Privacy Policy

Effective October 17, 2026

Zuno (“Zuno”, “we”, “us”) runs zuno.team and the Zuno service. This policy explains what information we collect, why, who we share it with, and the choices you have. It’s part of our Terms of Service.

1. What we collect

Account details, from our sign-in provider, Auth0, when you sign in: your email address, whether it’s verified, your name and profile picture, and an account identifier. If you sign in with Google or GitHub, that company shares these with Auth0. We never receive your password.
Your agreement to our Terms: when you agree to the Terms of Service and this policy, we keep a record of it: which version of each you agreed to, when, the IP address and browser you used, and your email address at the time. We keep it as proof of what was agreed.
Your content: the zunos, titles, files, images, audio, video and templates you create or upload, and their saved versions.
Teams: if you set up or join a team, we keep the team’s name, who’s on it, their roles, when they joined, and the seats it has. For a team’s billing, Stripe also collects the organisation’s billing name, address and, if given, tax ID.
Billing details: if you buy a paid plan, Stripe collects your payment details. We receive and keep your Stripe customer identifier, your plan, the amount and currency, and your subscription’s status and dates. We never see or store your full card number.
How you use zunos: zunos you open that belong to other people (to show your “Recent” list, and which ones you’ve pinned), how many bytes of your files are downloaded each month (to apply your plan’s download allowance), and how much file space your zunos use.
Live presence: while you’re in a zuno, your display name, color, cursor, selection and pointer position are sent to the other people in it. This is relayed as it happens and isn’t stored.
Notifications: if you turn on notifications for a zuno, we keep the push subscription your browser gives us (an address at your browser’s push service and encryption keys) so we can send them.
Technical information: like most websites, our servers log information such as IP addresses, browser type, the pages and requests made, and errors, which we keep for a short time for security, abuse prevention and debugging.
Visits: for each page of zuno.team anyone opens, signed in or not, we keep a record of when, which page (never which zuno), the site that linked you there, your browser type, your account if you’re signed in, how long the page was in view, and your IP address with the approximate place it belongs to (city, state or region, and country). We work out that place ourselves, from a location database kept on our own servers; your IP address isn’t sent to anyone to do it. After 30 days the IP address is shortened to its network (for example 203.0.113.0/24), so it no longer points to one connection; the place stays. We use these records to understand how many people visit and from where, and to spot abuse. No cookie is involved, and they’re never shared, sold or used for ads.
Scans: if you use the camera button, the camera picture is processed in your browser and sent to Anthropic, our AI provider, which turns a page into text for your zuno, or says what something else is (a bird, a plant, an object). We don’t keep the photo for this; we keep a count of your scans and how much processing they used, for your plan’s limit and our costs. When something other than a page is identified, the photo is added to your zuno, like any photo you add, and stays there until you remove it. It’s told never to say who a person is from their face. Anthropic processes it under its commercial terms, which don’t allow it to train its models on it.
Sharing from an iPhone: if you set up the “Share to Zuno” Shortcut, what you share with it is sent to our servers and kept for up to a day until you choose a zuno for it; then it becomes part of that zuno, like anything you add. Your share key is stored only in a form we can’t read back, and you can turn it off on your Account page at any time.
Voice typing: if you use the microphone button in a zuno, your browser’s own speech recognition turns what you say into text, and your browser may send the audio to its maker (such as Google, Apple or Microsoft) to do it, under that company’s terms. We never receive the audio, only the text that goes into your zuno.
Your location: only if you press the location button in a zuno, and only after your browser asks you. Your browser gives the page your device’s location (precise or approximate, as you choose), and it’s written into the zuno at your cursor, as coordinates and a Google Maps link, like anything else you type there: everyone who can open the zuno can see it, and you can delete it like any text. We don’t keep your location anywhere else or track it. Opening the map link takes you to Google Maps, under Google’s privacy policy.
Movies and shows: when a zuno has a film’s IMDb code in it (for example <imdb>tt0109830</imdb>), our server sends that code to OMDb (omdbapi.com) and to TMDB (themoviedb.org) to look the film up, and fetches its poster from their image hosts; for a show, when someone opens one of its seasons, it sends the show’s code and the season’s number too. Only the code (and that number) goes, from our server: not your name, your IP address or anything else in the zuno. We keep what they return, and the poster, on our servers so each title is looked up once. This product uses the TMDB API but is not endorsed or certified by TMDB.
Spotify: when a zuno has a Spotify link on a line of its own, our server asks Spotify for its name and cover (only the link goes, from our server) and keeps them, so the card shows without your browser contacting Spotify. Nothing of Spotify’s loads until someone presses play; then Spotify’s own player loads from open.spotify.com, which sees your IP address and browser, and what happens in it is covered by Spotify’s privacy policy.
YouTube videos: when a zuno has a YouTube link on a line of its own, the video’s thumbnail is loaded from YouTube (Google), which, like any site an image comes from, sees your IP address and browser. Nothing else of YouTube’s loads until you press play. Then YouTube’s player loads from youtube-nocookie.com, its privacy-enhanced mode, and what happens in the player is covered by Google’s privacy policy.
Messages you send us, for example to support, and the information in them.
Feedback: if we’ve invited you to send feedback, we keep what you write, your answers to the questions we ask, whether you’re happy for us to email you about it, the page you sent it from and a short description of your browser and device, together with your name and email. If you delete your account, your feedback stays with us but your name and email are removed from it.

2. How we use it

To provide the Service: sign you in, store and sync your zunos, show them to the people you share them with, process payments, apply plan limits, and send the notifications you’ve asked for.
To keep the Service and its users safe: prevent and investigate abuse, fraud, security incidents and breaches of our Terms.
To communicate with you about your account, billing, security and changes to our Terms or this policy, and to answer you when you contact us.
To understand and improve the Service, using information about how it performs and the feedback you send us.
To comply with the law and enforce our rights.

We don’t sell your personal information, we don’t share it for cross-context behavioural advertising, and we don’t use it to show you ads.

People you share zunos with: anyone with access to a zuno can see its content, and the names and live presence of the people in it.
Your team: if you’re on a team, its members see your name, and its admins also see your email address, when you joined and how many zunos you own. If an admin removes you, they can transfer the zunos your account owns to another member, who can then see and control them (see the Terms).
Service providers who process information for us under their own security and privacy commitments: Auth0 (sign-in), Stripe (payments), Amazon Web Services (hosting, storage and backups), Anthropic (reading the pages you scan), and the browser push services (such as Google’s, Apple’s and Mozilla’s) that deliver notifications.
For legal reasons: when we believe in good faith that the law requires it (for example a valid subpoena or court order), or that it’s needed to protect the rights, property or safety of Zuno, our users or the public, including reporting child sexual abuse material to the National Center for Missing & Exploited Children.
In a business transfer: if Zuno is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of it, and this policy will continue to apply to it.

4. Where it’s stored and how it’s protected

Your information is stored in the United States with Amazon Web Services. It’s encrypted in transit (HTTPS) and at rest. Your content is not end-to-end encrypted: our systems process it in readable form to run the Service. We use reasonable measures to protect your information, but no system is perfectly secure, and we can’t guarantee its security.

5. Cookies and your browser’s storage

We use one cookie to keep you signed in, and, only when you open a team’s invite link, a second one that lasts an hour so the invitation still works after you sign in. We don’t use advertising or third-party tracking cookies. The Service also keeps a few things in your browser’s own storage so it works the way you left it: your theme, editor height and similar preferences, the name and color you use as a guest, and, if you use templates without an account, those templates. You can clear these in your browser’s settings at any time.

Because we don’t track you across sites, we don’t change how we work in response to “Do Not Track” or Global Privacy Control signals.

6. How long we keep it

We keep your information while your account exists. When you delete a zuno, it’s removed from the Service straight away and erased from our recovery area within 7 days, and from backups as they expire. When you delete your account, your account details and the zunos you own are deleted the same way, and any subscription is cancelled. Files no longer used in any zuno are deleted automatically after a short time. We keep billing records, records of your agreement to our Terms, and information needed to comply with the law, resolve disputes and prevent abuse, for as long as that requires, including after your account is deleted.

7. Your choices and rights

See and export: every zuno can be exported as a Markdown file, with all its data included.
Correct: you can change your display name in Account; your email comes from your sign-in provider.
Delete: delete any zuno, or your whole account, yourself.
Notifications: turn them on or off for each zuno.

Depending on where you live (for example California, other U.S. states, or the European Economic Area and United Kingdom), you may have further rights: to know what personal information we hold about you and get a copy, to have it corrected or deleted, to object to or restrict certain processing, and to complain to a regulator. To make a request, write to cory@coryglenn.ai. We’ll need to confirm it’s you, and we won’t treat you differently for exercising your rights. Where the law requires a legal basis for processing, ours are: performing our contract with you, our legitimate interests in running and protecting the Service, your consent where we ask for it, and our legal obligations.

8. Children

Zuno is only for people aged 18 and over. We don’t knowingly collect information from anyone younger. If you believe someone under 18 has given us information, contact us at cory@coryglenn.ai and we’ll delete it.

9. Changes to this policy

We may update this policy. We’ll post the new version here and update the effective date, and if a change is material, we’ll tell you in advance, for example by email or a notice in the Service.

10. Contact

Questions or requests about your privacy? Write to cory@coryglenn.ai.