Privacy policy
01. Who holds your data
Zebra is run by Avancei Tecnologia LTDA, CNPJ 65.915.777/0001-21, Rua Visconde do Rio Branco 1488, conj. 909, Centro, Curitiba, PR, CEP 80420-210, Brazil, which is the controller of the data described here. Our data-protection officer is Emerson Almeida. Write to legal@dailyzebra.com for any request about your data. You can also see, export and delete your data yourself at Your Zebra.
02. How Zebra works, in one paragraph
Zebra is a server your Claude talks to. You add it to Claude, sign in with Google or Apple, and Claude calls Zebra's tools while it reads your meetings, chats and tasks through the connectors you set up in Claude. Zebra only receives what Claude sends it in those calls.
03. What we hold
- Account. The identifier Google or Apple gives us for your account and, with Google, your email address. We use them to know it is you and to keep your space separate from everyone else's.
- Profile. The names you appear as in transcripts and chats, your time zone and your holidays.
- Promises. For each promise: what was promised, who promised it, the due date when one was said, the short quote that proves it, and the title and time of the meeting or chat it came from.
- Your rules. Corrections you teach Zebra, such as "reviews are never the top task".
- Task state. The identifiers of your tasks with what Zebra concluded about them (for example, "waiting on a review"), and the tasks you told Zebra to stop checking.
- Activity. A short log of what happened (a promise kept, a day planned), used for your weekly summary and deleted after 30 days.
- Sign-in tokens. The tokens that let your Claude reach your space. We store them only as hashes.
04. What we do not hold
- We never connect to your email, calendar, notes, chat or task manager. Your Claude does, with its own connectors.
- Transcripts, chats and task lists that Claude sends for a step are read in memory and dropped when the step ends. Only the quote of each accepted promise is kept.
- We do not keep your Google or Apple password, contacts or any data beyond what is listed above.
- We do not sell your data, use it for advertising, or use it to train models.
05. Why we hold it, and on what basis
We process this data to provide the service you asked for: keeping your promises and planning your day. Under Brazil's LGPD, the legal basis is the performance of a contract with you (art. 7, V). Account data is also used to protect the service against abuse, based on our legitimate interest (art. 7, IX).
06. Who processes it with us
| Provider | What it does |
|---|---|
| Cloudflare | Runs Zebra and stores your space and sign-in tokens. |
| Signs you in when you choose Google. | |
| Apple | Signs you in when you choose Apple. |
Your Claude, and the connectors you use with it, are provided by Anthropic and other companies under their own terms and privacy policies. What Claude does with your data is governed by them, not by this policy.
07. Where it lives, and for how long
Cloudflare may store and process data outside Brazil. That transfer is made to perform the contract with you (LGPD art. 33, V) and under Cloudflare's own safeguards.
- Your space (profile, promises, rules and task state) is kept while your account exists and deleted within 30 days after you ask us to delete it.
- The activity log is deleted after 30 days.
- Sign-in tokens expire on their own and are deleted when your account is deleted.
- Operational logs kept by Cloudflare are deleted within 30 days.
08. Your rights
Under the LGPD you can ask us to confirm we hold your data, give you a copy, correct it, delete it, anonymise or block it, and tell you who we shared it with. Write to legal@dailyzebra.com from the email of your account; we answer within 15 days. You can also complain to Brazil's data-protection authority, the ANPD.
09. Cookies
The sign-in page sets short-lived cookies that tie a sign-in to your browser and expire in ten minutes. We do not use analytics or advertising cookies.
10. Security, and what we would tell you
Each account's data lives in its own isolated storage. Tokens and secrets are stored only as hashes, and all traffic uses HTTPS. If a security incident puts your data at risk, we will tell you and the ANPD as the LGPD requires.
11. Google user data
Zebra's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request your basic profile and email to sign you in.
12. Changes
New versions are posted here with their date. When a change matters to how your data is used, we email you, when we have your email, at least 30 days before it takes effect.