Important: AI requests leave your device
Chats and selected images are sent to third-party AI services when you request a reply. Please read the AI processing section before sharing content.
Our approach
This Privacy Policy explains how Zorin handles information when you use the application and its services. Zorin is intended only for people aged 18 and over. References to “Zorin,” “we,” and “our” mean the provider of the Zorin application.
Our own service records are limited to your user ID, coin information, and subscription information. Other application content is stored on your phone for use within the application. However, AI features require selected content to be sent to third-party AI services, as described below. Local storage does not mean that AI requests stay entirely on your device.
Information Zorin collects
- User ID: the identifier used to associate your use of Zorin with your coin and subscription records.
- Coin information: your coin balance and records of coin purchases, use, and rewards.
- Subscription information: your subscription product, status, purchase or renewal information, and entitlement period.
We use these records to provide the application, apply purchases and subscription benefits, maintain coin balances, and resolve purchase-related issues. Zorin does not receive your full payment card details; Apple processes App Store payments under its own terms.
Information stored on your phone
Your chat history, locally saved images, nickname, character preferences, selected looks, and other application content are stored on your phone for use in Zorin. We do not maintain a separate Zorin-hosted archive of this content.
Zorin does not independently collect your contacts, precise location, microphone recordings, health information, or browsing history. Selecting a photo does not give Zorin access to your entire photo library. Any camera or photo access is used for the feature you choose.
Local data can be removed through available application controls. Deleting the application or its local data may remove content that has no separate backup. Device backups, if enabled by you, are controlled by your device and platform settings.
Third-party AI processing and explicit permission
To generate a reply, Zorin transmits your message text, up to 19 relevant recent messages and replies from the same conversation, and the image attached to the current message. Character profile instructions and language instructions are also included. Text, context and images may contain personal information. Merely selecting or previewing an image does not upload it. Your app user ID, coin balance and purchase records are not included in AI chat requests.
Recipient: OpenRouter, Inc. at openrouter.ai receives and routes these requests to the providers hosting the requested AI model. The current model families are Qwen (qwen/qwen3.8-27b) and Mistral AI (mistralai/mistral-small-2603). The actual hosting company can vary with routing and availability; model developers are not necessarily the hosting recipient. Hosting provider names and their privacy policies are available in OpenRouter's provider directory. The authorization notice shows the configured model identifiers. Read OpenRouter's Privacy Policy for its processing practices.
Requests use HTTPS. The receiving services also receive connection/request information such as IP address, request time, model identifier and request size. We use the returned result to display an AI response. Providers may process requests to operate and secure their services, account for usage, and satisfy applicable obligations under their policies and service arrangements.
Your choice before transmission: We ask for separate, explicit AI data-sharing permission before any AI content is sent. Accepting the general Terms does not grant this permission. Choosing Don't Allow, dismissing the notice, or only reading this policy does not authorize transmission. The permission notice returns when you next attempt an AI request. Choosing Allow AI Data Sharing saves your choice locally for your current user ID and the disclosed service configuration; the notice is not shown again while that permission remains valid.
You can select Withdraw AI Permission in the in-app Privacy Policy. This blocks future AI transmissions and stops active local requests where possible. Withdrawal does not recall information already sent. A reset/new user ID or a change to the disclosed AI service configuration requires fresh permission. Non-AI features remain available without this permission.
Third-party protection requirements: Our standard for any provider receiving personal data is protection at least equivalent to this policy, including confidential processing for the disclosed purpose, secure transmission, restricted access, limited retention, safeguards for subprocessors and applicable international transfers, and support for access/deletion requests. Provider policies and contractual arrangements must be assessed against this standard; it is not a claim that all providers have identical practices or zero retention.
No online service can guarantee absolute security. Provider retention and permitted uses depend on the actual service, endpoint and contractual settings. We do not promise that submitted content is never retained or used for training. Do not submit passwords, identity documents, payment details, or another person's information without authorization. Contact hulkingle@icloud.com for privacy requests; deleting local files does not automatically delete provider-held copies.
Retention and your choices
We retain user ID, coin, and subscription records only for as long as needed to provide the service, handle purchases, and meet applicable obligations. Locally stored content remains on your device until you remove it or the relevant application data.
You can delete available local conversations and application data. For questions about the service records associated with your user ID, or to request access, correction, or deletion where applicable, contact hulkingle@icloud.com. Please provide your user ID rather than sending private conversation content.
Removing local data does not automatically remove content previously processed by independent AI providers, and deleting Zorin does not cancel an Apple subscription. Subscription management is explained in the Membership Agreement.
Security and international processing
We use reasonable safeguards for the information handled by Zorin. No storage or transmission method is completely secure. Third-party AI providers and payment services may process information in countries outside your place of residence, subject to their policies and applicable requirements.
Adults only
Zorin is intended for users aged 18 and over. We do not knowingly provide the service to minors or seek information from them. If you believe a person under 18 has provided information through Zorin, contact us so we can assess the matter and take appropriate action.
Updates and contact
We may update this policy when our services or information practices change. The updated policy will show a revised date, and we will provide any additional notice required by applicable law.
For privacy questions, contact Zorin at hulkingle@icloud.com.
How information is obtained
Collection methods: The app generates your user ID locally and obtains coin/purchase information from your actions and Apple transaction results. Chat text is entered by you; an image is obtained only when you select it through the photo/camera controls. Permission records, drafts and conversation history are stored on your device. If you contact support, we receive the email address and information you voluntarily provide solely to respond to your request. AI transmissions are described separately above.