What we collect, why, how it's stored, and your rights — for the ZEME AI website and mobile app.
ZEME AI ("we", "us") provides PSX stock analysis, smart-money-phase tracking, and market signals. This page explains exactly what personal data we collect, why, and what you can do about it. We've written this to describe what the platform actually does — not a generic template.
| Field | Required? | Why we collect it |
|---|---|---|
| Name | Yes | To personalize your account and address you correctly |
| Email address | Yes | Login identifier, account recovery, service communications |
| Phone number | Yes | Account contact and support |
| Password | Yes | Stored as a bcrypt hash — we never store or can see your plain-text password |
| City, country, gender, age range | No | Optional demographic fields, used only in aggregate to understand our user base |
If you sign in with Google instead, we receive your name, email, and profile picture from Google — we don't receive your Google password.
We track basic usage so we can see which features are actually used and fix what's broken. This includes: a session identifier (randomly generated, stored only in your browser), which pages you view, which links/buttons you click, the page that referred you, your device type (mobile/desktop), and how long you spend on a page. If you're logged in, these events are linked to your account; if not, they're anonymous except for a hashed version of your IP address (we hash it with a one-way function before storing it — we do not store your raw IP address).
We do not sell your personal data to anyone, for any reason. We do not share it with advertisers. The only third parties involved are:
We may disclose data if legally required to do so by a Pakistani court or regulatory authority.
Account data is kept for as long as your account is active. Analytics events are retained to build historical usage trends; we may periodically aggregate or delete old raw event-level data.
Passwords are hashed with bcrypt before storage — we never store plain-text passwords. Login sessions use signed JWT tokens with a 30-day expiry. IP addresses used for analytics are one-way hashed, not stored in raw form.
ZEME AI is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has registered an account, contact us and we will remove it.
The ZEME AI Android app requires only internet access to load market data. It does not request access to your contacts, location, camera, microphone, storage, or any other device permission beyond what's needed to display the app.
If we materially change how we collect or use data, we'll update this page and revise the "Last updated" date above.
Questions about this policy or your data: support@zeme.app
See also our Disclaimer & Terms of Use for the trading-risk and liability terms that apply separately from this privacy policy.