ZERO ONE Desktop privacy notice

Effective 30 September 2026. This notice describes the ZERO ONE 7.9.6 update. Earlier installed or Microsoft Store releases may have different features and legacy connected services; update availability and certification are separate from this notice.

Your notes stay on this device. ZNotes requires no website account or automatic cloud sync. Optional AI and browser features use the runtime or API you configure.

ZNotes and private credentials

ZNote titles and text are encrypted with operating-system-backed Electron safeStorage before being saved in the app's user-data folder. If secure storage is unavailable, the app refuses plaintext storage; insecure Linux basic_text fallback is rejected. Notes are not automatically uploaded, synced or included in diagnostics. OpenZero tokens and optional Assistant API keys are also stored only when secure credential storage is available. Notes and encrypted credentials are protected at rest; this does not make an unlocked computer or a selected remote service private.

Optional AI: local, self-hosted or API

You can configure a local Ollama model, your own OpenZero runtime on this computer or a remote server, or an optional OpenAI/Groq API for Assistant chat. Model prompts and conversation context are sent to the chosen endpoint. A remote runtime or API therefore receives that content and network request metadata under its own privacy, retention and billing terms. Local model chat does not provide the full OpenZero orchestration or Browser Pilot planner. The app checks reachability of your configured OpenZero address; the server can receive your network address and request metadata from these probes. The isolated OpenZero workspace retains its cookies, cache and site storage on this computer.

Browser Pilot

Browser Pilot controls only the isolated tab you explicitly grant for one bounded task, with a 12-step limit and a stop-and-revoke control. Visible page text, headings and interactive-control metadata are sent as a compact structural snapshot to your configured OpenZero planner. The snapshot omits form values, passwords, payment details, secret fields, file selections and CAPTCHA values, strips URL queries/fragments and redacts long token-like path segments. The task request and proposed actions may also contain information you deliberately supply. A remote runtime receives that task and page context. Cross-site navigation, personal-data typing and consequential actions pause for approval. Ordinary page visits send normal web requests to the sites you open.

Pilot snapshots and task history are not written to disk. Current run state and up to eight short step results remain in memory until the run ends. Pilot browser cookies and site storage persist until you clear desktop data. Camera and microphone access are denied in embedded workspaces.

Local ZSEC scans

ZSEC Shield scans a folder only after you choose it and request a scan. There is no automatic background scan, sample upload, deletion or quarantine. Local scan reports can contain paths, file hashes, rule matches and errors. They remain on your computer unless you share them.

Diagnostics and updates

Diagnostics export runs only when you request it and choose a location. It includes app/platform version, machine-health totals, configured OpenZero origin and reachability, preferences and whether credentials are configured. It excludes credential values, note contents, prompts, conversation text, cookies and URL credentials, paths, queries and fragments. Review an export before sharing it. Update checks contact the official GitHub repository. Microsoft Store editions use Store update delivery; direct desktop editions have their own verified-update flow.

Retention and removal

Delete notes individually in ZNotes. Clear desktop data removes settings, encrypted tokens and saved browser/runtime sessions after confirmation, while retaining the encrypted notebook and diagnostics files you exported. Uninstalling may also retain app data. Remote accounts and copies held by providers are governed by those providers; clearing desktop data does not delete them. Maintain your own backups.

Retired integrations

The 7.9.6 update removes hosted mail, video-call and research-account routes, sign-in controls and their background probes. It provides on-device ZNotes and user-configured AI. Earlier releases may still show retired service controls.

Contact

For a privacy question, email shaf@talktoai.org. See the TalkToAI website privacy notice and terms.