Privacy notice

Zenith is built so that as little as possible leaves your phone. This page lists everything this website and its server store, why, and for how long.

What never leaves your phone

• Your Pokémon Trainer Club and Google passwords. The app uses them on the phone to sign in to the game and never sends them to us or anyone else.
• Game sign-in tokens, your game data, run history and logs, unless you choose to send something.
• Your photos, files, messages and contacts. The app does not read them.

What we store when you create an account

• Email address, to sign you in and send sign-in codes, password resets and important account messages.
• Password, stored only as a salted hash by our sign-in provider. Nobody, including us, can read it.
• Subscriptions and trials: product, status, start and end dates, and each one's license key.
• Phones you sign in on: the model, the Android version, the Zenith app version, when it was last seen, and a public key the app creates on the phone so a subscription stays on one phone. No phone number, IMEI or advertising ID.
• A log of changes to your account (for example a removed phone, an extended trial or a deleted account), to resolve disputes and abuse. It records your user id and what changed, not your email.

Only if you turn them on

• Cloud Storage: the Pokémon list of the game accounts you choose to sync (species, stats, catch details) and the trainer names, so you can browse them here. Turning it off and deleting removes them.
• Share links: a link shows only what you chose. Usernames are never shown; trainer names and catch places only if you turn them on.

Cookies and tracking

No trackers, no analytics, no advertising. When you sign in, your browser keeps the sign-in session in its local storage so you stay signed in; signing out removes it.

Who processes the data

• Supabase: database and sign-in.
• Cloudflare: hosting this website, and file storage for Cloud Storage.
• Resend: delivering our emails.

How long we keep it

As long as your account exists. Deleting your account on the account page removes your profile, subscriptions, phones, Cloud Storage and share links right away. Kept afterwards, so free trials cannot be repeated: a record that a trial was used, with a one-way hash of your email address (it cannot be turned back into the address, only matched if the same address signs up again) and, from the app, of the phone. The change log rows stay too; they hold only your user id. Encrypted database backups are kept for 30 days, so deleted data is gone from them within 30 days.

Your choices

You can see and change your details on the account page, remove phones, and delete the account at any time. For a copy of your data or any question, write to support@pogozenith.com.