Zero-Knowledge Privacy Charter
Last Updated: October 2026
1. The Non-Negotiable Health Principle
Health, weight, dietary intake, and biometric telemetry are legally classified as Special Category Data under GDPR Article 9. Zuno is engineered with a strict Zero-Knowledge Cryptographic Architecture.
2. Client-Side Encryption (AES-256-GCM)
Before any diary item, meal timestamp, workout, or scale measurement leaves your phone, it is encrypted on-device with AES-256-GCM authenticated encryption. The encryption keys are derived from your Secure Enclave and a 6-digit Master Vault PIN.
Neither Zuno engineers, nor cloud hosting providers (Supabase / AWS EU-West-1), have the mathematical ability to decrypt or view your data.
3. Zero Third-Party Advertising & Data Brokers
We do not sell, license, rent, or share your nutritional or biometric telemetry with insurance companies, advertisers, or third-party data brokers. Ever.
4. The Nuclear Wipe ("Right to Be Forgotten")
You retain complete sovereignty over your data. In the app settings, a single tap on "Wipe Data" permanently deletes your local SQLite database, revokes authentication tokens, and destroys all cloud ciphertext vaults.