Privacy Policy

Last updated: 14 August 2026

This policy explains how we collect, use and protect your information across two things: the Zenvo mobile app, and this website at kodaralabs.co. By using either, you agree to the practices described here.

1. This website

If you join the launch list, we collect your email address only. We do not ask for your name and we do not use it to build a profile.

• What we do with it: send you one email when Zenvo is available to download. Nothing else is sent without a further, separate opt-in.
• Lawful basis: your consent, given when you submit the form (UK GDPR Article 6(1)(a)).
• Withdrawing it: every email carries an unsubscribe link, and you can email privacy@kodaralabs.co at any time to be removed. Withdrawing consent is as easy as giving it.
• Retention: we delete your address once the launch email has been sent, unless you have separately opted in to hear more.
• Alongside the address we store the date you signed up, the referral source of your visit (for example, which link brought you here) and the two-letter country code your request arrived with, so we know which channels and which markets responded. We do not store your IP address.

No cookies, no tracking scripts. This site loads nothing from a third party and sets nothing on your device. Our hosting provider, Cloudflare, produces aggregate traffic statistics from its own server logs, and processes your IP address in order to deliver the page and protect against abuse. None of that identifies you to us. That is why you are not being asked to accept a cookie banner.

2. The app: information we collect

• Account data: your email address, if you choose to create an account. Passwords are stored as a secure hash and are never readable by us.
• Preferences: your activation time, selected categories and clip selections. Stored on your device, and optionally synced to secure cloud storage.
• Subscription status: RevenueCat provides a plan signal (Pro or free). We never receive your card details.
• Device information: operating system version and time zone, so that your morning is scheduled at the right local time.

Usage analytics: we do not currently collect any. The app contains no analytics SDK and sends no usage data to a third party. If we ever introduce anonymised product analytics, we will update this policy and the App Store and Google Play data disclosures before it ships.

We do not access your contacts, camera, microphone, photos or location. We do not track you across other apps or websites, and we do not sell your data.

3. How we use it, and our legal basis

• To deliver your clip at the time you chose, to schedule and send your daily notification, and to order your queue according to the categories you picked. Legal basis: performance of our contract with you, UK GDPR Article 6(1)(b).
• To create and maintain your account, where you choose to have one. Legal basis: performance of our contract with you, Article 6(1)(b).
• To determine what is available to you on your plan, and to process and verify your subscription through RevenueCat. Legal basis: performance of our contract with you, Article 6(1)(b).
• To send you push notifications. Legal basis: your consent, given at the permission prompt and withdrawable at any time in your device settings.
• To answer support requests. Legal basis: our legitimate interest in running and supporting the app, Article 6(1)(f).

4. How long we keep it

• Preferences stay on your device until you delete the app.
• Where cloud sync is enabled, your account and preference data is kept while your account is open, and deleted within 30 days of a deletion request.
• We do not hold payment records. Apple and Google hold those under their own policies.
• Launch list addresses are deleted once the launch email has been sent, as set out in section 1. Support emails are kept for 12 months.

5. Security

Preferences are held in encrypted storage on your device. Where cloud sync is enabled, data is encrypted in transit with TLS and at rest with AES-256 via Supabase. Row Level Security policies mean no other user, and no unauthenticated party, can read your data.

6. Third parties we use

We share data only with the providers needed to run the service:

• Supabase: cloud database and authentication
• RevenueCat: subscription management
• Cloudflare: website hosting and launch list storage
• Apple and Google: payment processing and push notification delivery

We do not currently use a product analytics provider. We do not sell, rent or trade your personal information to any third party for marketing purposes.

7. Notifications

Zenvo sends one push notification per day, at the time you set. Nothing else. You can turn notifications off at any point in your device settings.

8. Children

Zenvo is not directed at children under 13 and we do not knowingly collect their data. If you believe a child under 13 has provided us with personal information, contact privacy@kodaralabs.co and we will delete it.

9. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these, email privacy@kodaralabs.co. We respond within one month.

If you are not satisfied with how we have handled your data, you can complain to the UK Information Commissioner's Office. Its website is ico.org.uk and its helpline is published there.

10. International transfers

Some of our providers process data outside the UK. Where they do, transfers are made under the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

11. Changes

We may update this policy. Material changes will be signalled in the app and by the date at the top of this page.

12. Contact

Privacy questions: privacy@kodaralabs.co
Everything else: hello@kodaralabs.co
By post: Kodara Labs Ltd, 128 City Road, London, EC1V 2NX, United Kingdom.