Last updated August 31, 2026
This privacy notice describes how IceWhale Technology Limited (“Company,” “we,” “us,” or “our”) processes your information when you use ZimaOS and related services.
If you have questions or do not agree with these practices, please discontinue use and contact us at support@icewhale.org.
The general statements in this policy apply to core ZimaOS features. Integration-specific sections apply when you enable those integrations.
At a Glance
| Privacy Aspect | Our Commitment |
|---|---|
| Personal data collection | We do not collect, store, or analyze your personal information |
| Sensitive information | We do not process any sensitive personal data |
| Data storage | We do not store any of your data in any form |
| Data sharing / selling | We do not sell user data or engage in any data-brokering activity |
| Information we receive | Device information and encrypted data — used only to deliver services |
What Information Does ZimaOS Collect?
We only receive your device information and encrypted data to provide Services. We do not collect, store, use, or analyze your personal information or data.
The following table outlines common data categories and whether we collect them:
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Name, alias, postal address, phone number, IP address, email, account name | No |
| Personal records (California statute) | Name, contact info, education, employment, financial info | No |
| Protected characteristics | Gender, date of birth | No |
| Commercial information | Transactions, purchase history, payment details | No |
| Biometric information | Fingerprints, voiceprints | No |
| Internet / network activity | Browsing history, search history, online behavior, interactions | No |
| Geolocation data | Device location | No |
| Audio, visual, or similar | Images, recordings, video/audio calls | No |
| Professional / employment | Job title, work history, professional qualifications | No |
| Education information | Student records, directory info | No |
| Inferences from other data | User profiles, preference summaries | No |
| Sensitive personal information | — | No |
Google API Services
This section applies only when you choose to connect a Google service to Zima Agent.
Gmail
With your authorization, Zima uses the minimum required gmail.modify permission to search and read relevant emails and attachments, provide requested writing assistance, and create or update drafts. Gmail data is accessed only when you request these features and is not used for unrelated purposes.
Gmail messages, metadata, and attachments are processed on your Zima device or self-managed NAS and do not pass through or get stored on IceWhale-operated servers. IceWhale servers only facilitate Google OAuth authorization and token refresh.
When you request AI assistance, necessary Gmail content may be sent directly from your device to the configured OpenAI API, without passing through IceWhale servers. It is not used to train or improve generalized AI models.
OAuth credentials and Gmail content saved in conversations, attachments, or workspace files remain on your device. Credentials are retained until you disconnect Gmail, reset the application, or uninstall Zima Agent. You can delete local Gmail data by deleting the related conversations, files, or application data. Disconnecting Gmail does not delete messages in Gmail or copies already saved to your device or backups.
We do not sell Google user data or share it for advertising. Human access is limited to support you request, security investigations, or legal requirements. Our use of Google data follows the Google API Services User Data Policy, including the Limited Use requirements.
How Do We Keep Your Information Safe?
We don’t store your data, unlike others. Your data security and privacy are our top priorities — we never store any of your information.
Unlike many internet companies that collect and analyze vast amounts of user data, we operate on a fundamentally different principle: transparency and respect for your privacy. We do not collect, save, use, or analyze your identifiers, location information, or any personally identifiable information.
Because we store no data, there is no data processing to protect against. You can use our services knowing your privacy is protected by design.
Will My Information Be Shared With Anyone?
We share only your device and encrypted information with service providers — this is the minimum necessary to deliver effective digital services. We never store, analyze, or sell your personal information.
IceWhale Technology Limited will never engage in any commercial activity involving the sale of user data.
Can I Review, Update, or Delete My Data?
Since we do not store or analyze any of your data, there is no data available for review or deletion. Our no-storage architecture means there is nothing to access, modify, or remove.
Will This Policy Be Updated?
Yes — we update this notice as necessary to stay compliant with relevant laws. Updates are indicated by a revised date at the top of the page. For material changes, we may notify you by posting a prominent notice or sending a direct notification.
Contact Us
If you have questions or comments about this policy, reach us at:
- Email: [email protected]
- Post: IceWhale Technology Limited, Room 1318-19, 13/F Hollywood Plaza, 610 Nathan Road, Mongkok, Hong Kong 999077