Privacy Policy

1. Products and Sites Covered

This policy covers all Zuga Technologies products and websites including:

• ZugaApp (zugabot.ai) — AI workspace platform
• ZugaGamer Overlay — AI voice gaming assistant
• ZugaLife — Wellness and journaling
• ZugaTrader — Trading analytics
• The Box Breather (theboxbreather.com) — Free breathing exercise timer
• zugatechnologies.com — Corporate website (informational; no data collection)
• Any future products or websites released under Zuga Technologies

Product-specific data practices are noted where they differ.

2. Information We Collect

2.1 Account Data

• What: Email address, display name, OAuth provider (Google/GitHub)
• Why: Authentication, account management, communication
• Storage: Encrypted on our servers via SuperTokens

2.2 Voice Data (ZugaGamer Overlay)

• What: Audio from your microphone when the overlay is listening
• Processing: Streamed in real-time to Deepgram for speech-to-text
• Storage: Audio is NOT stored. Processed in real-time and discarded immediately. We do not record or retain any audio data.

2.3 AI Conversations

• What: Text queries and AI responses
• Processing: Sent to AI providers (Anthropic Claude, Moonshot Kimi) for response generation
• Storage: ZugaApp conversations stored in your account. ZugaGamer conversations held in memory only (cleared on restart, max 20 messages).

2.4 Screenshots (ZugaGamer Overlay)

• What: Game screenshots, captured only when you explicitly request
• Processing: Sent to Anthropic Claude Vision for analysis
• Storage: Saved screenshots stored locally on your device. Scan images processed in memory and discarded.

2.5 Local Data (Desktop Products)

• Game detection data (process names) — processed locally, not transmitted
• Player memory (class, rank, preferences) — stored as local JSON files
• Settings and preferences — stored in localStorage
• Video clips — stored locally, never uploaded
• Game knowledge cache — stored locally with 7-day TTL

2.6 Analytics Data (All Products)

• What: Page views, session duration, button clicks, anonymous usage patterns
• Processing: Collected via PostHog analytics
• Storage: Anonymized event data stored by PostHog. No personally identifiable information is collected for users without accounts.
• The Box Breather: Does not require an account. Only anonymous analytics are collected (pages visited, session length). No personal data, no cookies beyond analytics.
• zugatechnologies.com: No analytics, cookies, or tracking are deployed on the corporate website at this time.

2.7 Payment Data

• Processing: Handled entirely by Stripe (ZugaApp) or Tebex/Overwolf (ZugaGamer)
• Storage: We do NOT collect, process, or store payment card information
• We store only subscription status and transaction IDs for billing records

3. Data Flow Summary

4. Third-Party Services

Our products integrate with the following services, each with their own privacy policies:

• Anthropic (Claude AI) — AI reasoning and vision analysis
• Moonshot (Kimi) — AI coding and research
• Deepgram — Speech-to-text (ZugaGamer)
• Cartesia — Text-to-speech (ZugaGamer)
• Tavily — Web search for game information
• SuperTokens — Authentication
• Stripe — Payment processing (ZugaApp)
• Tebex / Overwolf — Payment processing (ZugaGamer)
• Spotify — Music playback control (optional, user-initiated)
• PostHog — Anonymous product analytics (all products including The Box Breather)

5. BYOK (Bring Your Own Keys)

Some products allow you to provide your own API keys for direct access to AI services:

• Your API keys are stored locally on your device only
• Keys are sent directly to the respective services — they do NOT pass through our servers
• We do not collect, log, or have access to your personal API keys
• You are responsible for securing your keys and any costs incurred

6. Data We Do NOT Collect

• We do NOT sell, rent, or share personal data with advertisers
• We do NOT collect device fingerprints or hardware identifiers
• We do NOT track browsing activity outside our products
• We do NOT store voice recordings
• We do NOT store payment card information

7. Data Retention

• Account data: Until you delete your account
• Voice audio: Not retained (real-time only)
• ZugaApp conversations: Until you delete them
• ZugaGamer conversations: Until app restart (in memory only)
• Local files (memory, clips, cache): Until you delete or uninstall
• Subscription cache: 24 hours (auto-refreshed)

8. Your Rights

Under GDPR, CCPA, and applicable privacy laws, you have the right to:

• Access: View all data we hold about you
• Delete: Request deletion of your account and associated data
• Export: Download your data in standard formats
• Withdraw consent: Revoke permissions (mic, data processing) at any time
• Object: Stop using our products at any time

For data held by third-party services, contact those providers directly. For account data requests, email us at buga@zugabot.ai.

9. Children's Privacy

Our products are not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 is using our products, please contact us.

10. Security

• All API communications use HTTPS/WSS encryption
• Authentication via SuperTokens with secure session management
• API keys stored locally, not on our servers
• Desktop apps use Electron context isolation and sandboxing

11. Changes

We may update this policy from time to time. We will notify users of material changes through our products or via email. Continued use after changes constitutes acceptance.

12. Contact

Zuga Technologies LLC, a New York limited liability company
Email: buga@zugabot.ai
Website: zugatechnologies.com