Privacy Policy

Thimar ("we", "us"), based in the Sultanate of Oman, operates ZINTHUB™ at zinthub.com and is the data controller for personal data processed to operate the service. This notice explains our collection, use, sharing and protection of that data. Contact us at Thimar.om@outlook.com.

Personal data, purposes and legal bases

• Account and authentication data: name and email where provided, sign-in provider, authentication identifiers, password credentials handled by our authentication provider, preferred language and signup date. We use these to create and secure accounts and provide the service, on the basis of contract performance and legitimate interests in security.
• Service content: tasks, habits, notes, time-zone preferences and mood/focus logs. We process this to provide your Life OS under our contract. Personal context logs are encrypted in your browser before storage; the service does not receive their decryption key.
• AI requests: prompts and conversation context you submit to task splitting or Life Chat are sent to AI service providers to generate responses, under our contract. ZINTHUB does not save Life Chat conversation history; providers may process or retain requests under their own service terms. Avoid submitting sensitive information unnecessarily.
• Optional connections: if you connect Google Calendar, we process account identifiers, authorization tokens and event details to display events and create events you request. This is used only to provide your connected calendar features. You can disconnect in the dashboard or revoke access through Google.
• Support communications: contact details and messages are used to answer requests and resolve issues, based on contract performance or legitimate interests in customer support.
• Technical and usage data: IP address, device/browser information, service errors and security records are used to maintain and secure the service under legitimate interests. Optional analytics, if enabled, require your consent.
• Subscription records: plan, billing status and PayPal subscription identifiers are used to manage access and billing support under our contract and applicable legal obligations. PayPal handles your payment details directly; we never receive your card or bank details.

Who receives personal data

We share only the data needed for the following purposes:

• Service providers for hosting, authentication, storage, AI processing, and support; analytics providers only where enabled with consent.
• PayPal, our payment processor, for payments, recurring billing and refunds. PayPal processes transaction data under its own Privacy Statement.
• Professional legal and accounting advisers where necessary, and authorities where disclosure is legally required.

We do not sell or rent personal information or share it for third-party advertising. Sharing with the service providers and PayPal described above is necessary to operate the service, not advertising monetization.

Retention

We keep account information and stored service content while your account is active. Following an account-deletion request, we delete or anonymise this data within 30 days unless retention is legally required. Residual backup copies, where present, expire within 90 days and are not used for normal operations. Support messages and security records are retained for up to 24 months after resolution or collection, unless an ongoing dispute or legal obligation requires longer retention. Billing records needed for accounting or tax compliance may be retained for up to seven years, or the period required by applicable law. PayPal independently retains its transaction records under its own obligations.

Security

We use appropriate technical and organisational measures, including HTTPS encryption in transit, browser-side encryption for personal context logs, authenticated access controls, user-scoped access restrictions, and limited privileged access. No service can guarantee absolute security. Keep your account credentials and devices secure.

International processing

Our providers may process data outside your country, including outside the UK or EEA. Where UK/EEA transfer rules apply, transfers must be supported by applicable adequacy decisions or appropriate safeguards such as Standard Contractual Clauses and the UK addendum or IDTA. You can contact us for information about applicable safeguards.

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. UK/EEA users may complain to their supervisory authority; we respond to GDPR rights requests within one month, subject to lawful extensions. California and Virginia residents may exercise applicable access, deletion, correction and opt-out rights without discrimination, and contact us to appeal a denied request where applicable. We do not sell personal data or share it for targeted advertising.

Use the dashboard's export and delete controls or email Thimar.om@outlook.com. We may verify your identity before responding.

Cookies and local storage

Essential cookies and browser storage support sign-in, security and consent choices. Optional functional storage supports preferences; optional analytics requires consent. We do not use marketing cookies for advertising. Choose Reject all or Customize in the cookie banner to control optional categories. To reopen the banner, remove the site's saved consent entry through your browser's site-data settings; deleting all site data may also remove local-only notes or encryption keys, so export needed data first. PayPal's checkout may use its own essential storage and cookies under its privacy statement.