Privacy Policy

Last updated: August 2026

ZephyrLifeOS ("we," "us," "the app") is operated by ApexRevStudios, based in Singapore. This policy explains what we collect, why, how long we keep it, and the rights you have over it — for users anywhere in the world, including Singapore, the EU/EEA, and elsewhere. We've tried to write it in plain language rather than legal boilerplate.

What we collect

Account info: your email address and password (stored securely by our backend provider, Supabase — we never see your password in plain text).
Financial data you enter: expenses, budgets, balance sheet entries, savings goals, and similar data you add to the app. This is yours; we don't sell it, and we don't read it for any purpose other than making the app work.
Documents you upload: stored in private, per-account storage that only your account can access.
Basic usage events: things like account signups and subscription changes, so we can keep the product running and priced fairly. This does not include your financial data.
Cookies: the free tier shows ads, and our advertising provider may set cookies or similar identifiers to serve and measure them. Paid tiers are ad-free and do not have advertising cookies.

Why we collect it

We collect and process your data to provide the app's core functionality (your account and financial data), to process subscription payments, and — for free-tier users only — to support the app through ads. Where required by law, our basis for processing is your consent (e.g. account creation) or the necessity of processing to perform our contract with you (e.g. billing).

Who else sees it

We use a small number of service providers to actually run the app, each only for what they need. Some of these providers may process or store data outside Singapore (for example, in the United States or other regions where they operate infrastructure); where that happens, we rely on those providers' own contractual and security safeguards for cross-border transfers.

Supabase — our database, authentication, and file storage provider.
RevenueCat and Stripe — handle subscription billing. We do not see or store your card details; Stripe processes payments directly, and acts as merchant of record for tax purposes.
An advertising provider — free-tier users may see ads to support the free version of the app. Paid tiers are ad-free.

We do not sell your personal or financial data to anyone, for any reason.

How long we keep it

We retain your account and financial data for as long as your account is active. If you delete your account, we delete your personal and financial data from our active systems within 30 days, except where we're required to retain limited records (such as billing records) for longer to comply with tax, accounting, or legal obligations.

Your rights

Regardless of where you're located, you can ask us to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data ("erasure")
Export your data in a portable format (available directly in-app as PDF/CSV on paid tiers, or on request)
Withdraw consent, where processing is based on consent
Object to or restrict certain processing

If you're in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. If you're in Singapore, you may contact Singapore's Personal Data Protection Commission (PDPC) with concerns about how your data is handled.

To exercise any of these rights, contact us below — we'll respond within 30 days.

Data breach notification

In the event of a data breach affecting your personal data that poses a significant risk of harm, we will notify affected users and, where legally required, the relevant regulator (including Singapore's PDPC), without undue delay.

Data Protection Officer / privacy contact

For all privacy-related questions, requests, or concerns, contact our privacy contact at zephyrdevsupport@gmail.com.

Children's privacy

ZephyrLifeOS is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we'll delete it.

Contact

Questions about this policy: zephyrdevsupport@gmail.com

This policy describes our current practices as a small, independently-run product. It will be updated as the app grows.

This document was prepared with AI assistance as a good-faith effort at PDPA- and GDPR-aware privacy practices for a small independent software business, and has not been reviewed by a licensed attorney or data protection professional. It is not a substitute for legal advice specific to your situation.