zikabuVersion 1 October 2026 · revision 2 · Zikabu · Queria Srl
APP OPERATOR
Queria Srl, Via G. Ripamonti 142, 20141 Milan, Italy, VAT 14607970960. Privacy and reports: info@zikabu.app.
PHOTOS, CARDS AND AI
The system picker supplies only selected images. Recent faces requests Photos permission and analyzes authorized images on device. Detection, cropping and trait suggestions run locally, without identifying people or importing names from Photos. Suggestions may be wrong and can be corrected. Image Playground uses Apple’s experience on compatible devices. Queria receives no photos, cards, audio or transcripts from the app. There is no advertising, analytics or tracking. System permission grants technical access; it does not establish rights over depicted people.
PRIVATE DUO SHARING
Only the host-selected deck is sent to the authorized player: optimized images without GPS metadata, card names, visible traits and deck details. Nearby uses an encrypted device connection; online Apple Game Center handles identity and transport. There are no public galleries or open chat. Before sending, the host declares rights, permissions and content review. This declaration does not verify subjects’ consent. Generated portraits can remain identifiable. Images of minors require the permissions of those with parental responsibility under applicable law; turning 14 does not create a general image-use permission. Apple’s sensitive content checks, when available, cannot detect every abuse.
RETENTION AND DELETION
Your cards and decks remain on device until deleted in the app. Revoking Photos access does not delete existing cards. Apple backups may include personal albums. Guests cannot save received decks in the app: temporary copies are deleted on disconnection, on expiry of a 24-hour running session, and at the first reopening after a forced exit. Temporary copies and privacy records are excluded from backups. We cannot erase recipients’ screenshots or external copies. Local declarations contain no photos, expire after 90 days and can be deleted from the profile. Blocks remain until unblocked or app data is removed. Blocking covers the detected identity on this device and cannot guarantee recognition of other identities.
APPLE SERVICES AND REPORTS
Apple provides StoreKit, Game Center and speech under its terms and settings: https://www.apple.com/legal/privacy/. Queria receives no payment details. Apple services may involve processing or transfers described in Apple’s notice; the app does not send photos to a third-party AI service operated by Queria. You decide whether to send a prepared report email. No photo is automatically attached. Queria uses your email address, message and included identifiers to respond and address abuse: handling your request, legitimate interests in safety and, where necessary, legal obligations. Ordinary correspondence is kept for up to 12 months after closure; disputes or legal obligations may require documented longer retention. Access is limited to authorized staff and necessary email and hosting providers. Image-related roles and obligations depend on actual processing: having no photo server does not automatically exempt Queria or users.
YOUR CONTROLS
Delete cards and decks, revoke permissions in Settings, block players and report unauthorized use, including if you are depicted and do not use the app. Contact Queria for access, correction, deletion, restriction, objection and portability where applicable. You may complain to the Italian Garante or your competent data protection authority. To remove a shared original, also contact its holder; Queria cannot access their library.
PURPOSES, LEGAL BASES AND CHOICES
The local profile, purchase status and technical match data provide the functions requested by the player: performance of the contract, GDPR Article 6(1)(b). Photos and voice are optional functions activated at your request; ready-made decks work without these permissions. Accepting the terms is not blanket consent to further processing. A contract with the player does not automatically authorize using other people’s images. The person choosing and sharing images must have a lawful basis and the permissions required for that use. For contractual support, Queria uses the data needed to respond, Article 6(1)(b); for reports, protection of people and defence of rights, the legitimate interest in safety, Article 6(1)(f), balanced against individuals’ rights; for applicable legal obligations, Article 6(1)(c). Marketing consent is not required. Optional information may be omitted; without contact details or sufficient facts we may be unable to respond or assess a report.
VOICE, SOURCES AND AUTOMATION
Voice requires Microphone and speech recognition permissions. SpeechAnalyzer processes audio on the device; the local model interprets the question. The app does not save audio recordings or send audio or transcripts to Queria. Phrases are processed during play; Apple may download the required models. You can stop voice and revoke permissions. No automated decisions with legal or similarly significant effects on people are made. Card images and names come from the player entering them; online identifiers come from Game Center. A report may contain information about other people supplied by the reporter: we use only what is needed to handle it. Queria has no centrally searchable repository of faces.
EXERCISING RIGHTS AND WITHDRAWAL
Write to info@zikabu.app with your request and the minimum information needed to locate the data. Queria responds without delay and normally within one month; where permitted, this may be extended by two further months, with reasons provided within the first month. Exercising rights is normally free. You may object to processing based on legitimate interests; where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Portability and other rights apply where the GDPR provides for them. If identity verification is needed, we request only proportionate evidence. Lack of access to private libraries does not remove obligations regarding data actually processed by Queria.
This website
zikabu.app uses no analytics or advertising cookies. Hosting and Cloudflare process technical data such as IP addresses, requests and browser information to provide and protect the site. Fonts and assets are hosted by the site. Linked external services have their own privacy notices. Contact Queria for information on technical data and providers.
When you use the support form, Queria processes your name, email, topic, message and any device details to handle the request. Emails are sent through Cloudflare Email Service and forwarded to the support mailbox. A technical session cookie lasting one hour protects the form; pseudonymous identifiers used to limit abuse are kept for 24 hours. The pending server copy is deleted after SMTP delivery or, if delivery fails, within 7 days. Messages received in the support mailbox follow the retention rules described above.