Zoe Privacy Policy
Last updated: November 5, 2026
Zoe is made by Korda Labs, 3033 San Jacinto St, Dallas, TX ("Korda Labs", "we"). This policy covers Zoe at zoe.kordalabs.com. It explains what we collect, why, and the choices you have.
What we collect
- Account details: your name, email address, and the credentials you use to sign in, such as a passkey's public key.
- What you put in Zoe: goals, tasks, notes, chat messages, and anything else you create or upload.
- Connected accounts: if you connect Google Calendar, your Google email address, basic profile, and your calendars and events.
- AI provider keys: any API key you add so Zoe can use your own AI provider. We store it encrypted.
- Technical data: IP address, device and browser type, and logs of errors and activity, which we use to run and secure the service.
How we use it
We use your information to run Zoe, including answering your requests and acting on your calendar when you ask; to keep it secure and fix problems; and to contact you about your account or important changes. We do not sell your personal information, and we do not use it for advertising.
AI processing
Zoe uses AI models to respond to you. To do that, your message and the relevant context, such as your goals, tasks, or calendar events, are sent to an AI model provider. That provider is either the one you connected with your own key, in which case that provider's terms also apply, or one we make available through OpenRouter. We do not use your content to train AI models.
Google user data
If you connect Google Calendar, Zoe asks Google for permission to see your calendars and events, to create and change events, and to see your email address and basic profile.
- We use this data only to provide Zoe's calendar features: showing your schedule, planning around it, and creating or changing events you ask for.
- We share it only as needed to provide those features, including sending relevant events to the AI model provider that answers your request.
- We do not sell it, use it for advertising, or use it to develop, improve, or train generalized AI or machine learning models.
- People do not read it unless you ask us to in a support request, it is needed for security or to comply with the law, or it has been aggregated and anonymized.
- Google access tokens are stored encrypted.
Zoe's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google in Zoe's settings or at myaccount.google.com/permissions.
Who we share it with
We share information only with service providers that help us run Zoe, and only as needed:
- Fly.io: hosting, in the United States;
- AI model providers: as described above;
- Google: if you connect your Google account.
We may also disclose information if the law requires it, or to protect the safety and rights of our users or the service. If Korda Labs is reorganized or sold, your information may transfer as part of that, and this policy would continue to apply.
Cookies
Zoe uses a cookie to keep you signed in. We do not use advertising or third-party analytics cookies.
How long we keep it
We keep your information while your account is open. You can ask us to delete your account and its data at any time by writing to privacy@kordalabs.com, and we will do so within 30 days, except where the law requires us to keep something. Copies in backups age out within 30 days.
Security
Each account's data is kept in its own separate database, and stored access tokens and keys are encrypted. No system is perfectly secure, so we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or limit certain processing. To use these rights, write to privacy@kordalabs.com.
Children
Zoe is not meant for anyone under 18, and we do not knowingly collect their information.
Changes
If we make significant changes, we will update the date above and tell you in Zoe or by email.