Zadano1. Who is responsible for your data
The data controller is Valentin Kirilov, creator and operator of Zadano ("the Operator", "we"). Contact: valentin.k.kirilov@gmail.com. This policy covers the Zadano website and application at zadano.app.
2. What data we collect
- Account: email address, display name and, when signing in with Google, your profile picture.
- Content: the workbooks, tasks, notes, comments and activity trail you create or that others share with you.
- Settings: interface language and preferences, stored on your device (localStorage).
- AI key (optional): if you enable the AI features, your API key is stored in a private document readable only by your account. See the AI statement.
- Technical logs: the Google Firebase infrastructure keeps standard security logs (e.g. IP address at sign-in). We add no analytics of our own.
3. Why, and on what legal basis
- Providing the service (storage, sync, permission-scoped sharing): performance of a contract, Art. 6(1)(b) GDPR.
- Security and abuse prevention: legitimate interest, Art. 6(1)(f).
- AI features: only after your explicit action (adding a key and pressing "Analyze"), Art. 6(1)(a).
4. No ads, no tracking
Zadano has no ads, no advertising cookies, no trackers and no marketing analytics. We use only the local storage needed for sign-in and language. We do not sell or rent data to anyone.
5. Who can access your data
- Members of your workbooks see shared content according to the configured access permissions.
- Google Ireland Ltd. (Firebase) is our processor for hosting, database and authentication. The database (Firestore) lives in the European multi-region eur3. Certain Firebase services (e.g. authentication) may process data outside the EEA under the safeguards of the EU Standard Contractual Clauses.
- An AI provider of your choice (Anthropic, OpenAI or Google) receives data only if you explicitly use an AI feature, with your own key.
6. How long we keep data
As long as your account exists. When you delete your account, your profile and personal data are removed. Content you created in shared workbooks may remain visible to the other members of that workbook, because it belongs to the shared working context.
7. Your GDPR rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection. Write to valentin.k.kirilov@gmail.com and we will respond without undue delay. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or another EU supervisory authority.
8. Children
The service is not intended for persons under 14, and we do not knowingly collect their data.
9. Changes
When something changes, we update this page and the date at the top. For material changes we will notify users in the app.