Succinct ZCAM App - Privacy Policy

Last Updated: March 2, 2026

This Privacy Policy explains how Succinct Labs Inc. or its affiliates (“Succinct,” “we,” “us,” or “our”) collects, uses, and protects information when you use the Succinct ZCAM mobile application (“App”). The App allows allows users to capture images and videos using a zero-knowledge proof system that cryptographically attests to certain properties of the capture process (such as device make and model, software version, and camera parameters) and, at the user's election, to publish such content and associated metadata on the public ZCAM website. Succinct Labs Inc. is the data controller responsible for personal data processed through the App.

When we refer to “you” or “your” in this Policy we mean any individual who interacts or uses the App. By using the App, you represent that you understand and agree to this Policy, and consent to the collection, use, and sharing of information as described in this Policy. If you do not consent to our practices, you can choose not to use the App. In jurisdictions where processing is based on your consent, we will request that consent separately within the App.

  1. Overview of Our Privacy Approach

The App is designed to minimize the collection and retention of personal data. Where possible, we process images locally on your device and generate zero-knowledge proofs that allow verification of properties of photos and video without revealing the underlying visual content or personal information.

  1. Information We Collect
  1. Photos and Videos

When you use the App to create a verifiable photo or video:

  • The image or video may be processed locally on your device.
  • If server processing is required, the image or video may be transmitted securely and processed transiently.
  • We do not retain raw images or video unless you explicitly choose to share the image(s) or video to the public ZCAM website or to social media, in which case the image(s) or video are uploaded and stored on our servers.

Generated cryptographic proofs may be stored or shared, but these are designed not to reveal the underlying image or video content.

  1. Data Associated With Your Account and Use of the App

When you create a ZCAM app account, we may collect device-related data including device make, model and software version. We will only collect your email address in the event you share feedback via the app or otherwise provide us with your email on the ZCAM website.

When you use the ZCAM app, we may collect limited usage analytics, including lifecycle events, button interactions (such as when a photo is taken or published), screens viewed, and information about errors or crashes. We will never collect your IP address or location. Optional analytics are disabled by default for users in certain jurisdictions where required by law and may be enabled or disabled at any time in the App settings.

  1. Data Associated With Photos and Videos

Only if you choose to publish a photo or video taken in the ZCAM app will we also collect image- and video-related data including timestamp, camera resolution, ISO speed ratings, exposure time, f-number, focal length, orientation, video duration, frame rate and codec.

  1. How We Use Information

We use information to:

  • Generate and verify zero-knowledge proofs;
  • Display images and video to you in your library;
  • Make images and video available to others for viewing if you actively choose to share these to the ZCAM public website or via social media;
  • Operate and maintain the App;
  • Improve reliability and performance; and
  • Comply with legal obligations.
  1. How We Share Information

We may share limited data with service providers, regulators and law enforcement where required, and infrastructure partners. We do not and will not ever sell your personal data.

  1. Data Retention

Photos and videos captured using the App are stored locally on your device and neither this content nor any associated verification data is uploaded to or retained on our servers in the ordinary course of operation.

If you choose to share a photo or video publicly through the App, a copy of that content, together with associated cryptographic signatures and verification data, may be transmitted to and stored on infrastructure operated by or on behalf of Succinct.

We retain publicly shared photos, videos, and related verification data for as long as your account remains active. When you delete your account, we will delete any stored public content and associated verification data from our active systems within a reasonable period, except where retention is required by law or for legitimate compliance, security, or dispute-resolution purposes.

Photos or videos that you have chosen to publish outside of the App may persist independently of account deletion and may not be technically removable.

  1. Our legal basis for processing your information

Where applicable, we process personal data on the following legal bases:

  • Performance of a Contract: To provide the App's core functionality, including capturing content, generating and verifying cryptographic proofs, operating your account, and hosting any content you choose to share publicly.
  • Legitimate Interests: To secure and operate our infrastructure, prevent fraud and abuse, maintain the integrity of verification data, and improve the reliability and safety of the App.
  • Consent: For access to device features (such as camera, photo library, or microphone), optional analytics, and any processing that is not strictly necessary to provide the service. You may withdraw consent at any time through your device or in-app settings.
  1. Your Rights

You may have rights to access, correct, delete, and port your data depending on your jurisdiction. To exercise any of these rights, please contact us using the contact details provided in this Policy.

Specifically, if you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under applicable data protection law:

  • The right to access the personal data we hold about you;
  • The right to request correction of inaccurate or incomplete data;
  • The right to request deletion of your personal data;
  • The right to request restriction of processing
  • The right to object to our processing of your personal data where we rely on legitimate interests
  • The right to data portability
  • The right to withdraw consent at any time where processing is based on consent
  • You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at legal@succinct.xyz. We will respond to verified requests within one month, subject to applicable law.

  1. Security

We use encryption, secure processing, and access controls. No system is perfectly secure.

  1. Children

The App is not intended for children under 13 (or 16 in the EEA). If you are under the applicable age, you are not authorized to provide us with any personally identifying information, nor access or use our App in any manner whatsoever. By using the App, you represent that you are the applicable age or older.

  1. Privacy Policy changes

We reserve the right to modify this Policy at any time without notice. All changes are effective immediately upon posting. Your continued use of the App after changes are posted constitutes your acknowledgement of the modified privacy policy and agreement to abide and be bound by that privacy policy. For reference, the effective date of this Policy is posted at the top of this page. Therefore, it is important that you periodically check this page for changes made to this Policy.

  1. Contact

Succinct, Inc.

101 Mission St, Suite 800
San Francisco, CA 94105

Email: legal@succinct.xyz