01. Operator & privacy contact
Zero Freeze is an individually operated business in Singapore, not an incorporated company. This Policy covers our website, account services and Mac app. The individual operating Zero Freeze is responsible for our handling of personal data and acts as our data-protection contact.
- Business
- Zero Freeze — individual operator
- Contact address
- 9 Amber Garden, Singapore
- Privacy & support email
- contact@zerofreeze.xyz
Send privacy questions, complaints, access or correction requests to this email, with “Privacy” in the subject. We aim to acknowledge requests within three business days and respond within applicable legal time limits. We may need proportionate identity verification; do not send identity documents unless we explain why they are necessary and provide a suitable channel.
02. Information we process
Account and authentication. Google and Firebase process your Google identity and authentication information. Our account database stores your user identifier and email, account state, credits, device-approval records, hashed app credentials and security/revocation information. We do not receive your Google password.
Live audio and transcripts. When you start listening, microphone and supported call audio are streamed through our authenticated backend to Deepgram Nova-3 for transcription. Transcripts return to your Mac. Pause or Stop ends capture and streaming. Our app and backend do not save audio files or offer audio replay.
AI requests. To generate a response, the app sends the question, recent conversation and AI-answer context (up to its conversation-memory limit), and selected relevant document passages to our backend, OpenRouter and the selected model provider. Our current answer model is Kimi K2.5; routing providers or models may change. Conversation content may contain personal information about you or other participants.
Documents and history. Documents you import and their local search index stay on your device. Selected excerpts leave the device when used in an AI request. The Mac app can save text conversation history and AI answers locally in encrypted storage; encryption keys and saved sign-in credentials use macOS Keychain. Local history is not synchronized to your web account. Documents are not uploaded through the website.
Usage, billing and support. We process session identifiers, timestamps, charged time, credit grants, subscription state and transaction references. Creem processes checkout and payment details, including information it needs for receipts, tax and fraud prevention; we do not receive full card numbers. If you email support, we receive the content and attachments you choose to send. Avoid sending unnecessary conversation content or sensitive documents.
Technical information. Hosting and authentication infrastructure may process IP addresses, browser/device information, request metadata and security/error events. Our application does not intentionally put audio, transcripts, document excerpts or full AI request bodies into application logs. Our website uses essential authentication and browser storage; we do not currently install advertising trackers.
03. Why we use it
We use information to authenticate you, approve your Mac, provide transcription and answers, retrieve relevant document passages, maintain your credit balance, fulfil purchases, respond to support requests and manage subscriptions. We also use necessary information to prevent abuse, investigate incidents, maintain reliability and meet legal or accounting duties.
We process personal data with consent or another basis permitted by applicable law, including Singapore’s Personal Data Protection Act. Starting capture or sending a request initiates the processing described above; this does not replace any consent required from other participants. You must inform participants and have authority to process their audio and information. Do not provide data you are not permitted to share.
We do not sell your personal data or use your conversation content to train our own models. Deepgram streaming requests are configured to opt out of its Model Improvement Program. We do not claim that every downstream AI provider has identical retention or training settings: review the provider notices below before sending sensitive material.
04. Providers & overseas processing
We use Google Cloud and Firebase for hosting, account authentication, our database and private software downloads; Deepgram for speech recognition; OpenRouter and its selected inference providers for AI answers; Creem for payments; and our email provider for support correspondence.
Our primary application backend and database are hosted in Singapore. Authentication, content delivery, support, payment and AI services may process information in other countries. Local storage of documents does not mean all processing occurs in Singapore. Where Singapore transfer rules apply, we are responsible for using appropriate contractual or other safeguards to provide a comparable standard of protection.
These providers process data under their applicable terms and privacy practices. Some act independently for matters such as your Google account, payments, fraud prevention or legal duties. See Google’s Privacy Policy, Deepgram’s Privacy Policy, OpenRouter’s Privacy Policy and Creem’s Privacy Policy. Contact us for the providers used for a particular request where that information is available.
We may disclose limited information when required by law, to protect lawful rights or investigate abuse, or to advisers under appropriate confidentiality obligations. A transfer of the business will be subject to applicable notice and data-protection requirements.
05. Storage & retention
On your device: imported documents, indexes and saved conversation history remain until you delete them or remove the app’s stored data. Uninstalling the app alone may leave application data or Keychain items behind. Use the app’s deletion controls or ask support for removal instructions; back up anything you want to keep.
In our application backend: audio and answer-request content are processed transiently, not saved as a cloud conversation archive. Account, usage and billing metadata are stored separately. Expired security and device-pairing records are cleaned in bounded batches. Ended-session metering records become eligible for cleanup after 90 days; cleanup runs when the service is active.
Account and business records: we retain records needed to operate an open account, honour credits and handle support. On an account-closure request, we review removal or anonymization of data no longer needed. Limited records may remain for tax, fraud prevention, payment disputes or legal obligations. We do not promise immediate erasure from every system; retained backups age out on their scheduled rotation, and providers have their own retention schedules.
Support requests and infrastructure logs are retained only as needed for their stated purposes or applicable duties and reviewed for removal. Please contact us for an explanation of what remains after a deletion request. Deleting local history does not automatically delete earlier requests retained independently by providers.
06. Your choices & rights
You can stop listening, revoke macOS recording permissions, remove local documents or history, sign out and revoke approved Macs. These actions stop or limit future processing but cannot undo a completed cloud request. If you do not want selected document excerpts processed by AI providers, remove those documents before requesting assistance.
Email contact@zerofreeze.xyz to request access to or correction of your personal data, withdraw consent, ask about disclosure, or request account closure and deletion. We will explain applicable exceptions, any permitted fees before charging them, and any effect on features. Withdrawal may mean we cannot provide cloud assistance or keep your account active. You can raise unresolved Singapore data-protection concerns with the Personal Data Protection Commission.
Other rights may apply depending on where you live. We will assess requests under applicable law. Signing out or requesting data deletion does not automatically cancel a subscription; cancel it through your account’s billing portal or ask support to help.
07. Security
We use authenticated connections, encrypted transport, controlled backend access, private database networking and server-side storage of provider credentials. Local document/history storage uses encryption with keys protected by macOS Keychain. Security also depends on your Mac, Google account and device permissions. No system is completely secure.
Report suspected vulnerabilities or unauthorized access to contact@zerofreeze.xyz. Do not include passwords or API keys. We will investigate incidents and notify affected individuals and authorities where legally required.
08. Children & policy updates
The Service is intended for adults aged 18 or over, not children. Contact us if you believe a child has provided personal data. We will investigate and take appropriate action.
We will update this Policy when our practices change, publish a new effective date and provide notice of material changes where required. New purposes requiring consent will not be authorized merely by changing this page. Our Terms of Service describe the service agreement and Singapore governing law.