivity data with you if you decide to leave

Communication Preferences

• Control what notifications you receive
• Opt out of non-essential communications
• Update your email preferences anytime

Children's Privacy

Zymlora is designed for users 13 years and older. We recognize that ADHD affects people of all ages, but our service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you're a parent and believe your child has provided us with personal information, please contact us to have it removed.

Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. When we make significant changes:

• We'll notify you via email or in-app notification
• We'll update the "Last Updated" date at the top
• Continued use of the app after changes means you accept the updated policy

International Users and Data Transfers

Zymlora is operated from Sweden. If you're using our service from outside the European Economic Area (EEA), your information may be transferred to and processed in Sweden where our servers are located.

Data Transfer Safeguards:

• We use Standard Contractual Clauses (SCCs) approved by the European Commission
• We ensure adequate protection for your data when transferred outside the EEA
• We only transfer data to countries with adequate data protection laws or appropriate safeguards

Contact Us

We're here to help with any privacy questions or concerns:

Support: hello@zymlora.com

For data protection requests (access, deletion, corrections), please email us with "Privacy Request" in the subject line.

Data Protection Officer: For GDPR-related inquiries, contact us at hello@zymlora.com

Your Consent

By using Zymlora, you consent to the collection and use of your information as described in this Privacy Policy. You can withdraw consent at any time by deleting your account, though this will prevent you from using our services.

Remember: This Privacy Policy is written to be transparent and understandable — because we're a team that genuinely cares about ADHD and easily distracted minds. If you have any questions about how we handle your data, please reach out. Your privacy and trust are essential to our mission of helping you work with your brain, not against it.