1. Data controller
Ubora One Limited is the data controller for personal information processed through Zumi. This policy explains what we collect and why.
Ubora One Limited
Privacy Policy
Zumi is operated by Ubora One Limited. Last updated 21 August 2026.
2. What we collect
Account details (name, phone number or email, avatar), content you send such as messages and media, call metadata such as start time and duration, device and push-notification tokens, and diagnostic logs used to keep calls connected.
3. How we use it
To deliver messages and calls, sync your contacts and presence, send notifications you opted into, prevent fraud and abuse, and improve reliability. AI features process content only to produce the assistance you requested.
4. Sharing
We share data only with the infrastructure and payment partners needed to run Zumi, and where the law requires it. We do not sell personal data.
5. Security
Traffic is encrypted in transit, access to production data is restricted and audited, and sensitive credentials are stored server-side only. We are working toward full end-to-end encryption for chats.
6. Retention
We keep information for as long as your account is active or as needed to meet legal obligations. You can delete content and request account deletion at any time.
7. Your rights
Under NDPR and comparable laws you can request access, correction, export, or deletion of your data, and you can withdraw consent for optional processing such as notifications and contact sync.
8. Contact
Privacy requests can be sent to Ubora One Limited through the support channel in the app.