Privacy, in plain words
The short version
- What you enter (goals, wealth positions, habits, health records, notes, journal) is kept on your device, in your browser. The public Alpha has no accounts and no sync.
- It is not encrypted on your device. Anyone who can use your browser profile, or a harmful browser extension, could read it. Keep your device locked.
- ZIGoals has no ads, no trackers and no app analytics.
- Nothing is sent anywhere unless you use a feature that needs it, and then only what that feature needs (below).
What leaves your device, and when
- Loading the app: the web host (Cloudflare) receives ordinary page requests, with your IP address and browser details, like any website. A goal's page address carries its identifier, never its name, amount or notes.
- Prices and market figures: the public identity of an asset (for example "bitcoin, in euros") goes to ZIGoals' market service and from there to CoinGecko. Never your amounts, addresses or names.
- Wallets you connect or link: public addresses go to the chain services that answer for them (ZIGChain's own services, PublicNode and others for other chains), which can see your IP address. ZIGoals never holds your keys and never signs for you: your wallet does that, on your device, only when you approve.
- ZIGi with your own AI (off until you connect one): when you ask ZIGi something, your message and the records it needs go straight from your browser to the AI provider you chose (for example Anthropic or OpenAI), under your own account and their privacy policy. You see which records go with each message and can remove them. Health, your journal and your notes go only when you allow each. A meal photo goes once to your provider and is not kept by ZIGoals. Without an AI, ZIGi answers on your device and sends nothing.
- Your browser's speech recognition (when you tap the microphone): the browser maker's speech service may hear the audio (Chrome: Google; Safari: Apple). Nothing goes through ZIGoals.
- Add money and other apps: these are links to independent providers (such as Ramp Network or Banxa) that open on their own site, under their own policy. ZIGoals never sees the payment or the identity check.
- Feedback you send goes to ZIGoals with only what you type.
Your files and your choices
- Exports you download are files you control. Readable exports are not encrypted; encrypted backups are protected by their own secret, which only you have.
- Showcase (the example data) lives in the current tab only and never mixes with your records.
- Delete: clearing this site's data in your browser removes your records from this device. It cannot erase anything already public on a blockchain.
- Health is never shared with ZIGi unless you switch it on; the journal and ZIGi's notes have their own switches too.
Later: accounts and encrypted sync
When accounts open, sync will be off until you turn it on, and your data will be encrypted on your device before it leaves, so ZIGoals cannot read your plans, habits or health records. This page will say so on the day it changes.
Children
ZIGoals is not meant for children under 16.