Skip to main content
    ZoraSafe
    Download
    Download ZoraSafe

    ZoraSafe Privacy Policy

    Effective Date: January 24, 2026
    Last Updated: January 24, 2026

    Introduction

    ZoraSafe ("we," "us," or "our") is committed to protecting your privacy while providing powerful protection against scams, phishing, and fraud. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

    By using ZoraSafe, you agree to the collection and use of information in accordance with this policy.

    Information We Collect

    Information You Provide Directly

    • Account Information: Email address, name, and password when you create an account
    • Profile Information: Optional details such as age range or household composition to personalize your protection settings
    • User-Submitted Content: Messages, calls, emails, links, or screenshots you submit to Zora for analysis
    • Feedback and Communications: Information you provide when contacting us for support or providing feedback

    Information Collected Automatically

    • Device Information: Device type, operating system, unique device identifiers, and mobile network information
    • Usage Data: How you interact with the Service, including features used, screens viewed, and actions taken
    • Log Data: IP address, access times, app crashes, and system activity
    • Location Information: General location (city/region level) derived from IP address; we do not collect precise GPS location unless you explicitly enable location-based features

    Information from Third Parties

    • Threat Intelligence: We receive anonymized threat data from security partners to enhance our scam detection capabilities
    • Community Reports: Aggregated, anonymized reports from the ZoraWatch community intelligence network

    How We Use Your Information

    We use the information we collect to:

    • Provide Scam Protection: Analyze suspicious content you submit to detect potential threats and provide security guidance
    • Power AI Threat Detection: Use artificial intelligence to identify scams, phishing attempts, and fraud patterns
    • Improve Our Service: Enhance detection accuracy and develop new protection features
    • Communicate With You: Send security alerts, respond to inquiries, and provide customer support
    • Ensure Security: Monitor for suspicious activity and protect against fraud and abuse
    • Comply With Law: Meet legal obligations and respond to lawful requests from authorities

    Smart PII Protection

    How Our Privacy-First AI Works

    We use advanced AI with privacy-focused design to analyze suspicious messages, calls, and emails you report. Before any analysis occurs, our system applies intelligent redaction to protect your personal information:

    Always Protected — Never Sent to External Systems:

    • Social Security numbers
    • Credit card and bank account numbers
    • Passwords and login credentials
    • Driver's license and passport numbers
    • Medical and health information
    • Other sensitive personal identifiers

    Preserved for Threat Analysis:

    When you ask Zora to analyze a potential scam, we retain only the information necessary to assess the threat:

    • Suspicious phone numbers (so our AI can verify if they're legitimate)
    • Suspicious URLs and links (so our AI can identify phishing sites)
    • Fake email addresses (so our AI can detect spoofing)
    • Impersonated company or brand names (so our AI can confirm authenticity)

    Stored Securely:

    All data stored in our systems is fully redacted to ensure your personal information remains private, even in our internal databases.

    Why This Matters

    This approach gives you powerful scam protection without compromising your privacy. For example, if you report a suspicious call from someone claiming to be from the IRS and asking for your Social Security number, our AI can verify whether the phone number is legitimate while your actual Social Security number is never transmitted or stored.

    Information Sharing and Disclosure

    We do not sell your personal information. We may share information in the following circumstances:

    Service Providers

    We work with trusted third-party companies that help us operate, maintain, and improve the Service. These providers have access only to the information necessary to perform their functions and are contractually obligated to protect your data. Our service providers include:

    • Cloud infrastructure providers
    • AI and machine learning service providers
    • Analytics services
    • Customer support platforms

    Community Intelligence (ZoraWatch)

    When you report a scam, anonymized threat indicators (such as phone numbers or URLs associated with known scams) may be shared with the ZoraWatch community to help protect other users. Your personal information is never included in community reports.

    Legal Requirements

    We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

    Business Transfers

    If ZoraSafe is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

    With Your Consent

    We may share information for other purposes with your explicit consent.

    Data Retention

    We retain your information only as long as necessary to provide the Service and fulfill the purposes described in this policy:

    • Account Information: Retained while your account is active and for a reasonable period afterward for legal and business purposes
    • Submitted Content: Threat analysis data is processed in real-time; redacted versions may be retained to improve our detection systems
    • Usage Data: Retained in aggregated, anonymized form for analytics and service improvement

    You may request deletion of your personal information at any time (see Your Rights and Choices below).

    Data Security

    We implement industry-standard security measures to protect your information, including:

    • Encryption of data in transit and at rest
    • Regular security assessments and penetration testing
    • Access controls limiting employee access to personal data
    • Secure development practices and code review

    While we strive to protect your information, no method of transmission or storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

    Your Rights and Choices

    Depending on your location, you may have certain rights regarding your personal information:

    Access and Portability

    You can request a copy of the personal information we hold about you.

    Correction

    You can request that we correct inaccurate or incomplete information.

    Deletion

    You can request that we delete your personal information, subject to certain exceptions (such as legal retention requirements).

    Opt-Out of Communications

    You can opt out of promotional communications by following the unsubscribe instructions in those messages or adjusting your notification settings in the app.

    Data Processing Objections

    You may object to certain types of data processing where applicable under local law.

    To exercise any of these rights, please contact us at privacy@zorasafe.com.

    Children's Privacy

    ZoraSafe is designed to protect families, including children. However, our Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without parental consent.

    If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have information from or about a child under 13, please contact us at privacy@zorasafe.com.

    For families using ZoraSafe's family protection features, a parent or guardian must manage accounts for children under 13.

    California Privacy Rights (CCPA)

    If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

    • Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
    • Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
    • Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
    • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

    To submit a CCPA request, contact us at privacy@zorasafe.com.

    European Privacy Rights (GDPR)

    If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

    • Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of a contract with you, (c) our legitimate interests (such as fraud prevention and service improvement), or (d) compliance with legal obligations.
    • Additional Rights: In addition to the rights listed above, you may have the right to restrict processing and to lodge a complaint with a supervisory authority.
    • Data Transfers: If we transfer your data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses.

    Our Data Protection Officer can be reached at dpo@zorasafe.com.

    International Data Transfers

    ZoraSafe is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

    We take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law, including implementing Standard Contractual Clauses where required.

    Third-Party Links and Services

    The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

    Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you a notification through the app or via email.

    We encourage you to review this Privacy Policy periodically for any changes.

    Contact Us

    If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

    ZoraSafe, Inc.

    Email: privacy@zorasafe.com

    Address: 8 THE GREEN STE B, DOVER, KENT COUNTY, DE 19901, USA

    For data protection inquiries in the EU: dpo@zorasafe.com

    Supplemental Notices

    For Users in Specific Jurisdictions

    Additional privacy disclosures may apply depending on your location. Please contact us if you have questions about privacy rights specific to your jurisdiction.

    Accessibility

    We are committed to making our privacy practices accessible to all users. If you need this Privacy Policy in an alternative format, please contact us.