Privacy.

What stays on your device

Your boards, the pieces on them, your sticker choices and your app settings are stored locally in Zora on your phone. Photographs you add from your photo library are copied into Zora’s own storage on the device, and a board you export is saved to your photo library only when you choose to save or share it. None of it is uploaded to a Zora server, because there is no Zora server holding user content.

No account, no sign-up

Zora does not ask for your name, your email address or a password. We have no way to identify you, and no profile of you exists.

Usage analytics

Zora sends anonymous usage events to PostHog, an analytics service based in the United States, so we can see how people use the app. An event records what you did and where you did it: you opened a board, dragged a photo out of your pocket, closed the Zora Plus screen, or added a widget. Each event also carries the app version, your phone model, its operating system, the app language and your time zone. PostHog works out your country and city from your IP address.

If something in the app fails, such as a crash or a photo that will not download, Zora sends PostHog an error report: what failed, the technical error message and where in the code it happened. Zora removes web addresses, file paths and board IDs from these reports before sending them.

Board names are the one thing you type that Zora sends. We read them to learn what people make boards for. The words on your boards, your sticker text, your display name and your searches stay on your phone, and so do your photos.

PostHog files these events under a random ID that Zora creates on your phone. That ID has no link to your name, your email address or your advertising identifier, and Zora makes no screen recordings. We also give the same ID to RevenueCat, so a purchase lines up with the events around it.

To stop all of this, open your profile in Zora and turn off Share anonymous analytics. Zora then sends no events, board names included.

This website, zoraboards.com, counts page views through Vercel Web Analytics so we can tell which pages people reach. It sets no cookies, cannot see your boards and has no connection to the app’s analytics.

Reminders

If you set a reminder, it is scheduled on your device by the operating system. Zora has no push server, and no notification token or schedule ever leaves your phone.

Backups

Two things can carry Zora data off your device, and both go to accounts that are yours, not ours. First, on iOS, Zora keeps a backup file in your own iCloud. It holds your boards, the pieces on them, your pocket, your display name, your reminder settings and whether you’ve been through the welcome flow. Zora writes it whenever those change and when you tap Back up now, and reads it back when you install Zora on a new iPhone signed in to the same Apple ID. It contains no image files: photographs you added from your own library are not in it. It sits under your Apple account, governed by Apple’s terms, and you can delete it from your iCloud storage settings.

Second, your phone’s own device backup — iCloud device backup on iOS, Google’s device backup on Android — can include Zora’s data the same way it includes other apps’. On Android this is the only backup there is: Zora lets it carry your boards and pocket, but not image files. Device backup is controlled in your phone’s system settings and governed by Apple’s or Google’s privacy policies. Zora never uploads your boards to a server of its own.

Discover imagery

Photographs in Discover come from Pexels, a licensed stock photography service. When you browse or search, your search words, your app language and your device’s IP address are sent to Pexels so it can return matching photos — see Pexels’ own privacy policy for how it handles requests. Photos you keep are downloaded and stored on your device. Your boards are never sent along with those requests.

Zora Plus and payments

Subscriptions are processed by Apple or Google. Payment details go to them, never to us. Zora uses RevenueCat as subscription infrastructure to check whether a purchase is active; it receives an anonymous identifier and the purchase status for your device, plus the anonymous analytics ID described above. We see totals, not people.

Your choices and your rights

Because your content lives on your device, you are already holding it: deleting a board deletes it, and deleting the app deletes everything Zora stored, including the local copy of any photos you added. We do not sell or share personal information, and we run no advertising or tracking across other apps or websites.

If you are in the EEA, the UK or a jurisdiction with similar data protection rights — access, correction, erasure, objection — most of those rights are satisfied directly on your device, since that is where the data is. For any other question about your data, write to the address below and it will be handled; if you believe something is wrong, you also have the right to complain to your local data protection authority.

Children

Zora is not directed at children under 13. It asks no one for personal details, and its usage events are anonymous.

Changes

If this policy changes, the date at the top of this page changes with it, and the previous wording is replaced here. Significant changes will also be noted in the app.

Asking about any of this

Zora is made by one person, Aman Priyadarshi, who is the data controller for anything described here. Write to hello@zoraboards.com, and that person answers.