Privacy Policy

Last updated: August 5, 2026

This Privacy Policy explains how ZBee LLC ("we," "us," or "our") handles information in connection with the ZBee™ desktop application, the ZBee: Safe Spend iPhone and iPad app, and the zbee.app website (together, "ZBee").

The iPhone & iPad app: nothing is collected

ZBee: Safe Spend runs entirely on your device and collects nothing. The numbers you type stay on your device; the app has no account, no analytics, no tracking, and makes no network requests of any kind — nothing you enter is sent to us or anyone else. Its optional check-in reminder is a purely local notification scheduled on your device. Everything below this section describes the desktop application and the website; none of it applies to the iPhone and iPad app.

The short version

Your holdings stay on your own device. Your investment holdings and balances live in a private database on your own computer and are read directly between your device and SnapTrade — they are never stored on or routed through ZBee's servers, and we do not receive, store, sell, or share them. To connect your accounts and to manage a paid subscription, ZBee uses a small backend service and a payment processor; the limited information they handle is described below. Using ZBee on the free tier requires no account.

1. Information ZBee stores on your device

To do its job, ZBee stores the following locally on your computer, in your per-user application folder (on macOS, ~/Library/Application Support/ZBee Compass/ZBee.db). This location is fixed and is never a cloud-synced folder such as iCloud Drive or Dropbox:

• investment holdings, positions, and account balances;
• account names and any nicknames you assign;
• your profile inputs, such as birth month and year (ZBee does not ask for the day or your full date of birth) and Social Security estimate;
• categories, tax-bucket settings, and display preferences; and
• if you subscribe, your ZBee Pro license credentials (your activation code and signed license token) — stored in your macOS Keychain, with an owner-only file as a fallback if the Keychain is unavailable, readable only by your macOS user account and kept separate from the database file. The secret that authorizes reading your brokerage through SnapTrade is not stored on your device — it is held encrypted on our server (see §3 and §5).

Your holdings and balances never leave your device for our servers. They are transmitted only between your device and SnapTrade when you connect accounts (§3). ZBee also makes a routine connection to zbee.app to check for updates and, if you subscribe, to verify your subscription status (§7) — neither carries any of the information above. ZBee also writes a local diagnostic log (on macOS, ~/Library/Logs/ZBee Compass.log) that stays on your device.

2. What we never receive — and what we don't do

• We never receive your investment holdings, positions, or account balances; these are read directly between your device and SnapTrade and never reach us.
• The app contains no advertising and no third-party analytics or tracking SDKs.
• We do not sell, rent, or share your personal information.

The free tier requires no account. The paid Pro tier involves a subscription account and a payment, and connecting your accounts uses a backend service — the limited information involved is described in §3, §4, and §5.

3. Connecting your accounts through SnapTrade

To connect your brokerage on the Pro tier, ZBee uses its commercial integration with SnapTrade. ZBee's backend brokers the connection: it registers a SnapTrade user identity for you and authorizes a read-only link to your brokerage. Once connected, your holdings, balances, and prices are read directly between your device and SnapTrade — they do not pass through ZBee's servers. SnapTrade and your brokerage handle that data under their own terms; see SnapTrade's privacy policy at snaptrade.com. Automatic syncing is available only for the brokerages SnapTrade supports; where yours isn't, you can still enter holdings manually.

To authorize and sign requests to SnapTrade on your behalf, our backend holds the connection identifiers and the secret associated with your managed SnapTrade user. It does not hold your brokerage password — ZBee never sees it — and the connection is read-only, so it cannot place trades or move money. We do not control SnapTrade or your brokerage and are not responsible for their practices.

4. Subscription and payment

If you subscribe to ZBee Pro, payment is handled by our payment processor, Stripe. You provide your payment details directly to Stripe, and their handling of that information is governed by Stripe's privacy policy, not this one. We do not receive or store your full card number. From Stripe we receive what we need to provide and support your subscription — typically your name, email address, subscription status, billing country, and the last four digits and brand of your card for receipts and fraud prevention. We use this only to operate your subscription and to meet our tax and accounting obligations.

Before you subscribe — and to start a free trial if one is offered, or to authorize ZBee Pro on a new Mac — we ask for your email address and confirm it by sending a short verification code. We do this to make sure the address is yours, to give you one free trial per email, and so your purchase is tied to an address we have verified. We store your email and your account/trial status; we keep the verification code only briefly (as a one-way hash) while it is pending. If you verify an email but never subscribe or start a trial, we automatically delete that email after about six months of inactivity. If you delete your account (see §9) we erase your email; the only thing we keep is a one-way hash of it — an anonymized marker that lets us enforce one free trial per email without retaining the address itself.

5. Information we process on our servers

To run the Pro features above, ZBee's backend (hosted on Cloudflare) processes a limited set of information:

• your account email and your subscription, free-trial, and license status;
• a one-way hashed fingerprint of each Mac you've authorized for your license, used to recognize which of your Macs may use your subscription (we cannot recover your hardware ID from it);
• the identifier for your managed SnapTrade user and an encrypted SnapTrade access secret, which lets ZBee request your account data from SnapTrade on your behalf (encrypted at rest; usable only by our backend);
• the brokerage account identifiers contained in the read requests we sign for you — but not the holdings or balances those requests return;
• the text of any question you type into the in-app help assistant (the ZBee Bot), which our backend processes with Cloudflare's AI to answer it. Only the question you type is sent — never your holdings, balances, profile, or projection. It is used solely to generate your answer, not to build a profile of you; and
• standard technical request logs (such as IP address and timestamps) that any web service records.

We retain this while your subscription is active and for a reasonable period afterward for tax, accounting, and dispute records, then delete or anonymize it. You can erase all of it at any time (see §9). Your investment holdings and balances are not part of this — they never reach our servers.

6. Service providers

We rely on these service providers ("sub-processors"), each under its own privacy policy:

• Cloudflare — website hosting, our backend service, delivery of our automated emails to you (verification and account-recovery codes, and download links you ask us to send), and the AI that powers the in-app help assistant;
• SnapTrade — the read-only brokerage data connection;
• Stripe — subscription billing and payment processing;
• Apple — our support@zbee.app mailbox, so email you send us and our replies to it are stored with Apple's iCloud Mail;
• Reddit — advertising-conversion measurement on the zbee.app website only (the Reddit Pixel); see §7.

7. The website, downloads, and the app's update & subscription checks

The zbee.app website and app downloads are hosted by Cloudflare (the disk image is served from Cloudflare R2 at dl.zbee.app). Like virtually all websites and file hosts, these providers automatically record standard technical information when you visit or download — such as your IP address, browser/device type, referring page, and timestamps — for security and operational purposes. This data is processed by those providers under their own privacy policies.

The website (not the app) uses the Reddit Pixel so we can tell whether our advertising leads people to download or subscribe to ZBee. This runs on the zbee.app site only; it may set cookies and may share website-visit information with Reddit under Reddit's privacy policy, and we do not send Reddit your email or any advanced-matching identifiers. It is limited to the marketing website — the ZBee app contains no advertising, analytics, or tracking (see §2), and this measurement never has access to your financial data, which never leaves your device for our servers. You can opt out with browser tracking-protection or your Reddit account personalization settings.

The website also keeps its own small, anonymous counters so we can tell how many people reach the site and how many go on to download ZBee. When you visit zbee.app, our server may record a row containing only: which step happened (for example "read the page" or "pressed Download"), a coarse device class (browser vs. automated crawler, and Mac vs. not), an optional campaign label if you arrived from one of our ads, and a timestamp. That is the whole row. We do not store your IP address, your browser's user-agent string, a cookie, or any identifier — nothing that could single you out or link one visit to another, here or on any other site. Your browser's user-agent and network are inspected only to decide the coarse class above, and then discarded. These counters are read only in aggregate, and rows are automatically deleted after 90 days. The site does keep a short campaign label in your browser's session storage when you arrive from one of our ads, so that a later download can be attributed to it; it contains no identifier, and your browser clears it when you close the tab. This is measurement of our own website only — the ZBee app itself contains no analytics whatsoever (see §2), and none of it ever touches your financial data.

The ZBee app itself makes a routine connection to zbee.app when it launches: it anonymously requests a small file telling it the latest available version and basic app settings. This request includes no financial data and no identifier created by ZBee — only the standard technical information (such as your IP address and a timestamp) that Cloudflare logs for any web request. If you are a Pro subscriber, ZBee additionally verifies your subscription/license status with our backend; that request is associated with your subscription, not with your financial data, which is never transmitted. These checks fail silently when you are offline.

When a newer version is available, ZBee downloads it automatically in the background from dl.zbee.app so the update is ready when you choose to install it — ZBee never installs an update without you clicking. Like the version check above, this download is anonymous and carries no financial data and no ZBee-created identifier; it does mean your device contacts Cloudflare (recording the standard technical information described above) without you clicking anything. You can turn it off in Settings → Updates → "Download updates automatically", after which ZBee only tells you an update exists and downloads it when you ask.

8. If you contact us

If you email us feedback or support requests, we receive your email address and whatever you include in your message. We use that information only to respond to you and to improve ZBee, and we do not sell it or use it for marketing.

Diagnostic reports. ZBee's Privacy & Data screen has an optional "Export diagnostic report" action. It saves a plain-text file — ZBee's app version, your operating-system and Java versions, a few counts, and ZBee's own activity log (app events and error messages), with your home-folder path removed — that you can read and then choose to email to us if you want help with a problem. It is created only when you ask, and it is never sent automatically: this is a file you control, not telemetry. It never contains your holdings, balances, values, account numbers, brokerage names, email, or license code.

9. Data retention and deletion

• Delete everything (account + data): ZBee's Privacy & Data screen has a "Delete account & data" action that, in one step, erases all data on your device, deletes your records on our servers (your subscription record, your account and verified email, the encrypted SnapTrade access secret, and your authorized-device list), removes your managed user at SnapTrade (revoking our access to your brokerage), and cancels your subscription. The only thing we keep is a one-way hash of your email — an anonymized marker that prevents repeat free trials; it can't be turned back into your address. This is immediate and cannot be undone.
• Clearing data only: alternatively, "Clear data" on the same screen erases your financial data while keeping your profile and settings. You can also delete the data folder, or uninstall ZBee.
• Connections: disconnecting SnapTrade in ZBee revokes the connection and clears the synced accounts locally; you can also manage or remove the connection through SnapTrade directly.
• Subscription: if you cancel without deleting your account, we retain your subscription record only as long as needed to operate the subscription and for a reasonable period afterward for tax, accounting, and dispute purposes, then delete or anonymize it. Deleting your account removes it immediately, subject to any minimal records we must keep by law.
• Email: we keep correspondence only as long as needed to address it and for reasonable record-keeping.

10. Security

Your holdings live on your own device, so their security depends largely on your device's security — keep your computer and accounts protected. For the limited information our backend and payment processor handle, we use encryption in transit and rely on established providers (Cloudflare, Stripe). No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

11. Children

ZBee is not directed to children and is not intended for use by anyone under 18. We do not knowingly collect personal information from children.

12. Your privacy rights

Depending on where you live (for example, under California's CCPA/CPRA or the EU/UK GDPR), you may have rights to access, correct, or delete personal information about you. Because ZBee keeps your financial data on your own device, that data is already entirely under your control. For information we do hold — such as your subscription record, email correspondence, or data our hosting and payment providers process — you may contact us using the details below and we will respond as required by applicable law. We do not sell or "share" personal information as those terms are defined under applicable law.

13. International users

ZBee is operated from the United States. If you access the website or contact us from outside the U.S., any limited information described above may be processed in the U.S. or in the countries where our service providers operate.

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and posting the revised Policy at zbee.app.

15. Contact

Questions about privacy? Contact us at support@zbee.app.