Zero-in / The details

Privacy policy

Effective 30 September 2026.

Zero-in (https://mohib.wiki) is run by Zero-In Workspace, based in Pakistan. This policy explains what Zero-in collects, why, and who processes it. For any privacy question or request, email mohibk0004@gmail.com.

What you provide

• Account details, such as your name, email address, and sign-in information. Passwords created with Zero-in are stored as hashes, not plain text.
• Study preferences, topics, uploaded material, saved study sets, and questions you send to the tutor.
• An optional AI provider key, if you choose to use your own.

How your material is used

We use your material only to provide Zero-in: to extract text, generate study material, answer your questions, and save sets you ask us to save. We don't sell your data or use it for advertising.

Files are sent to the server for text extraction. Relevant text, your topic, study preferences, and chat context are sent to an AI provider to prepare a response: Google Gemini by default, or OpenAI, Anthropic, or Groq depending on your settings and fallbacks. Provider processing and retention are subject to that provider's terms.

Using your own key does not keep requests on your device. The key passes through the Zero-in server to make provider requests. The app excludes it from its persisted browser session, but it remains available in memory during your session.

Services that process your data

• Vercel hosts the app and processes requests.
• Supabase stores the database: accounts, saved study sets, and usage counts.
• Upstash stores short-lived rate-limit counters.
• Resend sends verification and password-reset emails.
• Google and GitHub share the account details needed to sign you in, if you use them to sign in.
• Cloudflare Turnstile checks sign-ups and guest trials for bots.
• The AI providers listed above generate study material and answers.

These services may process data outside Pakistan.

Abuse prevention and usage limits

To keep free and guest allowances fair, we record usage counts (for example, how many AI generations an account or guest session used) with a salted, one-way hash of your network address: the IPv4 address or the first half of an IPv6 address. We don't store the address itself, and the hash can't be reversed into it. Requests may also include IP addresses and technical information that our hosting provider logs for security and troubleshooting.

Sign-up and guest trials use Cloudflare Turnstile to tell people from bots. Cloudflare processes browser and device signals for that check under its own privacy policy. We receive only a pass or fail result.

Cookies and browser storage

Sign-in, guest mode (including a signed guest ID used to count the guest trial), and onboarding use cookies. Browser storage remembers your theme, study preferences, provider selection, and local study sets. We don't use advertising or tracking cookies.

You can remove local data through your browser settings. Clearing browser data does not delete saved account records or material already processed by a provider.

How long we keep data

We keep your account and saved study sets until you ask us to delete them. Deleting a study set in the app erases it from our database straight away (backups held by our database provider expire on their own schedule). Usage counts are kept only as long as they're needed for limits and abuse prevention.

Your choices and rights

You can ask to see, correct, export, or delete your data, or to close your account, by emailing mohibk0004@gmail.com from the address you signed up with. We'll respond within 30 days.

Do not upload material you are not allowed to share. Avoid including sensitive personal information that is not needed for studying. Zero-in is not meant for children under 13.

Changes

We may update this policy as Zero-in changes. We'll change the effective date above, and for significant changes we'll give notice in the app or by email.

See the Terms & Conditions for how to use Zero-in.