How we protect your data
This is a courtesy translation. The Brazilian Portuguese version is the legally binding text; if the two differ, the Portuguese one prevails.
zkkTools respects your privacy. This Policy explains how we process your personal data.
Most data is processed locally on your computer:
This data is never sent to external servers automatically.
Sign-in is exclusively through your Google Account — we never ask for or store a password. When you link the app to your account:
This account data is stored encrypted at rest in our database — a different mechanism from the end-to-end sync described below (see Section 8).
If you subscribe to Premium, your network speed test and diagnostic history can be synchronized across your devices with end-to-end encryption (X25519 + AES-256-GCM): content is encrypted on the device before upload. The backend receives the ciphertext and required routing metadata, but not device private keys, so it cannot read the history.
Personal files and passwords are not part of synchronization. Synchronized private content is never sent in plaintext. Cross-device synchronization currently covers network test history. The app may also upload encrypted envelopes containing selected cleanup activity details (type, file count, space freed, and duration), but those events are not currently downloaded by other devices and are not described as cross-device sync. The web portal has no key and neither decrypts nor displays these contents.
The app checks for updates automatically. We collect:
IPs are not stored individually and are deleted after 30 days.
You are never required to send data. If you submit a diagnostic report, it may include:
Important: manually remove passwords, tokens, keys and personal data before sending.
Sending a support report is always voluntary, and Premium sync preferences can be reviewed at any time in the app's Settings. Where a collection can be turned off without breaking an essential feature (such as update checks), the option is available in Settings.
Premium purchases are processed by Stripe. Your card never reaches our servers.
We only receive:
See Stripe's Privacy Policy.
We do not share data with third parties, except when:
| Type | Retention |
|---|---|
| Account/Email | While active |
| E2EE history and activity envelopes | Until explicit account deletion |
| Synced events | 12 months |
| IP logs | 30 days |
| Support reports | 90 days |
| Expired license data | 2 years (audit) |
You have the right to:
If you suspect a breach, contact: zkkTools support
No tracking via cookies. We do not use Google Analytics, Meta Pixel or similar tools.
Strictly necessary third-party resources — Google Account session, Stripe checkout, and reCAPTCHA bot protection — load when you use those functions, regardless of your choice in the cookie banner. Optional third-party resources, such as Google Fonts, load only with your consent; declining affects only those improvements, never the use of the site.
The session cookie is strictly necessary for sign-in and only keeps you logged in.
We may update this policy. We will notify you by email or a prominent notice on the website.
For privacy or security questions, contact us at: zkkTools support
Brazil (LGPD). If you are in the EU, GDPR also applies.
← Back to Home