Privacy policy – Zefaf AI

This policy explains how the Zefaf AI – Wedding Planner app and this website handle your data. We wrote it in plain words; if a question is left, write to [email protected].

In short

Zefaf has no ads, we don’t sell your data, and we don’t track you in the app or on this website.
Zefaf AI works only after you agree, and you can withdraw that consent at any time.
We send AI providers only what a feature needs, and every request requires that they keep none of it.
You can export your data or delete your account from inside the app.

Who we are

Zefaf and this website are run by To confirm: the company’s registered legal name (ASSALA AISTUDIO LTD), its country of registration and its address, and we are responsible for your data in Zefaf. For anything about privacy, write to [email protected].

What we keep

Your account

The way you sign in (Apple, Google or a code sent to your email), your email address and your account ID.
Your profile: display name, the photo or portrait you chose, the companion you chose, your language and your notification settings.
Your consent to the AI features, and when you gave or withdrew it.

Your wedding

What you enter when you start the plan: country, city, currency, time zone, wedding date, celebrations and budget, the style and traditions you chose, and a rough guest count. To confirm: whether the chosen traditions count as sensitive data under some laws, and what that requires
Your celebrations: their names, dates and times.
The budget, expenses, payments and the state of each payment, the reminders, and a record of what was added, paid or deleted and by whom.
Wedding members and invitations: who you invited, their side, and the celebrations they can see.

Vendor quotes

The files you upload (PDF or photos), the text read from them, the proposals, and the questions Zefaf AI asked with your answers.

Zefaf AI

Your chats with it, and the images you ask it for.
A record of AI use: the kind and cost of each request, without its content.
Any report you send about one of its replies.
For each voice conversation with Zefaf AI: its language, when it started and ended, its length and its cost. We keep no audio and no transcript of a call. These records are in your data export and are deleted with your account. To confirm: voice (migration 028) is written but not live yet.

Guests

To confirm: guest lists (migration 027) are written but not live yet.

The guests you or your family add to a celebration: their name, an optional phone number, their side, how many they are and their household.
Each guest’s reply link, of which we keep only a fingerprint, and their reply: yes, no or maybe, and how many.
Phone numbers are erased 90 days after the wedding’s last celebration.
A guest who opens their link sees only their own name and the celebration’s date, time and place.

Devices and notifications

Your device’s notification token and language, so we can send it reminders.
A record of the notifications sent and whether they arrived.
Your in-app notifications, kept for up to 120 days. To confirm: in-app notifications (migration 026) are written but not live yet.

Purchases

The pass or plan you hold and when it ends, as the store reports it to us through RevenueCat. We never see your card details; all payment happens at Apple or Google.

Support

The messages you send to our support address, and our replies.

This website

This website sets no cookies and runs no analytics or tracking tools, and its fonts are served from our own server.
If you pick the light or dark theme, your choice is stored in your browser only and never reaches us.
Your visit passes through Cloudflare, which processes your IP address and connection data to deliver and protect the pages. The website’s own server does not log visitors’ addresses.

Why we use it

To provide the app: saving your plan and keeping it in sync across your devices and with the people you invite.
For Zefaf AI features: reading quotes, chat and images, with your explicit consent.
For reminders: a notification before payments and celebrations, as your settings allow.
For purchases: knowing what you bought and giving you access to it.
For support and security: answering you, preventing abuse, and keeping backups.
For legal obligations, where the law requires them.

To confirm: the legal basis for each purpose under Saudi Arabia’s Personal Data Protection Law, the EU General Data Protection Regulation (GDPR) and the laws of the other countries where the app is offered.

Zefaf AI and artificial intelligence

Zefaf AI features are for the plan owner only, after they agree in the app, and with an active pass or plan.
Withdraw your consent from “My account”, then “AI consent”. After that, no new request is sent.
What is sent: in chat, your message and what it needs from your plan, such as the celebrations and amounts; when a quote is read, its pages; when an image is made, your request.
Each request goes through OpenRouter to one model provider: Google, OpenAI or Anthropic. Every request requires that it go only to a provider that keeps no data (Zero Data Retention) and collects none.
When voice is available, it is for the plan owner only, after a separate consent for voice in the app, and it uses your microphone. Your voice is sent to ElevenLabs to turn it into text and to speak the replies, and the text is sent to the AI model provider through OpenRouter, as above. With it, our server adds your wedding’s context: the country, the currency, the language, the kinds and dates of your celebrations, and which side is speaking. The app gives ElevenLabs no name, email, account ID or wedding details. The call’s audio is not recorded, ElevenLabs deletes its transcript automatically after the call, and we keep neither. When a call ends, ElevenLabs sends our server a notice that carries the transcript: we read only the call’s ID and length, and we store and log none of its text. To confirm: whether ElevenLabs’ zero retention mode is available on Zefaf’s plan.
Zefaf AI never changes your plan on its own: every proposal waits for your approval.
AI can be wrong, so check each proposal before you approve it, and report any unsuitable reply from inside the chat.

Who processes data with us

We use these services to run Zefaf, and they process your data only to provide their service to us:

OpenRouter and the model providers it reaches (Google, OpenAI and Anthropic): Zefaf AI features.
ElevenLabs: voice conversations with Zefaf AI, once voice is available. It receives the call’s audio, to turn it into text, and the text of the replies it speaks; the app gives it no name, email, account ID or wedding details.
RevenueCat: recording purchases and subscriptions from the App Store and Google Play. It receives your Zefaf account ID and your purchase record.
Expo, and through it Apple and Google: delivering notifications to your device. It receives the notification token and the notification’s text, which is generic and names no amount and no vendor.
Cloudflare: the connection between your devices and our server, and its protection. It processes your IP address and request data.
Contabo: the server that holds the database, the files and the backups. To confirm: the country where the server is, and where the backups are kept.
Apple and Google: signing in, and the two stores where purchases happen.
Google Workspace: our support email.
To confirm: the email service that will send sign-in codes, once it is chosen.

We don’t sell your data to anyone, and we don’t share it for advertising.

Inside one wedding

Zefaf is shared, so some of your data is seen by the people you invite:

Members of the same wedding see each other’s display names, pictures and chosen companions.
Your partner sees the whole plan. Each family member sees only the celebrations shared with them, and their amounts only if given that access.
The activity record shows who added, paid or deleted something.
Your chats with Zefaf AI and the images it made for you are private to you. The total AI use and its cost are visible to your partner, without any content.

Where data is kept, and for how long

Your data is kept on our server at Contabo for as long as your account exists.
Some of the services above process data outside your country, including in the United States. To confirm: the legal safeguards for these transfers.
When an account is deleted, data is erased as described on the Delete account page.
We make a backup every day, and each backup is deleted after 30 days at most, so deleted data can remain in a backup until it expires.
A file whose upload never finished is deleted after a day.

Your rights and choices

Access and a copy: “My account”, then “Export my data”, gives you one file with everything you can see in Zefaf.
Correction: edit your data inside the app, or write to us.
Deletion: inside the app or by writing to us, as on the Delete account page. You can also delete a single chat, expense or payment without deleting your account.
Withdrawing consent: for AI from “My account”; for notifications from “My account”, then “Notifications”, or in your device settings.
Objections and complaints: write to us first. You can also complain to the data protection authority where you live.
Guests: anyone on a guest list can ask us to remove their details by writing to [email protected].

Children

Zefaf is meant for adults planning a wedding. It is not directed at children, and we don’t knowingly collect data from anyone under 13. To confirm: the minimum age in the terms of use.

Security

Your data travels encrypted over HTTPS.
The database checks every request against your role in the wedding, so no one sees a wedding they are not a member of.
The app holds no key that could get around these permissions.
No amounts and no vendor names appear on the lock screen.

Changes

We keep every version of this policy by date. If something important changes, we will say so here and in the app before it takes effect.

Contact

[email protected]