Zalfol is built for people who already carry enough. We collect the minimum data needed to make the app work, we don't sell anything, and we don't share your information with advertisers. This policy explains exactly what we do collect and why.
1. Who We Are
Zalfol (زالفول) is operated by Eslam Osama Elgwaily, an individual developer based in Egypt. "We," "us," and "our" refer to Eslam Osama Elgwaily operating under the Zalfol name.
Contact: korion.x@gmail.com
2. What We Collect
Account information
When you sign up, we collect your email address and any display name you choose. This is used to identify your account, send you transactional emails (password resets, subscription receipts), and nothing else.
App usage data
We store the data you create inside Zalfol — projects, tasks, goals, and other content you enter. This data lives in your account and is used only to provide the app's functionality to you.
Payment information
Payments are processed by LemonSqueezy. We do not see, store, or have access to your credit card number or any raw payment data. LemonSqueezy handles all payment processing and is subject to their own privacy policy. We receive only confirmation that a payment was made and your subscription status.
YouTube data (optional, with your explicit consent)
If you choose to connect your YouTube account through the Disciple Mode feature, we request read-only access to your YouTube subscriptions (youtube.readonly scope) via Google OAuth. We use this data only to calculate an alignment score that shows how well your YouTube consumption matches your chosen learning field. We do not store your YouTube subscription list beyond the duration of the score calculation. We do not access your watch history, videos, comments, or any other YouTube data. You can revoke this access at any time from your Google Account settings.
Analytics
We use Google Analytics to understand how the app is used in aggregate (page views, sessions, general usage patterns). Google Analytics collects anonymized usage data subject to Google's privacy policy.
3. What We Do Not Collect
- We do not collect your location beyond the country level
- We do not build advertising profiles
- We do not sell, rent, or trade your personal data to any third party
- We do not send marketing emails — only transactional messages related to your account
- We do not store raw YouTube subscription data after your alignment score is calculated
4. How We Use Your Data
- To create and maintain your account
- To provide, operate, and improve the Zalfol app
- To process payments and manage your subscription through LemonSqueezy
- To send transactional emails (account-related only)
- To calculate your YouTube alignment score when you connect YouTube (immediately discarded after calculation)
- To understand aggregate usage patterns via Google Analytics
5. Data Storage and Security
Your data is stored securely using Supabase, a cloud database provider. Data is encrypted in transit (TLS) and at rest. Supabase operates infrastructure subject to industry-standard security practices.
We take reasonable technical and organizational measures to protect your data. No system is completely secure, but we treat your data with the seriousness it deserves.
6. Third-Party Services
Zalfol integrates with the following third-party services:
- Supabase — database and authentication hosting
- LemonSqueezy — payment processing
- Google OAuth / YouTube API — optional YouTube alignment feature
- Google Analytics — aggregate usage analytics
- Vercel — app hosting and deployment
- Resend — transactional email delivery
- Anthropic Claude API — AI features for paid users (your project data may be sent to Anthropic to generate AI responses; this data is not used to train Anthropic's models under their API terms)
Each of these providers has their own privacy policy governing how they handle data.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — request deletion of your account and associated data
- Revoke YouTube access — disconnect YouTube at any time via Google Account settings or from within the app
To exercise any of these rights, email us at korion.x@gmail.com. We will respond within 30 days.
8. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain records (e.g. financial transaction records, which LemonSqueezy retains on their side).
9. Children's Privacy
Zalfol is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Zalfol after changes are posted constitutes acceptance of the updated policy. For significant changes, we will notify active users by email.
11. Contact
Questions about this policy or your data:
Eslam Osama Elgwaily
korion.x@gmail.com
This policy was last updated on April 18, 2026.