Satori Zen Privacy Policy
Effective: 2026-08-30 · Last updated: 2026-08-30
1. Who we are
Satori Zen is made by UNIGATA INC., based in Toronto, Ontario, Canada. In this policy "we", "us" and "our" mean UNIGATA INC., and "you" means the person using Satori Zen.
Questions about this policy or your data: privacy@unigata.com
2. The short version
Satori Zen plays media from sources you already have — your own server, your own subscriptions, your own files. It does not host, sell or supply any content.
We do not advertise to you and we do not sell your data. There is no advertising SDK and no advertising identifier in Satori Zen, and there never has been.
⚠ We are not going to claim we collect nothing. Satori Zen includes SuperWall, which decides which subscription offer to show you and measures whether it worked. To do that it receives device and app-event information — see §8. It is the one component here that exists to observe behaviour, and pretending otherwise would be the kind of claim this policy is written to avoid.
🔑 We cannot read your sources. The credentials for your media providers, and your AI key, are encrypted on your device before they are stored. Our server holds ciphertext and a nonce, and can decrypt none of it.
3. What we collect, and why
| What | Why | Where it lives |
|---|---|---|
| Email address | Signing you in | Our database |
| Password | Signing you in. Stored only as a cryptographic hash — we never see it | Our authentication provider |
| Which devices you use it on | Enforcing the device limit your plan includes | Our database |
| Your subscription status | Knowing whether a feature is unlocked | Our database, and RevenueCat |
| Your provider credentials | Restoring your setup on a new device | Our database, encrypted so we cannot read them |
| Your AI key, if you add one | Restoring it on a new device | Our database, encrypted so we cannot read it |
| Your profiles, settings and library layout | Restoring your setup | Our database, encrypted so we cannot read them |
| What you watch and where you left off | Resume, and continue on another device | On your device; in the encrypted backup if you enable it |
What we do NOT collect
No location. No contacts. No advertising identifier. We never receive your card number — payment is handled entirely by Apple or Google.
4. 🔴 The AI features send data off your device
This is the part most people would not guess, so it gets its own section.
AI subtitles
When you ask Satori Zen to transcribe or translate, the audio of what you are watching is sent to an AI provider — OpenAI or Groq, whichever you configure — to be turned into text.
- It goes with YOUR key, to YOUR account, directly from your device. There is no Unigata server in that path. We do not see the audio, the transcript, or the request.
- Your relationship for that request is with the provider you chose, under their privacy policy and retention rules, not ours.
- If you add no key, the feature does not run and no audio leaves the device.
Kai
Kai, the assistant, works the same way: it uses your AI key and talks to your provider from your device. We do not proxy it and we do not receive its contents.
⚠ Think about what is on screen before transcribing it. Audio from a private recording is still audio, and sending it to a third-party AI provider is a decision only you can make.
5. 🔑 What we store, we cannot read
Your provider credentials, your AI key, your profiles and your settings are sealed on your device using authenticated encryption before they are uploaded, and only your device holds the key.
- The server stores a ciphertext and a nonce. It has no means to decrypt either.
- This means we cannot recover your setup for you if you lose access to your account. That is the trade: we cannot help, and we also cannot be compelled to hand over something we are unable to read.
6. Where your data is stored
Account and encrypted-backup data is stored with Supabase, on servers in the United States (Northern Virginia).
🔴 Your data leaves Canada. We are a Canadian company and you may well be a Canadian resident, but the data is held in the United States and is therefore subject to lawful access requests under United States law. Note that the most sensitive parts of it — your credentials and your AI key — are encrypted so that neither we nor anyone serving such a request can read them.
7. Subscriptions
Payment is handled entirely by Apple (or Google on Android). We never receive or store your card number. We store only the fact that a subscription exists, its plan, and when it expires.
We use RevenueCat to keep that record in step with the app stores. RevenueCat receives an identifier we generate for your account and the purchase events the store reports — never your name, email, or card details. It is a payment-records processor working on our behalf, not an advertiser and not an analytics service.
8. 🔴 SuperWall, and what it sees
Satori Zen uses SuperWall to present subscription offers and to measure how they perform. It is the reason the paywall can change without a new app release.
To do that, SuperWall receives from your device:
- an identifier we generate for your installation — not your name or email;
- device and app information: model, operating-system version, app version, locale;
- events about the offer itself — that a paywall was shown, dismissed, or converted.
It does not receive your media sources, your credentials, your AI key, what you watch, or the contents of anything you play. Those never leave your device except as described in §4 and §5.
⚠ This is data collection, and we are naming it rather than filing it under "analytics we don't do". If you would rather not be measured this way, the honest answer today is that the SDK is part of the app; if that changes, this section changes with it.
9. How long we keep things
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Encrypted backup (sources, AI key, settings) | Until you delete it, or delete your account |
| Registered devices | Until you remove the device, or delete your account |
| Subscription records | As long as needed for billing and tax records |
| Data on your device | Until you delete the app or clear its data |
10. Deleting your account
You can delete your account from inside the app. That removes your profile, your device registrations and your encrypted backup. An active subscription must be cancelled through Apple or Google — we cannot cancel it for you.
11. Children
Satori Zen is not directed at children and we do not knowingly collect personal information from a child under 13. What it plays comes from sources you configure, and choosing what is appropriate is yours to do.
12. Your rights
Under Canadian privacy law (PIPEDA) you may ask what we hold about you, ask us to correct it, and ask us to delete it. Write to privacy@unigata.com. ⚠ For the encrypted backup we can tell you it exists and delete it; we cannot show you its contents, because we cannot read them.
13. Changes
If this policy changes we will update the "Last updated" date. A material change will be surfaced in the app rather than left here to be discovered.
14. Contact
UNIGATA INC. · Toronto, Ontario, Canada · privacy@unigata.com
UNIGATA INC. · Toronto, Ontario, Canada · privacy@unigata.com