Privacy Policy
Last updated: October 16, 2026
Changes in this version: adds how third-party apps connected to your account receive information and use AI features, including the records we keep and AI provider retention; rewrites Children's Privacy for adult accounts connected to apps used by children; updates the reCAPTCHA description; and adds self-service account deletion.
Introduction
Welcome to Free2Z. This Privacy Policy explains how we collect, use, protect, and when necessary, disclose your personal information. This notice describes data processing; it does not create blanket consent to every purpose or substitute for a separately required choice.
Scope
This policy applies to our website https://free2z.com and https://free2z.cash, encompassing all products and services provided by Free2Z.
It also applies to our mobile applications, which are distributed under the
identifiers cash.free2z.zuuli (ZUULI, the Zcash wallet), cash.free2z.free2z
(Free2Z, the content application) and cash.free2z.e2e2z (E2E2Z, the messaging
application). The applications have different roles. The data processed depends
on the features you use, including any Free2Z account you use across them.
Data We Collect
Personal Information: Information you provide directly, such as your email address when creating an account or contacting us.
Account Information: Your username, the credentials you use to sign in, and any third-party accounts you choose to link to your Free2Z account.
Content You Create: The zPages, comments, profile details, images and other media you publish or upload. Content you publish is visible to others according to the settings you choose.
Identity Verification and Tax Documents: If you apply to our creator earnings programme, we collect the identity documents and tax form information you submit for that application, a photograph of your face for comparison with your identity document, and any signature you provide on a tax form. See Identity Verification and Tax Documents below.
Payment and Transaction Information: Records of purchases you make, and your 2Z credit balance and its history. Card details are collected and processed by our payment processor rather than by us.
AI Processing: Prompts and conversations, content processed for language detection and search indexing, and queries submitted to semantic search. See AI Features below.
Livestream Content: Video, audio and text shared during a livestream. See Livestreaming Features below.
Zcash Addresses: Addresses you provide for account linking, signing in, receiving support or receiving creator payments, and associated transaction records. ZUULI stores its wallet recovery phrase and spending keys on your device; it does not send them to Free2Z servers.
Usage Data: Automatically collected data about your interactions with our services, including IP addresses, browser types, and pages visited.
Cookies: Small data files used to enhance your user experience.
Use of Data
We use your data to:
- Provide and improve our services.
- Manage your account
- Manage your requests
- Communicate with you for service-related purposes.
- Ensure the security of our platform.
- Comply with legal obligations.
Our Commitment: No Sale of Personal Data
We will never sell your personal data. We will not rent or trade it, either.
Data Sharing and Disclosure
Data may be shared:
- With service providers under confidentiality agreements.
- To a successor operating Free2Z during a merger or acquisition, with this same no-sale commitment. Your personal data is not an asset we sell separately.
- When legally required or to protect our rights and user safety.
Law enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Identity Verification and Tax Documents
Applying to our creator earnings programme is optional, and only creators who choose to apply are asked for these materials. The application collects government-issued identity documents, a photograph of your face to compare with your identity document, and tax form information, including a signature on the tax form, to assess your identity and eligibility and administer creator payments.
We use this information to assess the application and administer the programme. The sharing and legal-disclosure provisions above apply to these records. Browsing, publishing and supporting creators do not require you to submit these application materials.
Payments
Card payments are collected and processed by our third-party payment processor. We do not receive or store your full card number. We receive and retain the transaction records associated with your account, including what was purchased and your resulting 2Z credit balance.
Zcash transfers are recorded on the Zcash network. Transfers you initiate from ZUULI use the wallet on your device; creator payments and other service-side transactions may be sent by Free2Z. This does not give Free2Z access to your ZUULI wallet recovery phrase or spending keys.
AI Features
When you use our AI features, the prompts you submit and the resulting conversations are processed by third-party model providers acting as our service providers in order to generate a response. Model providers also process text for automatic features: page titles and content, including unpublished drafts, may be sent for language detection; content may be processed for search indexing; and semantic search queries are sent to an embedding provider. These uses can occur without opening AI chat or submitting an AI prompt. Do not submit text to these features that you would not want processed in this way.
Third-Party Apps
You can connect your Free2Z account to apps made by other developers through the Free2Z SDK. Every app receives a stable account identifier, which is the same for every app, and when and how you last signed in. Beyond that, an app receives only what you approve on the consent screen. If you allow it, an app can receive your username, display name and avatar; your email address, if you have one; and your 2Z balance. With your permission, it can also stay signed in while you are not using it; start a card checkout to add 2Z credits, which you complete yourself on our payment processor's checkout page, and see the status of those requests; and use AI features that spend your 2Z credits. Accounts without an email address are welcome; their activity is not anonymous. You can remove an app's access at any time in Connected apps. The app developer's privacy notice describes what the app collects and does with information it receives.
When an app uses AI features through Free2Z, the request content is processed by Free2Z and sent to a third-party AI model provider to generate a response. The gateway does not add your Free2Z account identity to that provider request. Content supplied by an app can itself identify a person; omitting account fields does not make it anonymous. The gateway does not persist prompt and response content as part of its call records. This is different from information deliberately submitted in a support or safety report, which we process to investigate the report.
We keep account-linked and app-linked call records for metering, receipts, security and retry handling. These can include the model, usage quantities, charges, outcome, timestamps, request fingerprints, retry identifiers, schema names and app-supplied metadata. These records are linked to an account and an app and are not anonymous. The app can read its own call records for 90 days; that access window is not a promise to delete all records after 90 days. Billing, security and other records are retained for their purposes and applicable obligations as described under Retention and security. Network and browser information can also be processed to deliver and protect the service, including on hosted account pages.
Our AI model providers' API terms generally exclude training on API requests by default. No training, disabling provider response storage, and zero data retention are different controls. Provider retention varies by provider, feature and account configuration. Ordinary abuse-monitoring retention can be up to 30 days; providers can retain data longer for safety investigations, policy enforcement or legal obligations. For example, Anthropic describes retaining inputs and outputs flagged for potential policy violations for up to two years. See OpenAI's data controls at developers.openai.com/api/docs/guides/your-data and Anthropic's retention policy at privacy.claude.com/en/articles/7996866. Free2Z does not promise zero data retention across the SDK or its providers. Even an approved provider zero-retention arrangement can have feature-specific restrictions and safety or legal exceptions.
Livestreaming Features
Data Collection in Livestreaming: When you use our livestreaming service, we collect and process video, audio, and text data shared during the livestream. This includes any content you broadcast, share, or communicate through the livestream.
User Consent and Control: By engaging in livestreaming, you consent to the collection and use of this data. We respect your privacy and provide options to control what you share during livestreams.
Data Sharing and Security: Livestream content may be viewed by other users as per your settings. We ensure the security of the livestream data but remind users that live broadcasts are publically accessible and should be managed carefully.
Usage, Performance and Miscellaneous
We may use third-party Service Providers to help improve our Service. The categories we rely on include payment processing, real-time audio and video delivery for livestreams, AI model providers, and the captcha service described below. We use these providers to deliver the features described in this policy.
- reCAPTCHA: Our sign-in and sign-up pages use Google's reCAPTCHA to protect accounts from automated abuse, including when a third-party app opens those pages to connect an adult's account. It processes device, browser and interaction signals for that security purpose, and we check its result for password sign-in and for sign-up. reCAPTCHA is a Google service; Google describes how it processes this information in its reCAPTCHA documentation at docs.cloud.google.com/recaptcha/docs/faq.
Applicable rights and processing grounds
Depending on the applicable law and the processing purpose, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, or withdraw a particular consent. California rights can also include information about collection and disclosure, correction, deletion and applicable opt-out rights. Mandatory rights are not waived by accepting product terms. Contact help@free2z.com with your request; identity and applicable exceptions must be reviewed.
How we use information, and the legal basis for doing so, depend on its purpose and the applicable law. This includes providing your account and services, protecting security, and meeting tax and sanctions obligations.
Creator identity, consent and payment records
Creator verification uses identity and authority information to identify the person or organization receiving payment. We keep the agreement and service terms you accept, along with service and payment records. Your own earnings screen can display your verified legal name and jurisdiction; these details are not public.
Retention and security
We retain information according to its purpose and applicable obligations. Contract, tax, payment, and sanctions records can have different retention requirements from identity images. Access restrictions and legal holds apply where required.
You can delete your account yourself at free2z.cash/account/delete. The account is hidden right away, you are signed out everywhere, and the account is scheduled for deletion 30 days after your request. If you sign in before then, you can choose to keep it, which cancels the deletion. Some situations, such as creator earnings still owed to you, need support first. Contact help@free2z.com to ask about retention, to request deletion of other information, or if you cannot use that page. Some records must be kept to meet legal obligations or resolve a claim, so a deletion request may not remove every record immediately.
Children's Privacy
Children under 13 may not hold Free2Z accounts or use Free2Z directly, including its website and its publishing, social, livestreaming and AI tools. An adult can connect their own account for a child's use of constrained features inside a third-party app under the SDK developer requirements in our Terms. Those requirements also cover older minors where applicable law requires the relevant child protections or parental authorization.
The permitted arrangement uses app-generated requests from controlled content and bounded choices, such as a curriculum topic and a correct/incorrect result. Developers must enable the child-directed setting and prevent free-form prompts, uploads, child identifiers and individual histories from being sent to Free2Z. These are requirements for developers, not a claim that Free2Z automatically detects every prohibited input. Free2Z processes the request and retains the account-linked records described under Third-Party Apps. When a child uses such an app, the device's network information, such as its IP address, also reaches Free2Z when the app contacts our servers; we process it to deliver and protect the service. Even constrained choices or performance information may concern a child when associated with an account; the adult's ownership of the account does not change whose information it is.
The adult controls account access and spending. Account authorization is not age verification or legally required parental consent. The developer must provide notices and obtain any required permissions for its app; Free2Z is responsible for its own processing. Adult ownership, no-email accounts and provider retention settings do not automatically exempt either party from children's privacy requirements.
Do not send a child's personal details in prompts, metadata, uploads, reports or support messages. If you believe prohibited information has reached Free2Z, contact help@free2z.com with the app name and, if available, a call or report reference. Do not repeat the child's information in the initial message. We will investigate, restrict affected processing where appropriate, and delete prohibited information under our control where required. We will seek deletion from relevant service providers where applicable. Required legal preservation and limited security or transaction records may prevent immediate removal of every record; we will explain applicable limits when responding. Account deletion alone does not erase every provider copy, report or legally retained record.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
International Transfers
Your information may be transferred and processed in countries outside of your own. We comply with legal standards for international data transfers.
Changes to This Policy
We may update this policy and will notify you of significant changes. Updates will not change our promise: we will never sell your personal data.
Contact Us
For any questions about this Privacy Policy, contact us at help@free2z.com.