The short version
- No account, no ads, no analytics, no tracking. We don’t sell your data.
- The app talks directly to your TVs over your home network.
- Your saved TVs, settings, scenes, favorites and habits are stored only on your phone.
- Your phone turns your voice into text. The app never receives your audio.
- Only when your phone can’t understand a command, and only if the cloud assistant is on, the command’s text and a little TV context go to our server and our AI provider to plan the steps. We don’t store it; our AI provider doesn’t train on it and deletes it within 30 days.
- “Reset app” in Settings, or deleting the app, erases everything on your phone.
Who we are
Sitiyo (“we”, “us”) makes Zapizap and is responsible for the personal data described in this policy (the data controller). You can reach us at sashowsusa@gmail.com.
This policy covers the Zapizap app for iPhone and Android and this website.
What stays on your phone
To work, the app stores this on your phone. We can’t see it, and it isn’t sent to us:
| Data | What it’s for |
|---|---|
| Your saved TVs: name, IP address, hardware (MAC) address, model | Finding your TVs again, reconnecting, and turning them on over Wi-Fi |
| Pairing keys that your TVs issue | Reconnecting without asking the TV again. Kept in the iOS Keychain or the Android Keystore |
| Settings (language, Big buttons, vibration, cloud assistant on or off) | Remembering your choices |
| Scenes and pinned (favorite) apps | Your one-tap routines and shortcuts |
| Simple habit statistics: which app you open, on which TV, at what hour | Suggestions like “Resume Netflix: your usual around 9 PM” |
The only exception is the cloud assistant, which can send some names from this list; see The cloud assistant.
Talking to your TV
The app sends your commands directly to your TV over your home network: key presses, text you type, app launches, pairing messages, and a “wake-up” packet (Wake-on-LAN) to turn the TV on. This traffic stays on your network and never passes through our servers.
Some TVs use their own unencrypted control protocols on the local network (Roku’s, for example), so other devices on the same network could see those commands. Your TV maker’s own privacy policy covers what the TV itself does.
Your voice
When you hold the talk button, your phone’s built-in speech recognition turns what you say into text: Apple’s on iPhone, and Google’s (or your phone maker’s) on Android. When your phone supports it, this happens on the device; otherwise Apple or Google process the audio under their own privacy policies.
Zapizap never receives, stores or sends audio. The microphone is used only while you hold the button, and the resulting text stays on your phone unless the cloud assistant is needed.
The cloud assistant
Most commands are understood right on your phone. The optional cloud assistant steps in only when your phone can’t understand a command on its own. It is on by default, and you can turn it off at any time in Settings › Smarter assistant (cloud). With it off, nothing leaves your phone except the commands that go straight to your TV.
What is sent, and only in that case
- the text of the command (never audio);
- the names of your TVs (for example “Bedroom”), the names of the apps on the TV you’re controlling, and the names of your scenes;
- the TV’s current volume level;
- a random install ID, explained below.
Nothing else: no contacts, no location, no audio, and nothing about your network.
Who receives it
Our server, which runs on Cloudflare Workers, and Anthropic, PBC, the AI provider that turns the request into steps for your TV. Both process it only on our behalf.
What happens to it
- Our server uses the request to answer and doesn’t store it.
- Anthropic doesn’t use it to train its models. Its Commercial Terms say “Anthropic may not train models on Customer Content from Services”.
- Anthropic automatically deletes API inputs and outputs within 30 days, unless it has to keep them longer to enforce its usage policy or to comply with the law.
The install ID and the daily limit
To keep the free assistant fair for everyone, each installation of the app gets a random ID. It isn’t linked to your name, email, account or phone identifiers. Our server uses it only to count how many cloud requests were made today, and those counters are deleted within about 48 hours. The ID isn’t sent to Anthropic.
Your IP address
Like any internet request, reaching our server reveals your phone’s IP address to Cloudflare, which needs it to deliver the request and to protect the service from abuse. We don’t store it or use it to find out where you are.
What we don’t do
- We don’t ask for an account, a name, an email address or a phone number.
- No ads, and no analytics, advertising or crash-reporting tools inside the app.
- No tracking across apps or websites, and no data brokers.
- We don’t sell your personal information or share it for advertising.
Permissions
- Local Network (iPhone): to find and control the TVs on your Wi-Fi.
- Microphone and Speech Recognition: only while you hold the talk button, to turn your voice into a command.
- Network access (Android): to reach your TVs and, when needed, the cloud assistant. Android grants it without asking.
You can refuse or turn off any permission in your phone’s settings. Without the microphone you can still type commands.
Service providers and international transfers
- Cloudflare, Inc. runs our cloud assistant server and hosts this website.
- Anthropic, PBC provides the AI model for the cloud assistant, under its Commercial Terms and Data Processing Addendum.
They process data only on our instructions, under contracts that require them to protect it at least as well as this policy does. Both are based in the United States, so a cloud assistant request may be processed outside your country, with the protections described here.
Apple and Google run the app stores under their own privacy policies. They give us aggregate statistics (such as the number of downloads) and, if you agreed to share them with developers in your phone’s settings, anonymous crash reports.
How long data is kept
| Data | Where | Kept |
|---|---|---|
| Saved TVs, pairing keys, settings, scenes, favorites, habit statistics | Your phone | Until you use “Reset app” or delete the app |
| Cloud assistant request (text and TV context) | Our server | Not stored after answering |
| Cloud assistant request (text and TV context) | Anthropic | Deleted within 30 days (longer only if needed to enforce its usage policy or by law) |
| Daily request counters (install ID) | Our server | About 48 hours |
| Emails you send us | Our inbox | As long as needed to help you; ask us and we’ll delete them sooner |
Your choices and rights
- Turn the cloud assistant off in Settings › Smarter assistant (cloud).
- Refuse or revoke permissions in your phone’s settings.
- Erase everything on your phone with Settings › Reset app, or by deleting the app.
Because there are no accounts and we keep almost nothing, there’s usually nothing on our side to look up or delete. You can still write to us to ask for access, correction or deletion, to object to processing, or to withdraw your consent, and we’ll answer within the time your local law requires.
Depending on where you live, laws such as Colombia’s Ley 1581 de 2012, Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, Panama’s Ley 81 de 2019, the California Consumer Privacy Act or the GDPR give you these rights. You can also complain to your data protection authority (in Colombia, the Superintendencia de Industria y Comercio). We don’t sell or share personal information as the California law defines those terms.
Children
Zapizap is made for a general audience and is not directed at children under 13. We don’t knowingly collect personal information from children. If you believe a child has sent us personal information, for example by email, contact us and we’ll delete it.
Security
Pairing keys are kept in the iOS Keychain or the Android Keystore. The app reaches our server only over encrypted HTTPS connections. We collect as little as possible, and without accounts there are no passwords to leak.
This website and email
This website uses no cookies, no analytics and no third-party scripts, and it loads nothing from other companies. It is hosted on Cloudflare Pages, which processes your IP address and basic request details to deliver the pages and protect them from attacks.
If you email us (or use Send feedback in the app, which opens your email app), we receive your email address and whatever you write, and use them only to reply to you.
Changes to this policy
If we change this policy, we’ll update the effective date at the top of this page. If a change affects what data leaves your phone, we’ll tell you in the app before it takes effect.
Contact
Sitiyo · sashowsusa@gmail.com