Effective 13 October 2026 · Last updated 13 October 2026

Who we are

Zenbox is made by Zenbox Therapeutics Ltd., in British Columbia, Canada. This policy covers the Zenbox mobile apps for iOS and Android, and the website at zenbox.space.

Zenbox Therapeutics Ltd. is responsible for the information described here — we hold the account that stores it and we decide what happens to it. During the Beta the iOS app is distributed through a partner’s Apple Developer account, so the App Store may list a different seller; that does not change who is responsible for your information, which is us.

Your account

You can use Zenbox without an account. Choosing Continue as guest creates no account and collects no personal information; you can browse and listen to previews.

If you create an account, we collect your email address and a password, and nothing else. We do not ask for your name, age, location, phone number, or any other detail. Accounts are managed by Amazon Cognito, an Amazon Web Services product, which stores your email address and a cryptographic hash of your password. We never see your password in a readable form.

Your email address is used to identify your account, to let you sign in and reset your password, and to determine which content your subscription entitles you to. It is not used for marketing, and we do not send promotional email.

Content and listening

Audio content is delivered from Amazon S3. When the app fetches a piece of content, AWS receives the request and, as any web service does, records standard technical information such as your IP address and the time of the request. We use this only to deliver content and to understand aggregate bandwidth.

What you listen to stays on your device. Your library, your playlists, your favourites, your play history and your settings are stored in a database on your phone. They are not uploaded to us, and we have no server that holds them. Deleting the app deletes them.

Google Drive (optional)

If you connect a Google Drive account, Zenbox reads audio you have placed in your own ZenboxContent folder so you can play your own material in the app. This is entirely optional and the app is fully functional without it.

We are required to be precise about one thing here. Zenbox requests Google’s drive.readonly scope, which technically grants read access to files in your Drive. The app reads only the ZenboxContent folder and ignores everything else; it never writes to, modifies or deletes anything in your Drive, and it never copies your Drive contents to us or to any third party. You can revoke this access at any time at myaccount.google.com/permissions.

Zenbox’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The microphone

Zenbox can listen to your voice so that singing or humming in tune is reflected back to you — the orbs in the Vocal Visualizer respond to your pitch, and the reverb opens when you are on the note.

Three things are true of this, and all three are deliberate:

• The microphone opens only when you switch it on. It is off by default, it is never opened merely by visiting a screen, and it closes when you turn it off or disconnect your headset.
• Nothing is recorded. Audio is analysed for pitch in the moment and discarded. The app has no recording feature and no path that writes microphone audio to storage.
• Nothing is transmitted. All analysis happens on your device. No audio, and no data derived from audio, is ever sent to us or to anyone else.

You can withdraw microphone permission at any time in your device settings, and the rest of the app continues to work.

Subscriptions and payment

Subscriptions are purchased and managed entirely through the Apple App Store or Google Play. Zenbox never receives, handles or stores your card details, billing address or any other payment information. The app is told only whether an active subscription exists.

What we do not do

• We do not use analytics or telemetry. The app contains no analytics SDK, no crash-reporting SDK, and no advertising SDK.
• We do not profile you, build an advertising identity, or track you across apps or websites.
• We do not sell, rent or share personal information with third parties.
• We do not show advertising.

Who your information reaches

Three parties, and only in the ways described above:

• Amazon Web Services — account management (Cognito) and content delivery (S3).
• Google — only if you choose to connect Google Drive.
• Apple or Google — only as the stores that process your subscription.

Keeping and deleting your information

We keep your account for as long as it exists. You can ask us to delete it at any time by writing to the address below, and we will remove your account and associated email address. Content stored on your device is removed by deleting the app.

Children

Zenbox is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold, and to object to its processing. Since the only personal information we hold is an email address, these requests are straightforward — write to us and we will act on them.

Changes to this policy

If this policy changes materially we will update the date at the top of this page and, where the change affects how your information is used, make it visible in the app. Continuing to use Zenbox after a change means accepting the updated policy.

Contact

Questions, requests and deletion requests: privacy@zenbox.space
Zenbox Therapeutics Ltd., British Columbia, Canada.