Privacy Policy
Effective October 27, 2026
ZENTT, LLC does not sell your data, does not show ads, and uses your health information only to run the app for you.
1. Who we are and what this policy covers
ZENTT, LLC, an Arizona limited liability company ("ZENTT", "we", "us"), runs the ZENTT app for iPhone and Android, the website zenttapp.com, and the servers behind them. ZENTT is a complete health ecosystem for nutrition, training and bloodwork tracking.
This policy explains what we collect, why we collect it, who receives it, how long we keep it, and the choices you have. It replaces the earlier policy that covered only the website and its early-access list.
Responsible party: ZENTT, LLC, 8825 N 23rd Ave, Ste 100, Phoenix, AZ 85021, USA. Contact: hello@zenttapp.com.
2. What we collect
Most of what ZENTT holds is information you enter yourself. Some features are optional; we collect that information only if you use them.
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Email address, password, language, sign-in times | You. Your password is stored only in protected (hashed) form by our sign-in provider; we cannot read it. |
| Profile | Name you choose, sex, date of birth, height, activity level, goals and targets, units, country or region | You |
| Reproductive and hormone context (optional) | Period dates you log, menstrual cycle phase, contraception, pregnancy, menopause stage, testosterone therapy. Period dates are never sent to AI services | You |
| Body measurements | Weight, waist, blood pressure, pulse | You |
| Progress photos and body measurements (optional) | Photos you take (front, side, back) and measurements you enter (waist, arms, chest, thighs). Used only to show your progress to you. Stored privately in our cloud database; only you can see them. Never sent to AI, never shared, and never included in your Emergency QR or doctor summary. You can delete any photo or measurement at any time, and deleting your account deletes them all | You |
| Medical profile (optional) | Allergies, conditions, vaccinations, surgeries and procedures, family history | You |
| Nutrition | Foods, amounts, meals and times, daily totals, water, caffeine, electrolytes, favorite foods, saved meals | You. Food details come from licensed food databases. |
| Food photos | A photo of a meal or of a nutrition label | You. Read once, then discarded (see section 5). |
| Training | Workouts, exercises, sets, reps, weights, cardio, duration, effort, programs, notes, and notes on pain or discomfort | You |
| Lab results | Lab reports you upload (PDF or photo), test values, units, reference ranges, lab name, test dates, your notes | You. The report file is read once, then discarded. |
| Care records | Doctor visits (clinician, specialty, reason), treatments (medications, supplements, dose, schedule), doses taken, symptoms | You |
| Connected device data (optional) | Recovery or readiness, heart rate variability, resting heart rate, sleep, strain, steps, calories, blood oxygen, skin temperature change, breathing rate, workouts | WHOOP or Oura, only if you connect them (see section 6) |
| Settings | Reminders, caffeine cut-off time, theme | You |
| Feedback and support | Messages you send us | You |
| Early access list | Your email address, if you sign up on zenttapp.com. Used only to tell you when ZENTT launches and about your trial. Never sold or shared. Reply or write to hello@zenttapp.com to be removed | You |
| Technical data | IP address, device and operating system, app version, time of each request, error logs | Your device and our hosting providers, automatically |
| Subscription status (when subscriptions start) | Whether a subscription is active and when it renews | Apple App Store or Google Play. We never receive your card details. |
| Early-access list (website) | Email address, date you joined, the page that brought you | You |
We do not collect your precise location, contacts, photos you did not choose to send, microphone recordings, or advertising identifiers. The app has no ads and no cross-app tracking.
3. Your health data and your consent
Nearly everything you log in ZENTT is health information, and we treat all of it as sensitive. We collect and use it only to provide the features you use, and only with your consent.
- When you create an account, we ask for your consent to collect and process your health information.
- We ask again, separately, before you first use an AI feature (section 5) and before you connect a device (section 6).
- You can withdraw consent at any time: delete the information, disconnect the device, or delete your account. Withdrawing does not undo processing that already happened.
We never sell your health information, never use it for advertising, and never use it to make decisions about credit, insurance, employment or housing.
4. How we use your information
We use your information to run ZENTT for you, and for nothing unrelated to that.
- Provide the app: save what you log, calculate totals and targets, show trends, compare your lab results with the reference ranges printed on your report and with published ranges, and show your reminders.
- Sync connected devices you choose to connect.
- Run AI features you choose to use (section 5).
- Keep ZENTT secure and working: protect accounts, prevent abuse, and find and fix errors.
- Support: answer your messages and feedback.
- Service emails: about your account, security, and changes to this policy. News about ZENTT only if you joined the early-access list; every such email lets you unsubscribe.
- Meet legal obligations.
We do not use your information for advertising or marketing profiles. We do not make decisions about you by automated means that have legal or similarly significant effects.
5. AI features
Five optional features use AI. Each sends only what that feature needs, and you check every result before anything is saved.
| Feature | What is sent | What comes back |
|---|---|---|
| Read a lab report | The pages of the report you upload | The test values, units and ranges, as rows for you to review |
| Scan a nutrition label | The photo of the label | The nutrition facts, for you to review |
| Log a meal from a photo | The photo of the meal | An estimate of the foods and amounts, for you to review |
| Build a workout | Your goal, where you train, the time you have, and your recent exercises (no name or email) | Exercise choices from ZENTT's own exercise library |
| Ask ZENTT | The question you ask and the parts of your record needed to answer it: food totals, weight, workouts, blood-test results, doctor visits, medications and symptoms (no name, email, photos or period dates; WHOOP data only if you turn that on; never Oura data). The question itself is not stored | A short written answer, with links to where each fact comes from. It is not medical advice |
- These requests go to our AI service provider, under terms that do not allow it to use your data to train its models. It may keep a request for a limited time for security and abuse checks, then deletes it.
- A lab report can show your name and other details printed on it. It is sent as it is, so the values can be read.
- ZENTT does not keep the photo or report file after it is read.
- The AI does not diagnose, give medical advice, or recommend treatment.
- Data from connected devices is not sent to any AI, with one exception you control: if you turn on “Let Ask ZENTT use my WHOOP data” in Connected devices, your WHOOP recovery, sleep, strain, heart-rate and workout data from the last 30 days is sent with your Ask ZENTT questions. It is off unless you turn it on, and you can turn it off at any time. Oura data is never sent to any AI.
- We do not use your data to train AI models.
6. Connected devices: WHOOP and Oura
Connecting a device is your choice, and you can undo it at any time. Connecting opens the device maker's own sign-in page; ZENTT never sees your WHOOP or Oura password.
| Device | What ZENTT reads |
|---|---|
| WHOOP | Recovery, heart rate variability, resting heart rate, sleep, day strain and calories, blood oxygen, skin temperature, breathing rate, workouts, and your WHOOP member ID |
| Oura | Readiness, sleep and sleep score, heart rate variability, resting heart rate, activity score, steps, calories, blood oxygen, temperature change, workouts |
- Read only. ZENTT never changes your data at WHOOP or Oura.
- When it updates: each time you open ZENTT. For WHOOP, also when WHOOP tells us new data is ready, even while ZENTT is closed.
- Shown as reported. Numbers appear as the device maker reports them, labelled with its name.
- Protected. The access keys the device maker gives us are encrypted before we store them.
- Not used for anything else. Device data is never sold, used for ads, or shared with anyone, and is not sent to AI except WHOOP data for Ask ZENTT when you turn that on (section 5).
- Disconnect in Profile → Connected devices. We revoke our access at the device maker and immediately delete all the data we stored from that device. You can also remove ZENTT's access from the WHOOP or Oura app. Deleting your ZENTT account deletes it too.
WHOOP's and Oura's own privacy policies apply to the data they hold.
7. Who we share information with
We do not sell your personal information, and we do not share it for advertising. We have no advertising partners and no data brokers.
| Recipient | What they receive | Why |
|---|---|---|
| Service providers that run ZENTT for us: database and hosting, server hosting, AI service, email delivery | What each needs to provide its service | To run the app. By contract they may use it only to provide their service to us. |
| Licensed food databases | Only the words you search for or a food ID, sent from our servers | To find food details. Never your name, email or health log. |
| WHOOP or Oura, if you connect them | Your authorization and our requests for your data | To sync your device |
| Apple App Store or Google Play | Purchase details, under their own policies | To handle subscriptions |
| People you choose | A care summary you print or share, or your data export | Because you asked. Once shared, the recipient's handling is outside our control. |
| Anyone who scans your emergency QR, if you turn it on | The emergency summary you chose: name, age, sex, blood type, allergies, current conditions, current medications and supplements, emergency contacts, last blood pressure, and anything else you added. Off by default; you can turn it off or replace the code at any time, and you see when it was viewed | So responders can help you in an emergency |
| Authorities, when the law requires | Only what the law or a court order requires | To comply with the law or protect someone's safety. We tell you unless the law prohibits it. |
| A buyer, if ZENTT is sold or merged | Your information, under this policy | The buyer must keep this policy's promises. We will tell you before your information becomes subject to a different policy. |
We never give your health information to your employer, insurers, or anyone else for their own use.
8. Where your information is stored and how we protect it
Your information is stored on servers in the United States. If you use ZENTT from Mexico or another country, your information is transferred to and stored in the United States.
- Encrypted in transit (HTTPS) and at rest.
- Device access keys are additionally encrypted (AES-256-GCM) with a key kept only on our servers.
- Database rules let each account read and change only its own records.
- Our staff access personal information only when needed to run ZENTT or to answer your request.
- Secret keys for our services stay on our servers and never reach the app.
- Your phone keeps a copy of some of your data so the app works quickly. Protect your phone with a screen lock.
No system is completely secure, but we work to protect your information and fix weaknesses quickly.
9. How long we keep it
We keep your information while your account is open and delete it when you delete it or close your account.
| Information | How long we keep it |
|---|---|
| Account, profile, logs, lab results, care records | Until you delete them or delete your account |
| Nutrient values from a licensed food database | Up to 24 hours on our servers. The food name, amount and daily totals stay; the app looks the values up again when needed. |
| Meal photos, label photos, lab report files | Not kept. Discarded once read. |
| Connected device data | Until you disconnect the device or delete your account |
| Everything, after you delete your account | Deleted within 30 days. Copies in backups are overwritten within 30 days. |
| Technical logs | A short time, up to 30 days |
| Feedback and support messages | As long as needed to resolve them, up to 2 years |
| Early-access list | Until you leave the list or ask us to remove you |
10. Your choices and rights
You control your information in the app, and you can ask us for anything the app does not do.
| You want to | How |
|---|---|
| See and download everything | Profile → Export your record. You get a copy of everything in one file. |
| Correct something | Edit it in the app |
| Delete something | Delete the entry in the app |
| Delete your account | Profile → Delete account. Everything is deleted within 30 days. |
| Stop a device syncing | Profile → Connected devices → Disconnect. Its data is deleted at once. |
| Withdraw consent | Delete the information, disconnect the device, or delete your account |
| Stop reminders | Turn them off in Profile or in your phone's settings |
| Stop news emails | Use the unsubscribe link in any email |
| Ask about or exercise any other right | Email hello@zenttapp.com with the subject "Privacy request" |
- We confirm your identity before acting, usually by replying to your account email. You may use an authorized agent where the law allows.
- We answer within 30 days, or sooner where the law requires.
- If we decline a request, you can appeal by replying "Appeal". We answer appeals within 45 days. If you are still not satisfied, you can contact your state attorney general.
- We never treat you differently for using your rights.
- Because we do not sell or share your information, browser opt-out signals such as Global Privacy Control are already honored.
11. U.S. state privacy and consumer health data laws
This section adds the details some U.S. states require. Everything above applies too.
Consumer Health Data Privacy Policy (Washington, Nevada, Connecticut)
This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), and Connecticut's consumer health data rules.
- Consumer health data we collect: the health information listed in section 2. That includes nutrition, exercise, body measurements, lab results, symptoms, medications and treatments, reproductive and hormone context, and data from connected devices.
- Sources: you, the devices you connect, and licensed food databases (food details only).
- Purpose: to provide the features you ask for (section 4). We collect it only with your consent.
- Who receives it: only the service providers in section 7 that run ZENTT for us, and WHOOP or Oura as part of a connection you choose. No third party receives it for its own use.
- Your rights: to confirm whether we hold your consumer health data and see it, with a list of everyone we shared it with; to delete it, including copies held by our service providers; to withdraw consent; and to appeal a refusal. Use section 10 to exercise them.
- We do not sell consumer health data, and we would never do so without your signed authorization.
- We do not use geofencing around health care locations.
California
- Categories collected in the last 12 months: identifiers (email, IP address), customer records, characteristics such as sex and age, commercial information (subscription status), internet or device activity (technical data), and sensitive personal information (health information and account login).
- We use sensitive personal information only to provide the services you request, as the law permits.
- We have not sold or shared personal information in the last 12 months.
- Your rights: to know, access, correct and delete your information, and not to be discriminated against for using these rights.
- We do not disclose personal information to others for their direct marketing.
Other states
Colorado, Virginia, Oregon, Texas and other states give similar rights to access, correct, delete and obtain a copy of your data, and to appeal. Health information is "sensitive data" under those laws, and we process it only with your consent.
FTC Health Breach Notification Rule
ZENTT is a personal health record service under this federal rule. We will notify you, the Federal Trade Commission and, where required, the media of a breach of your health information as the rule requires.
12. Mexico: privacy notice (Aviso de Privacidad)
This section is our privacy notice under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. A Spanish version is available and controls for users in Mexico.
- Responsible party: ZENTT, LLC, 8825 N 23rd Ave, Ste 100, Phoenix, AZ 85021, USA, hello@zenttapp.com.
- Personal data we process: identification and contact data (name, email), physical characteristics (height, weight), and sensitive personal data: health information (nutrition, exercise, lab results, conditions, medications, symptoms, reproductive health, device data).
- Express consent for sensitive data: we ask for your express electronic consent in the app before we process your health information.
- Primary purposes (needed to provide ZENTT): the uses in section 4.
- Secondary purposes: news emails about ZENTT, only if you joined the early-access list. You can refuse them, and refusing does not affect the service.
- Transfers: your data is stored in the United States by service providers that process it only on our behalf. We do not transfer it to third parties for their own use, except to authorities when the law requires it, or to WHOOP or Oura when you connect them.
- ARCO rights (access, rectification, cancellation and opposition) and revoking consent: email hello@zenttapp.com with your name, your account email, the right you want to exercise and a clear description of your request. A representative must include proof of representation. We answer within 20 business days and carry out an accepted request within 15 business days after that.
- Limiting use: unsubscribe from emails, disconnect devices, or delete your account.
- Cookies: our website uses no advertising or analytics cookies.
- Changes to this notice are published in the app and on our website.
- If you believe your rights were violated, you can file a complaint with Mexico's personal data protection authority.
13. Other important information
Adults only
ZENTT is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor is using ZENTT, contact us and we will delete their information.
Not medical advice
ZENTT is for general wellness and information. It does not diagnose, treat or prevent any condition, and it does not replace your doctor. Talk to a qualified professional about your health. In an emergency, call your local emergency number.
Not a HIPAA service
ZENTT is not a health care provider or health plan, so the U.S. HIPAA law generally does not apply to the information you give us. We protect it as this policy and state laws describe.
Security incidents
If a security incident affects your information, we will notify you and the authorities as the law requires, without unreasonable delay. We also notify WHOOP or Oura when their members' data is involved, as our agreements with them require.
Changes to this policy
We update the date at the top whenever this policy changes. We will tell you about important changes in the app or by email before they take effect, and we will ask for your consent again where the law requires it, such as for a new use of your health information.
Contact
ZENTT, LLC · 8825 N 23rd Ave, Ste 100, Phoenix, AZ 85021, USA · hello@zenttapp.com
For privacy requests, use the subject "Privacy request".