Privacy Notice

Version 2026-09-23-5b8758 · updated 23 September 2026

Personal accounts.

The short version

Zeami tracks how a computer is used so it can show you where your time goes. While tracking is on, it records the apps and windows in use, page titles and web addresses, how much you click and type (never which keys), periodic screenshots, and, if you leave it on, what you copy and paste. Passwords and other credentials are stripped on your device before anything is uploaded.

AI turns that activity into workflows, time totals and reports. We do not sell your data and we do not show ads.

Nothing is deleted on a timer. Your data stays until you delete it or close your account. You can pause tracking at any time, and you can delete everything whenever you choose.

The rest of this notice is the detail behind that summary.

Who we are

Zeami is made by Djoubi GmbH, a German limited liability company with its seat in Kleve, registered with the commercial register of the Amtsgericht Kleve under HRB 11864, business address Ilexweg 55, 50769 Cologne, Germany. For anything in this notice, write to support@zeami.io

Who this notice covers

There are two ways to have an account, and they are handled differently:

You created a personal account yourself. We decide how the data described here is handled, and this whole notice applies to you.
Your employer or another organization gave you access. That organization controls the tracked data. It decides what is collected, who sees it and how long it is kept, and we process it on that organization's instructions. The organization's own workplace monitoring notice governs, and requests about your tracked data go to them, not us. The parts of this notice about our role as a service provider (security, subprocessors) still describe how we handle the data on their behalf.

What the app collects while tracking is on

Tracking only runs after you start it, and never while it's stopped. On macOS it cannot start until you give Zeami permission to record the screen and to use accessibility and input monitoring, in System Settings. You grant those yourself, and tracking stops if you take any of them away. While tracking is on, the app records:

Apps and windows: application names, window titles, page titles and web addresses in your browser, with start/end times and your timezone.
Input activity: how many clicks and key presses happen, and scroll and mouse movement. Never which keys. Not the text you type.
Screenshots: periodic screenshots of the screen. We extract the text in them and create short AI summaries so your activity can be searched and classified.
Copy and paste: the text and images you copy or paste. This is on by default; you can turn it off at any time in Settings → Privacy.
On-screen element text: the visible text of the control or field you interact with, as reported by your operating system's accessibility layer.
Idle and presence: whether the device is active or idle, and a periodic signal that the app is running, with your OS and app version.
Browser profiles: for the browser profile the window you are using belongs to, its name and signed-in address, and the extensions installed in it. Profiles you are not using are not recorded.
Device and location: a device identifier, operating system and app version; basic device health such as processor, memory and battery use, whether the computer is running on battery, and whether the app is set to start on its own; and the city and country your connection appears to be in, worked out from your IP address. Your exact position is never worked out.

Screenshots and copy/paste capture can incidentally include whatever is on the screen or clipboard at that moment, messages, documents, anything visible. The stripping described below reduces what's kept, but it can't catch everything, especially inside images.

Chat features

Zeami has two AI-powered chat surfaces. Ask AI is a chat panel in the small status window on your screen. Chat channels let you continue a conversation in an outside app such as Telegram, and only appear when your organization's operators have turned that on. Both are AI, not a person, and are labeled as such.

Where your organization has turned them on, the assistant in a chat channel can also act for you in accounts you have connected, such as sending an email or updating a spreadsheet. It only reaches accounts you connect yourself, through that provider's own sign-in, and only within the access you grant. Those connections are handled by our integration provider, Composio.

Meeting notes

Meeting notes records the audio of a call and turns it into a transcript and a short summary. It never starts on its own. You ask for it on the call you want noted, and the app tells you what it will do before it begins. While it runs, the app shows that it is running, and it stops when you stop it or when the call ends. This is the only part of Zeami that uses your microphone. The audio, the transcript and the summary are yours to delete at any time, and they are kept and deleted on the same terms as everything else in this notice.

What we collect about your account

Your name, email address, password (stored only as a hash), timezone and plan status. We do not take card payments for personal accounts, so we do not collect card numbers or billing details. If you write to support, we keep that conversation.

Plans and billing

Personal accounts are free to use today. There is no paid plan for them, we do not collect a payment method, and no payment processor is connected, so nothing in the product can charge you for a personal account. Free access is part of an early phase and is not permanent. If we introduce paid plans, we will tell you at least 7 days beforehand and explain what it means for existing free accounts, which may include needing a paid plan to carry on using Zeami. We will never charge you without you first choosing a plan and agreeing to its price. Organizations that buy Zeami for their staff are billed under their own agreement with us, on terms agreed with them; this notice does not cover that.

What is removed on your device before upload

Credentials are always stripped: passwords, access tokens, API keys and similar secrets found in web addresses, window titles, on-screen text or the clipboard.

Email addresses, phone numbers, card numbers and IP addresses are also stripped from those fields. This runs on your computer before anything is stored or uploaded, and it is on by default. You can turn it off in Settings, Privacy, and we ask you to confirm first, because turning it off keeps more detail than the default does, including detail about the people you contact. Passwords and other credentials are stripped either way, and that cannot be turned off.

What we never collect

The keys you type (this is not a keylogger), your camera, and anything while tracking is paused or while an app, site or keyword on your Privacy Lists is in the foreground. Tracking itself never uses your microphone. Meeting notes is the only feature that does, and only while you have it running, as described above.

Capture also pauses automatically, with nothing for you to set up, over common password manager apps (1Password, Bitwarden, KeePass, LastPass, Dashlane, NordPass, Enpass, RoboForm, Proton Pass, Keeper), two-factor code apps, and the Mac Keychain. This auto-pause is specific to password managers, and it does not extend to banking or other sensitive apps by default. If you want those excluded too, add them yourself to your Privacy Lists below.

Privacy Lists

In Settings, you can list apps, website addresses and keywords you never want captured, up to 200 of each. Once set, your lists follow you to your other computers, so you only need to set them up once.

How we use the data

To show you your own time, app usage, work patterns, workflows and reports.
AI analysis: to classify activity into workflows and estimate time and cost, and to power Ask AI and chat channels. See "AI processing" below.
To keep the service working and secure: sync, troubleshooting, abuse prevention, and crash reports.
To improve the product, using de-identified operational and AI-quality data. For example, we check whether the AI's classifications are accurate, using records with personal details stripped out first. This is on by default. We do not run aggregate analytics over your tracked work content itself.
To message you about the service: security notices and product changes. Marketing email only with an unsubscribe link.

We do not sell or rent personal data, we do not share it for advertising, and we do not use your identifiable data to train our own AI models.

AI processing

The workflow names, groupings, summaries, and time and cost estimates in Zeami are generated by AI. They are estimates and they can be wrong, even when they look precise. The app labels AI-generated content where it appears.

To produce them, your activity data is processed by Google (Gemini) under contract with us. Google does not use it to train its own models.

We keep copies of AI requests and responses to debug quality problems. Nothing here deletes them on a timer; see "How long we keep it" below. The Ask AI chat panel keeps your last 50 exchanges visible in the panel, which is a limit on what is shown rather than on what is stored.

Who we share data with

Only with service providers that help us run Zeami, under contracts that limit what they can do with it:

DigitalOcean Spaces - Storage and hosting. Screenshots and activity data.
Google (Gemini) - AI processing. Activity data sent for classification, summaries, embeddings, chat, web search and meeting transcription.
Composio - Integrations you connect, where you enable them. Connection tokens and the data those integrations handle.
Resend - Email delivery. Your email address and message content.
Sentry - Crash reporting. Error reports, scrubbed of personal data.
Telegram, WhatsApp, Slack - Messaging channels you or your organization choose to connect. Messages exchanged through them governed by that platform's own terms.

We also disclose data if the law requires it (we'll tell you unless we're not allowed to), and as part of a merger or sale of the business, in which case this notice still applies to the data.

How long we keep it

We keep your data for as long as you keep your account. Nothing is deleted on a timer. That is true of every category described in this notice, including screenshots, activity events, meeting recordings and notes, and AI request and response logs.

You can delete your tracked data yourself at any time in the app, and it is removed from live systems right away. When you ask us to delete something instead, or you close your account, we remove it from live systems within 30 days. Either way copies can remain in our backups for a further 30 days, after which they expire on their own. This is the same for everything we hold, including meeting recordings and notes. We use backups only to restore the service, and if we ever restore one we re-apply any deletion made since. To close the account altogether, write to support@zeami.io from the address on the account, and we will confirm when it is done. Deleting the account removes everything, including account records, except what we must keep for tax and accounting.

Security

Data moves over encrypted connections. On your own computer, Zeami keeps recent activity in a local database until it syncs; your sign-in tokens and settings cache are encrypted there, the activity database is not. On our side, screenshots and activity data are held in access-controlled storage in Frankfurt, Germany, and credentials and connection tokens are encrypted. Backups are encrypted and kept separately from the live systems. Access inside the company is limited to people who need it to run the service. No system is completely secure; if a breach affects your data, we will inform you and the authorities as the law requires.

Your controls and rights

In the app, at any time: pause or stop tracking, add apps, sites and keywords to your Privacy Lists so they are never captured, turn copy and paste capture off, turn off the stripping of emails, phone numbers, card numbers and IP addresses, and delete your tracked data.

We do not currently act on browser-level opt-out signals such as Global Privacy Control or Do Not Track.

Whatever your region, you can ask us to access, correct or delete your data, or object to how we handle it, by writing to support@zeami.io or through the app.

Children

Zeami is not directed at children. You must be at least 18 to create a personal account. If we learn that we hold data belonging to someone under 18, we delete it.

Changes to this notice

We will post changes here with a new date and version. If a change meaningfully reduces your rights or expands what we collect, we'll tell you in the app or by email before it takes effect.

Contact

Zeami · support@zeami.io