Privacy Policy.

1. Who we are

Turnip Media Private Limited (“TMPL”, “Zaps”, “we”, “us”) is the Data Fiduciary responsible for your personal information under this Privacy Policy. Our registered address is HAL 2nd Stage, Indiranagar, Bengaluru 560038.

“Zaps” means the Zaps mobile app and the zaps.design website (together, the “Service”). If you have a question about this policy or how we handle your information, our Grievance Officer will respond within one month at support@zaps.gg.

2. What this policy covers

This Privacy Policy covers your use of the Zaps app and the zaps.design website. It is incorporated into, and should be read together with, our Terms of Use.

3. What we collect

• Account details. Your phone number or email address, and your display name.
• The work you save. Finished edits, drafts you explicitly save, and anything you publish.
• Usage and device data. Device model, OS version, identifiers, IP address, and crash logs.
• Subscription and payment status. For in-app purchases, received from Apple and Google. For purchases on our website, our payment processor tells us that a payment succeeded and gives us the last four digits and card type for your receipt. We never receive or store your full card number, and we never see your CVV.
• Support correspondence. Messages you send us for help or feedback.

4. Your photos and videos

Saved work is private to your account unless you publish it or share it. The upload exists so your saved work is available across your devices, not to make it visible to anyone else.

You can delete your saved work at any time. Section 8 explains what deletion does and doesn't do.

5. AI features

For AI Photo Enhance, AI Background Remover and Magic Eraser, the original photo is uploaded and processed on servers, and the result is returned to your device. These features require a connection.

Some AI features run through third-party technology providers. These providers process your photo solely to deliver that feature and may not use it for their own purposes. Providers may be located outside India.

6. Why we use your information

Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), each use of your information is tied to a specific purpose:

• Providing and maintaining the Service — to run the app and website you use.
• Processing subscriptions — to activate and manage your purchases through Apple and Google.
• Cross-device availability — to make your saved work available across your devices.
• Support — to respond to your questions and requests.
• Safety, security and fraud prevention — to protect the Service and its users.
• Product improvement and analytics — to understand usage and improve features and reliability.
• Legal and regulatory compliance — to meet our obligations under law.
• Marketing — only with your consent, which you can withdraw at any time.

7. Who we share it with

We do not sell your personal information. We share information only with categories of service providers who help us run the Service, each bound to use information solely for the function they perform:

• Cloud hosting and storage
• Payment processing, both app-store and card payments made on our website
• Analytics
• Crash and error monitoring
• AI processing
• Customer support
• Email delivery

We may also disclose information to government or law-enforcement authorities on a lawful request, or to a successor entity in connection with a merger, acquisition or insolvency proceeding, in which case we will notify you.

8. How long we keep it

When you delete work, or close your account, we remove it from your account and from view. We retain information for a limited set of purposes: to comply with legal and audit obligations, to prevent fraud, to collect fees owed, to resolve disputes, to troubleshoot problems, and in backups and archives.

If you want your information erased beyond that, write to our Grievance Officer at support@zaps.gg and we will action it within one month.

9. Security

We use technical and organisational measures to protect your information, including encryption in transit and access controls that limit who can reach your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Card payments. Our website and checkout run over HTTPS. Card payments on our website are handled by a PCI-DSS compliant payment processor: your card details go directly to them and never pass through or rest on our servers, so we never hold your full card number or CVV. What we keep is the record of the payment itself — amount, date, card type and last four digits — so we can support you and meet our tax and accounting obligations.

10. Your rights

Under the DPDP Act, you have the right to access, correct and erase your personal information, to nominate another person to exercise your rights in the event of death or incapacity, and to grievance redressal.

To exercise any of these rights, write to support@zaps.gg. We respond within one month, free of charge.

11. Children

Zaps is not for children. In this policy a child means anyone under 13, or under the minimum age at which a person can consent to the processing of their own personal data in the country where they live, whichever is higher.

We do not knowingly collect information from children, and children may not create an account. If we learn that we hold a child’s information, we delete it. If you believe a child has given us their information, write to our Grievance Officer at support@zaps.gg and we will act within one month.

12. Transfers outside India

Some of the service providers listed in section 7 operate outside India. Where your information is transferred outside India, we require appropriate safeguards to protect it.

13. Cookies on zaps.design

The zaps.design website uses analytics cookies to understand how visitors use the site. The Zaps app does not use browser cookies.

14. Grievance Officer

In accordance with the Information Technology Rules and the DPDP Act, our Grievance Officer is:

Grievance Officer
support@zaps.gg

We respond to grievances within one month.

15. Changes

We may update this policy from time to time. If we make a material change, we will notify you in-app or by email, and update the “last updated” date at the top of this page.

16. Contact

Product questions: support@zaps.gg

Privacy questions: support@zaps.gg

Registered address: Turnip Media Private Limited, HAL 2nd Stage, Indiranagar, Bengaluru 560038.

If you are in the EU, UK or California

If you are located in the European Union, the United Kingdom, or California, you have rights in addition to those described above, and we honour them in substance regardless of where you live.

You may request access to the personal information we hold about you, ask us to correct inaccurate information, request that we delete your information, and object to or restrict certain processing, including for marketing purposes. Where our processing relies on your consent, you may withdraw it at any time without affecting processing that already took place.

We do not sell your personal information, and we do not use your information for cross-context behavioural advertising as defined under California law. Where a legal framework in your region grants you the right to lodge a complaint with a supervisory authority, nothing in this policy limits that right.

To exercise any of these rights, write to our Grievance Officer at support@zaps.gg. We will respond within one month.