ZenTavo

Last updated: 5 November 2026

Privacy

ZenTavo is built so that your data stays on your iPhone. Here is what leaves the device, when and why. This is a translation; the Spanish version prevails.

It stays on your iPhone

Workouts, money, meals, weight and focus are stored only on your device.

It leaves only if you ask

Only what you analyse with ZenTavo AI in the cloud, and we do not keep it.

No tracking

No accounts, no ads, no analytics and no cookies, in the app or on this website.

You decide

You can process everything on the iPhone and delete your data whenever you want.

What stays on your iPhone

Your routines, workouts, transactions and accounts, budgets, investments, meals, targets, weight, injuries and focus sessions are stored in a local database encrypted by iOS (complete data protection). We do not receive them and cannot see them. The same applies to:

  • Your voice. Dictation uses Apple's on-device speech recognition. Audio is never sent to any server.
  • Labels, statements and broker screenshots. Photos of nutrition labels and screenshots are read on the iPhone with Apple's text recognition and discarded; bank statements you import are also read on the iPhone. None of it is stored separately or sent anywhere.
  • Apple's AI model. When analysis runs on Apple's on-device model, nothing leaves the iPhone.
  • Backups. They are exported only when you ask, to the folder you choose.

What leaves the iPhone and why

You use ZenTavo AI in the cloud

What is sent
The text, dictation or dish photo you analyse, your app's categories and today's date, to turn them into records you review before saving.
To whom
Our server on Cloudflare, which forwards it to Anthropic (Claude model) for processing.
What is kept
We do not keep the content. We only count how many analyses you make per day to apply usage limits, linked to your access code. Anthropic does not use this data to train its models and may keep it for a limited time under its terms to prevent abuse.

You turn on iCloud sync

What is sent
Your records.
To whom
Your private iCloud database, run by Apple.
What is kept
Only you can access it from your Apple account. We have no access.

You link a music service

What is sent
Requests to browse your library and play music.
To whom
Directly to that service, not through us.
What is kept
The access permission is stored in your iPhone's keychain.

You write to us or use Reportar

What is sent
If you email us, your address and your message. If you use Ajustes › Reportar, the text you write, any screenshots you attach (up to three), the app version, iPhone model and iOS version; your email address is not sent.
To whom
Our support mailbox (OVHcloud, in the EU). Reports from the app first go through our server on Cloudflare, which delivers them to that mailbox using Cloudflare Email Routing.
What is kept
The mailbox keeps messages as long as needed to help you and at most two years after the last one. The server does not keep the report: it only counts how many are sent per day to prevent abuse, by your access code or, without one, by a value derived from your IP address, which is not stored.

You can stop anything from being sent to the cloud by turning on Ajustes › Procesar solo en este iPhone (process on this iPhone only); analysis then always runs on the device. Avoid including health or other sensitive data in your dictations that you do not need to record.

Your rights

You can request access, rectification, erasure, restriction, portability or object to the processing of your data by writing to soporte@zentavo.es. Since almost everything lives only on your iPhone, you can view, export and delete that data in the app itself; deleting the app removes its local copy. If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.

More details

Legal basis
  • Consent (GDPR art. 6(1)(a) and, for any health data you choose to include, art. 9(2)(a)): cloud analysis is used only if you allow it, and you can withdraw consent at any time with the switch above, without affecting what was already processed.
  • Providing the service (art. 6(1)(b)): answering your support requests.
  • Legitimate interest (art. 6(1)(f)): limiting usage per person and protecting the service against abuse.
Providers and international transfers

We use these providers, which process data only to provide their service to us:

  • Cloudflare, Inc.: hosts this website and our server (AI and reports), delivers in-app reports to the support mailbox and processes IP addresses to deliver content and protect it against attacks.
  • Anthropic: processes the content you send to ZenTavo AI.
  • OVHcloud: hosts the domain and the support mailbox in the European Union.

Cloudflare and Anthropic may process data outside the European Economic Area, in particular in the United States. These transfers rely on GDPR safeguards: the EU-U.S. Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses.

This website

This website uses no cookies, no analytics, loads no third-party resources and contains no forms. Cloudflare logs technical data about each visit, such as the IP address, to serve and protect the page.

Children

ZenTavo is not directed at children under 14.

Changes to this policy

If what leaves the iPhone changes, we will update this page and the date above before the change reaches the app.

Data controller: Juan Carlos Valentín · Email: soporte@zentavo.es