Legal

Privacy Policy

Last updated: October 12, 2026

Zylo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account Information

When you register, we collect:

  • Full name
  • Username
  • Email address
  • Password (stored as a secure hash — we never store your plain-text password)

Device Information

To enable the mesh network, we store:

  • A device identifier (UUID)
  • Your device's public cryptographic key
  • Platform (Android/iOS) and app version
  • Last seen timestamp

What We Do NOT Collect

  • Message content — all messages are end-to-end encrypted and never pass through our servers
  • GPS location or location history
  • Contact list from your phone
  • Photos or media from your device
  • Browsing history or behavioral data

2. How We Use Your Information

  • To create and manage your Zylo account
  • To verify your identity when you log in
  • To allow other users to find you by username and exchange public cryptographic keys
  • To send you important service notices (via in-app messages only)
  • To improve the reliability and performance of the service

3. Message Privacy

Zylo is designed so that we technically cannot read your messages:

  • Messages are encrypted on your device before transmission
  • Your private key never leaves your device
  • Messages travel through the mesh network — not through our servers
  • We do not store, log, or analyse message content

4. Data Sharing

We do not sell, trade, or rent your personal information. We may share information only:

  • When required by law or valid legal process
  • To protect the rights and safety of our users
  • With service providers who assist in operating the platform, under strict confidentiality agreements

5. Data Retention

We retain your account information for as long as your account is active. You can delete your account at any time from the app settings. Upon deletion:

  • Your profile and credentials are permanently removed from our servers
  • Your device registration is revoked
  • Messages already stored on other users' devices will expire according to their configured expiry settings

6. Security

We use industry-standard security practices including HTTPS, hashed passwords, secure token authentication, and encrypted local storage. However, no system is completely secure — we encourage you to use a strong, unique password.

7. Children's Privacy

Zylo is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us immediately.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Object to processing of your personal data

To exercise these rights, contact us at support@zylo.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app. Continued use of Zylo after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy: