Privacy Policy
This policy explains how Zallixor collects, uses, shares, and protects your information across the app's social, messaging, marketplace, creator, live, payment, and AI features. It's written to be read alongside our Terms & Conditions.
1. Scope of this policy
This Privacy Policy applies to everyone who uses Zallixor, anywhere in the world — the app, its web version, and any related services we operate. It covers information we collect directly from you, information generated by your activity on the platform, and information we receive from third-party service providers that help us run Zallixor (such as cloud hosting, media storage, authentication, analytics, and payment-support providers). Zallixor™ is operated by Zallixor Team, based in Nigeria, and is available globally.
It does not cover the practices of unrelated third-party websites or services you may reach through links shared on Zallixor. We encourage you to review the privacy practices of any third-party service before providing it with information.
2. Information we collect
2.1 Account and profile information
- Email address and authentication details used to create and secure your account.
- Display name, username, profile photo, bio, and other profile fields you choose to add.
- Date of birth, collected to confirm you meet the age requirements for general use and for money-related features.
- If you sign up using a third-party sign-in option, we receive the basic profile information that option shares with us (typically your name, email, and profile photo).
2.2 Content you create
Posts, Zall Clips, Stories, comments, poll votes, reactions, direct and group messages, voice notes, photos and videos, communities and pages you create, hashtags in your text, live-stream broadcasts, and Marketplace listings.
2.3 Usage and device information
- Log data such as app version, device type, operating system, crash reports, and general performance data.
- Interaction data such as which features you use, screens you visit, and content you engage with, used to keep the app fast and to improve it.
- This category of data is processed with the help of third-party analytics service providers acting on our behalf.
2.4 Marketplace and monetization information
If you buy or sell on the Zallixor Marketplace, apply for creator monetization, or request a withdrawal, we collect the information reasonably necessary to process and verify those transactions — including order details, payout requests, and the identity/age-verification information described in section 44 of our Terms.
2.5 Communications with us
When you contact support, report content, submit an appeal, or send a copyright notice, we keep a record of that communication and any information you provide in it.
2.6 Activity, and how your feed is personalised
We record follows, friends, blocks, saved posts, drafts, your daily streak, and points. We also build an interest profile from your activity — which posts you open, like, save, or watch, and the topics and hashtags attached to them — stored with your account and used to order your home feed and suggestions. This is profiling as defined under EU and UK data-protection law, so we name it plainly here. It only decides what order content is shown in; it does not produce any decision with a legal or similarly significant effect, and it is not used to set prices, restrict features, or determine your eligibility for anything. You can object to it — see section 13.
3. How we use information
- To create, secure, and maintain your account, and to authenticate sign-ins.
- To operate core features: your feed, messaging, stories, reels, live streaming, search, and discovery.
- To operate paid features: coin purchases, gifting, marketplace transactions, creator monetization, and withdrawals.
- To detect and prevent fraud, abuse, spam, and security threats, including account takeovers and payment fraud.
- To enforce our Terms & Conditions and Community Guidelines, including reviewing reports and appeals.
- To send you service-related notices, security alerts, transaction confirmations, and — where you've allowed it — product and engagement notifications.
- To measure and improve app performance, stability, and features.
- To comply with legal obligations, respond to lawful requests, and enforce age and eligibility requirements.
4. Our AI assistant
Zallixor includes a built-in assistant (the Zallixor Assistant). Its maths, writing, and study features run locally on your device — those requests are not sent to any external AI provider and are not stored on our servers. It is not a hosted AI model, and it only ever sees what is already public on Zallixor. If you message the Assistant inside a chat thread, that thread is stored the same way as any other chat, as described in section 6.
AI responses may still be inaccurate, incomplete, or unsuitable for a particular purpose. You are responsible for reviewing any AI-generated material before relying on or publishing it. AI output is not professional legal, medical, financial, or other specialist advice. AI features must not be used for unlawful, harmful, abusive, fraudulent, or rights-infringing purposes. See section 6 of our Terms.
5A. Sponsored content and ads
Zallixor shows sponsored content in your feed. This includes posts and clips that people have boosted, ads created in Zallixor Ads and Zallixor Business, and product or store suggestions from Zallixor Mart. Every sponsored card is marked Sponsored before the content.
Sponsored cards are loaded from Zallixor's own advertising systems. Showing you one does not give the advertiser your name, email address, or other personal information, and we don't sell your personal information. If you interact with a sponsored card, for example by opening an advertiser's page or a Mart listing, the destination's own policies apply once you leave Zallixor. If you create or buy ads, boosts, or Mart orders, we process the account, order, and payment information described in sections 2.4 and 8.
7. Push notifications
If you enable push notifications, we use a third-party push-notification service provider to deliver alerts for things like likes, comments, follows, messages, and security alerts. You can turn each notification type on or off individually in Settings → Notifications, and you can disable push notifications entirely at the device level at any time.
8. Payments and financial data
Coin top-ups, verification purchases, and certain other paid features may currently be processed manually or through third-party payment-support channels, as described in section 24 of our Terms. When you make a manual payment, you provide a payment reference so it can be matched and verified — we do not ask for or store full card numbers through this process.
Marketplace and creator withdrawal requests require the payout details necessary to send funds (such as a bank account name and number), which are used solely to process that payout and are handled under the same security standards as the rest of your account data.
7A. SIGN-IN RECORDS AND APPROXIMATE LOCATION
To help you notice a sign-in that isn't yours, we keep a record of the devices signed in to your account. Each record includes the device it was made from (for example the phone model reported by the device, or the browser and operating system), the app used, your language setting, and when it was last active. You can see this list, and remove a device from it, in the app.
We also record an approximate location for each sign-in. This is worked out on our servers from the network address your device connects through, not from your device's GPS or precise location. We do not ask for, collect, or store precise location for this purpose. The result is typically accurate only to a city or country, and is often the location of your mobile carrier's or internet provider's network rather than where you actually are. It is shown to you labelled as approximate, and is never used on its own to lock or restrict an account.
We do not retain your full network address for this purpose. It is used to carry out the location lookup and is then reduced to a shortened form that identifies the network rather than an individual connection.
To perform the lookup we send the network address to a third-party network-location provider acting on our behalf. That provider receives the address and returns location information; it does not receive your name, account, or message content.
These records are kept for as long as the associated device remains signed in, and are removed when you remove the device or delete your account, unless a longer period is required to investigate abuse or to meet a legal obligation. Because these records show where and when your account has been used, they form part of the information that may be disclosed in response to a valid legal request, as described elsewhere in this policy.
8A. AUTOMATED PAYMENTS THROUGH A PAYMENT PROVIDER
Where a purchase is processed automatically rather than manually, it is handled by an authorized third-party payment provider acting as an independent controller of the payment data it collects. To start a payment we share with that provider the information needed to process it, which includes your email address, the amount and currency, and a reference identifying the purchase.
Card details are entered on and handled by the payment provider, not by Zallixor. We do not receive or store your full card number, expiry date, or security code. For automatically renewing subscriptions the provider stores a token that allows it to charge the same payment method again; that token is held by the provider, and Zallixor holds only a reference to the subscription so it can be shown to you and cancelled on request.
The provider returns to us confirmation of whether a payment succeeded, the amount, a transaction reference and, where applicable, the subscription status. We keep those records for accounting, fraud-prevention, dispute-handling, and legal-retention purposes. Your use of the payment provider's service is also subject to that provider's own privacy policy.
9. Location information
If you choose to add a location to a post, we store the coordinates (latitude and longitude) and the place label with that post. This happens only when you tap to add a location — Zallixor does not track your location in the background and does not collect location when you are not posting. Where consent is required, this is consent-based, and you can withdraw it by not attaching locations and by deleting past ones.
10. How long we keep data
We keep information for as long as it's needed for the purposes described in this policy:
- Account information: while your account exists.
- Posts, clips and messages: until you delete them, or until your account is deleted.
- Stories: 24 hours, then removed from view.
- Your interest profile (section 3, feed personalisation): while your account exists; cleared if you delete your account or object to personalisation.
- Transaction and payment records: retained longer where financial or legal record-keeping requires it, even after account deletion.
- Moderation and safety records: retained as long as needed for safety and to handle repeat abuse.
Some deleted content may remain temporarily in backups for a limited period before being overwritten, as described in section 30 of our Terms.
11. Data security
We use reasonable administrative, technical, and organizational safeguards — including encrypted connections, access controls, and monitoring — to help protect your information. No method of transmission or storage is 100% secure, and we can't guarantee absolute security. If you believe your account has been compromised, contact us immediately (see Contact & Support).
12. Children and age requirements
Zallixor is not intended for anyone under 13, anywhere in the world, and we do not knowingly collect information from anyone under 13. In parts of the European Economic Area the digital age of consent is higher than 13 — it ranges from 13 to 16 depending on the country — and users below their national threshold need a parent or guardian's consent.
Users under 18 additionally cannot access money-related or commercial features — buying or holding Zallixor Coins, sending or receiving paid gifts, creator earnings and withdrawals, Marketplace selling, and paid advertising — regardless of parental permission for the account itself. See section 2 of our Terms. If you believe a child under 13 has an account, email privacy@zallixor.com and we will remove it.
13. Your rights and choices
Zallixor does not make decisions about you that produce legal or similarly significant effects based solely on automated processing. Feed ranking (section 2.6) orders content — it doesn't decide anything about your account, your money, or your access to features, and moderation decisions that restrict an account are reviewed by a person.
13.1 European Economic Area and United Kingdom
You have the right to access your data and receive a copy; rectify inaccurate data; erase your data ("right to be forgotten"), subject to the retention rules in section 10; restrict processing in certain circumstances; data portability; object to processing based on legitimate interests, including feed personalisation; withdraw consent at any time where processing is consent-based; and lodge a complaint with your supervisory authority — the ICO (ico.org.uk) in the UK, or your national authority via the EDPB (edpb.europa.eu) in the EEA. We don't charge for these requests and aim to respond within one month, as the GDPR requires.
13.2 California and other US states
If you live in California, and in substance if you live in Virginia, Colorado, Connecticut, Utah, Texas or another state with a comparable law, you have the right to know what we collect and why, access specific pieces of personal information, delete it (subject to section 10), correct it, opt out of sale/sharing and targeted advertising (we don't do either, so we honour Global Privacy Control signals regardless), limit use of sensitive personal information, and non-discrimination for exercising any of these rights.
13.3 Nigeria, Brazil, Canada, and everywhere else
Under the Nigeria Data Protection Act 2023 you may complain to the NDPC (ndpc.gov.ng); under Brazil's LGPD you may complain to the ANPD (gov.br/anpd); under Canada's PIPEDA you may complain to the OPC (priv.gc.ca). Wherever you live, we apply the rights above as a baseline, whether or not your local law requires it.
13.4 Your controls in the app
- Who can see my profile, message me, or send friend requests — Settings → Privacy
- Active/online status and read receipts — Settings → Privacy
- Blocked users — Settings → Blocked users
- Active sessions — Settings → Security
- Download my data / clear cached data on this device — Settings → Your data
- Delete my account — Settings → Account actions (step-by-step guide)
To exercise any right not available directly in-app, contact us using the details in Contact & Support or email privacy@zallixor.com. We may need to verify your identity before acting on a request.
14. International data transfers
Zallixor is operated from Nigeria and uses third-party cloud infrastructure that stores and processes data in several countries, including the United States and the European Union. Your information may therefore be transferred outside the country you live in, including to countries that may not provide the same level of protection as your own.
Where we transfer personal information out of the EEA or the UK, we rely on the safeguards our providers offer — principally the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with technical measures such as encryption in transit. You can request more detail at privacy@zallixor.com.
15. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we'll update the effective date above and, where appropriate, provide notice through the app or another reasonable channel. Where your local law requires fresh consent for a change, we will ask for it. Continued use of Zallixor after a change takes effect constitutes acceptance of the updated policy, to the extent permitted by applicable law.
16. Contact us
Questions about this policy, or requests relating to your personal information, can be sent through our official channels — see Contact & Support — or directly by email:
- Privacy and data requests: privacy@zallixor.com
- General support: support@zallixor.com
- Verification and billing: billing@zallixor.com
Zallixor operates in Nigeria and is built by Zallixor Team™, the team behind Zallixor, Zallixor Mind, and Lopaostab (zallixor.com).