This Privacy Policy applies to all mobile applications published by ZenStone LLC, including Calm Stoic Journal, KnowUs: Who Knows Who, Hairfit: AI Hairstyle Try On, Seventy-Two – Life Simulator, BMX Sesh: Bike Freestyle, and any future apps. We are committed to protecting your privacy.
1. Who We Are
ZenStone LLC is a limited liability company registered in the United States (30 N Gould St, Ste R, Sheridan, WY 82801). We develop and publish mobile apps under the ZenStone LLC brand.
Contact: privacy@zenstonellc.com
2. Data We Collect
Calm Stoic Journal:
- Journal entries & settings — stored locally on your device only. We do not have access to your journal content.
- Streak & statistics — stored locally on your device only.
- Language & theme preferences — stored locally on your device only.
- Quotes — fetched anonymously from Firebase solely to deliver quote content.
- Purchase information — handled entirely by Google Play / Apple App Store Billing. We only receive confirmation of whether a purchase was made, not payment details.
- Notification permissions — only used to send daily reminders you set yourself. No data leaves your device.
- Marcus Aurelius AI Chat (Calm Stoic Journal only) — when you use the Marcus AI feature, the message you type is transmitted to our secure cloud function and forwarded to Anthropic's API for processing. Messages are not stored on our servers or by Anthropic after processing. Only your monthly usage count (quota) is stored locally on your device. The cloud function runs on Google Cloud (europe-west1, EU region). See Section 5 for Anthropic's privacy policy.
KnowUs: Who Knows Who:
- Player names — entered voluntarily for the online multiplayer mode. Stored temporarily in Firebase during an active game session and deleted automatically when the session ends.
- Game room data — temporary session data (room code, answers, scores) stored in Firebase during active play only.
- Promo code redemption — a randomly generated anonymous device ID is stored in Firebase to prevent duplicate code redemptions. No personal information is linked to this ID.
- Language & theme preferences — stored locally on your device only.
- Purchase information — handled entirely by Google Play / Apple App Store Billing. We only receive confirmation of whether a purchase was made, not payment details.
Hairfit:
- Your photo — the photo you choose is transmitted to our secure cloud function and forwarded to an AI image model that generates the image showing you with the new hairstyle: either Google's Gemini API or Microsoft's MAI image model (running on Microsoft Azure, reached through the routing service OpenRouter). The photo is processed only to create that image. It is not stored on our servers and not used to train any AI model. Our AI providers may keep a request for a limited time solely to detect abuse and ensure security, as their terms require (Microsoft: up to 30 days); it is not used for any other purpose. The cloud function runs on Google Cloud (us-central1, United States); the AI providers process data in the United States. See Section 5 for their privacy policies.
- Your photo and the generated images — kept only on your device (local browser storage). Deleting an image in the app or uninstalling the app removes it from your device permanently. The one exception: each newly generated image is held on our server (Google Cloud Storage, United States) for up to 48 hours, so that it can still be delivered to you if your connection drops during generation. It is then deleted automatically. Your original photo is never stored there.
- Facial images — the photo necessarily shows your face, because that is what the app changes. We do not perform face recognition, we do not create a biometric template, and we do not use the photo to identify you. It is analysed only to suggest hairstyles that suit your face shape and hair texture, and that analysis is discarded once the suggestion is made.
- First name & style preference — entered voluntarily and stored locally on your device only, used to personalise the app's wording and suggestions.
- Credit balance — stored locally on your device only.
- Feedback — if you rate a result (thumbs up/down), we store your rating, the reasons you select, any text you type, the name of the hairstyle and your selected style preference in Firebase. No photo is included. This is used solely to improve the app.
- Advertising ID — in Hairfit, Firebase Analytics uses the advertising ID provided by your device to measure how our own marketing campaigns perform. It is not linked to your photo and is not used to show you ads. You can reset or delete it at any time in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking).
- Approximate location — Firebase Analytics derives a coarse, city-level location from your device's masked IP address, so that we can see in which countries and regions our apps are used. No precise location, no GPS data and no movement profile is collected.
- Purchase information — handled entirely by Google Play / Apple App Store Billing. We only receive confirmation of whether a purchase was made, not payment details.
Seventy-Two – Life Simulator:
- Your lives and game progress — the name you give your character, your choices, results and best scores are stored locally on your device only. We do not have access to them.
- Settings (music, sound effects, vibration) — stored locally on your device only.
- Purchase information — the one-time purchase "Full Game" is handled entirely by Google Play / Apple App Store Billing. We only receive confirmation of whether a purchase was made, not payment details.
- Ratings — after your first complete life, the app may ask your device once to show the App Store / Google Play rating dialog. Any rating you give goes directly to Apple or Google.
- Anonymous statistics (Firebase Analytics) — to learn how far lives get and which games are played, the app sends a small set of events to Google Firebase Analytics: a life started or ended (with the in-game age of the character and the number of lives played), a game started or finished (which game), the purchase screen shown and whether a purchase or restore went through, and the rating prompt. Firebase adds an app instance ID, basic device and app information (model, OS version, app version, language) and a coarse, city-level location derived from the IP address. No names, nothing you choose or type in a life, no advertising ID (on iOS the version of Firebase without IDFA is used; on Android advertising ID collection is disabled), no ad personalization and no tracking across apps or websites.
- Your choice — in the EU/EEA, the UK and Switzerland, statistics are only sent after you allow them in the app. Everywhere else they are on by default. You can switch them off at any time in the menu under "Anonymous statistics".
- No account and no advertising. Apart from these statistics and the purchase, the app makes no network requests and works offline.
BMX Sesh: Bike Freestyle:
- Game progress — scores, records, collected stickers, garage choices (bike colour, clothing) and unlocked parks are stored locally on your device only. We do not have access to them.
- Settings (music, sound, control hints, controller mode) — stored locally on your device only.
- Purchase information — the one-time purchase "Unlock all parks" is handled entirely by Apple App Store / Google Play Billing. The app only learns whether the purchase was made, never your payment details.
- Anonymous statistics (Firebase Analytics) — to learn which parks and modes are played and where the game can be improved, the app sends a small set of events to Google Firebase Analytics: a park or mode selected or started, the result of a session, Best Trick or B-I-K-E round (score, goals reached), a dirt run finished (score and time), the garage opened, and the unlock screen shown, a purchase started, failed or completed, and a restore tapped. Firebase adds an app instance ID, basic device and app information (model, OS version, app version, language) and a coarse, city-level location derived from the IP address. No names, no personal data, no advertising ID (on iOS the version of Firebase without IDFA is used; on Android advertising ID collection is disabled and the advertising ID permission is removed), no ad personalization and no tracking across apps or websites.
- Your choice — statistics are on by default. You can switch them off at any time under Settings → "Anonymous statistics"; after that, no statistics are sent.
- No account and no advertising. Apart from these statistics and communicating with the App Store / Google Play for the purchase, the app makes no network requests and works offline.
3. Health & Fitness Data
Regarding health and fitness data across all our apps:
- We do not directly collect, access, or process any health or fitness data from your device or any health APIs.
- Calm Stoic Journal: Our third-party analytics and advertising SDKs (Firebase, Meta, TikTok) may collect certain device and behavioral data as part of their standard operation. Please refer to their privacy policies in Section 5.
- KnowUs: Who Knows Who: Only Firebase is used for multiplayer functionality. No advertising or tracking SDKs are used in this app.
- Hairfit: Firebase is used for image generation, feedback and analytics, and RevenueCat to report completed purchases. Firebase Analytics uses your device's advertising ID to measure the performance of our own marketing campaigns. No advertising is shown inside the app.
- Seventy-Two – Life Simulator: Firebase Analytics is used only for anonymous product statistics (see Section 2), without advertising ID and without ad personalization. No advertising or tracking SDKs are used. Purchases and ratings are handled by Apple and Google.
- BMX Sesh: Bike Freestyle: Firebase Analytics is used only for anonymous product statistics (see Section 2), without advertising ID and without ad personalization. No advertising or tracking SDKs are used. Purchases are handled by Apple and Google.
- We do not share any health or fitness data with advertisers or other third parties beyond what is disclosed in Section 5.
4. Data We Do Not Collect
- We do not collect your address or any personal identification information through our apps. Hairfit lets you enter a first name, but it never leaves your device.
- We do not track your precise location and we do not use GPS. In apps that use Firebase Analytics, an approximate, city-level location is derived from your device's masked IP address for statistical reporting. We cannot determine your address or follow your movements.
- We do not sell your personal data.
- We do not use advertising networks for in-app ads — none of our apps display advertising. KnowUs: Who Knows Who does not use any advertising or tracking SDKs. Calm Stoic Journal uses Meta and TikTok SDKs, and Hairfit uses Firebase Analytics together with your device's advertising ID, solely to measure the effectiveness of our own marketing campaigns.
5. Third-Party Services
Our apps use the following third-party services:
- Google Firebase — used for online multiplayer sessions, promo code validation, quote delivery, and anonymous analytics. Firebase may collect technical information according to Google's Privacy Policy.
- Google Play Billing / Apple App Store — used to process in-app purchases. Governed by Google's Privacy Policy and Apple's Privacy Policy.
- Meta (Facebook) SDK — used in Calm Stoic Journal only to measure the effectiveness of our advertising campaigns. May collect device identifiers and app usage data according to Meta's Privacy Policy.
- TikTok SDK — used in Calm Stoic Journal only to measure the effectiveness of our TikTok advertising campaigns. May collect device identifiers and app usage data according to TikTok's Privacy Policy.
- RevenueCat — used in Hairfit to report completed purchases for revenue analytics. It receives the purchase itself and an anonymous, app-generated identifier. Purchases are processed by Apple and Google, never by RevenueCat. See RevenueCat's Privacy Policy.
- Google Gemini API — used exclusively in Hairfit to generate hairstyle images and to analyse a photo for matching suggestions. Your photo is transmitted in real-time; Google may keep it for a limited time solely to detect abuse, as the Gemini API Terms describe. Google does not use data submitted through the paid Gemini API to train its models. See Google's Privacy Policy and the Gemini API Terms.
- Microsoft MAI image model (via OpenRouter) — used in Hairfit as an alternative to Gemini to generate hairstyle images. The request passes through OpenRouter, which routes it to Microsoft Azure and does not store images beyond routing, except where required for abuse detection, security or legal compliance, and does not use them for training. Microsoft does not use the content to train its models and may retain it for up to 30 days solely for abuse monitoring. See OpenRouter's Privacy Policy and Microsoft's Privacy Statement.
- Unity In-App Purchasing — used in BMX Sesh: Bike Freestyle as the on-device library that talks to the Apple App Store / Google Play to show the price and complete or restore the purchase. We do not use Unity Analytics or any other Unity data service. See Unity's Privacy Policy.
- Anthropic — used exclusively for the Marcus Aurelius AI Chat feature in Calm Stoic Journal. Your message is transmitted to Anthropic's API in real-time and is not retained after processing. Anthropic does not use API data to train its models. See Anthropic's Privacy Policy.
6. Data Storage & Security
Personal preferences and app data are stored locally on your device and are not transmitted to our servers. Online multiplayer session data is stored temporarily in Firebase and deleted automatically after the session ends.
Certain technical and usage data may be collected and transmitted by third-party services (Firebase, and for Calm Stoic Journal also Meta and TikTok) for analytics and advertising purposes. Please refer to their respective privacy policies in Section 5.
Hairfit: your photo and the generated images are stored only in your device's local browser storage. Your photo is transmitted solely for the moment of generation and never stored on our servers. A newly generated image is held on our server for up to 48 hours so it can be delivered if your connection drops, and is then deleted automatically.
Seventy-Two – Life Simulator: all game data (your lives, choices and scores) stays in the app's local storage on your device and is never transmitted. Only the anonymous statistics described in Section 2 are sent to Firebase, if allowed.
BMX Sesh: Bike Freestyle: all game data (scores, records, stickers, garage, settings and the unlock status) stays on your device and is never transmitted. Only the anonymous statistics described in Section 2 are sent to Firebase, unless you switch them off. An unlock you bought can be restored at any time via "Restore purchases".
If you uninstall an app, all locally stored data will be deleted from your device.
7. Children's Privacy
Our apps are designed for general audiences. KnowUs: Who Knows Who includes a family mode suitable for all ages. We do not knowingly collect personal information from children under 13. Online multiplayer features require player names which are entered voluntarily and stored only for the duration of the game session. If you believe a child has provided personal information, please contact us at privacy@zenstonellc.com.
8. Your Rights
Since most of your data is stored locally on your device, you have full control over it at all times:
- You can delete your data at any time by clearing the app's data in your device settings or by uninstalling the app.
- For Firebase-stored session data (KnowUs online mode), data is automatically deleted after the game session ends.
- If you have contacted us by email, you can request deletion of your email and message by contacting privacy@zenstonellc.com.
If you are located in the EU/EEA, you have rights under GDPR including the right to access, rectify, and erase your personal data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.
10. Contact
If you have any questions about this Privacy Policy, please contact us:
ZenStone LLC
30 N Gould St, Ste R, Sheridan, WY 82801, USA
Email: privacy@zenstonellc.com