Privacy Policy

Zeno Home and Zeno Kitchen are published by Zeno One LLC. Last updated: 2026-11-12.

Who this applies to

Zeno Home is a household management tool; Zeno Kitchen is its meal, recipe, and grocery companion and can also be used as a standalone app. This policy explains what both account-backed apps collect, how data is stored, and what control you have over it.

What data we collect

What we do NOT collect

Where data lives

Service providers used to run Zeno Home and Zeno Kitchen:

Your controls

Optional connections

Google user data

Zeno Home's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Concretely, for the Google Calendar scopes Zeno requests: calendar data is used only to provide the household calendar features described above and shown to the members of that household. It is not sold, not transferred to anyone except as needed to provide those features or where required by law, not used for advertising, and not used to train generalized AI or machine learning models. No human reads it except with the household's explicit permission for support or where required by law.

Children and COPPA

Households do not need to include children. When a household does include a child, Zeno Home is set up and controlled by an adult parent or legal guardian. Children use only the household experience that adult provides; they do not create direct accounts or provide an email address. The adult controls the household, its member data, and deletion. If the household owner chooses to add a child to Lampway, Zeno Home sends Lampway only internal IDs for that child's Zeno Home profile, never the child's name, birthday, or age; the owner enters the child's first name and birthday in Lampway (see Optional connections). If a parent turns it on, a child can answer four face questions in the weekly Home Check-in. These answers are seen only by the household's adults and are never shared outside the household. Removing a child from the household deletes that child's answers. If you are under 13 and using this app without a parent or guardian's permission, please stop using it and ask that adult for help.

Retention

Daily task completions accumulate over time for streaks, rewards, and Home Check-in. Optional proof photos remain until removed by product cleanup or deletion request. Zeno account identity remains while that account is active. Confirmed deletion removes household content from active systems; cloud-provider backups may retain deleted data for a limited period as part of standard disaster recovery. To prevent reuse of a deleted household code and block late writes, Zeno permanently retains a minimal deleted-household tombstone containing the random deletion capability, a one-way owner proof, and cleanup timestamps, but no household content, name, or member identifiers. During a protected non-owner adult or guardian's account deletion, a server-only pending cleanup record temporarily holds the household code, member identifier, and up to 20 bound authentication identifiers to delete that person’s device tokens. It can also hold one-way keys for their remaining private list and goal records until those records are deleted. The cleanup fields are removed when cleanup is confirmed. If cleanup has not advanced for 30 days, scheduled recovery removes the cleanup fields and the deterministic account identifier and records an unconfirmed expired cleanup. Expiry does not authorize account deletion; it stays blocked. The remaining operation fence holds one-way proofs only. A confirmed Apple revocation removes its stored token immediately. An in-progress, server-only Apple revocation credential is retained for no more than 24 hours while scheduled recovery retries; if Apple confirmation remains unavailable, the credential is removed without authorizing account deletion. The separate one-way Apple and account-operation receipt proofs used for response-loss recovery expire within 30 days. If an account deletion is started and then left unfinished, its server-only operation record keeps that account's deterministic identifier for no longer than 30 days after its last step; after that the record holds one-way proofs only. Home Check-in pooled learning keeps one-way duplicate-check receipts for 60 days and pooled counts until 12 months after their scoring version is replaced. The per-household marks are stored with their scoring version.

Home Check-in

Home Check-in is for your household's own reflection, not a medical or psychological evaluation, diagnosis, or treatment. Home Check-in answers and scores stay in your household. To improve how Home Check-in works for everyone, Zeno adds anonymous counts from each finished week (for example, “a routine signal in the 60–79 range alongside an adult answer of ‘most days’”) to a pooled total. These counts contain no names, notes, member or household identifiers, and never include children's answers. Pooled totals are only used when at least 20 households fall in the same group. Nothing is added until 14 days after the household's adults first see a notice about it in the app. An adult can turn this off in Settings → Safety & data; turning it off stops future counts, and counts already added cannot be separated from the total.

Zeno stores an empty mark for each group your household contributes to so it counts your household once per group. With authorized server access, Zeno can match the marks to your household using a random value stored with your household and a server secret. Deleting your household removes that random value from active systems.

Contact

Questions, concerns, or data requests: reach out through the feedback link in the app, or email msiljander@zenoone.com. The controller of record for this service is Zeno One LLC.

Delete your data · Back to Zeno