Privacy policy

1. Data controller

ZenConstat is published by Anthony Arade, as an individual. Contact: [email protected].

2. No account, data stored on your phone

ZenConstat requires no account or sign-up. What you enter is stored only in the app's own storage, on your phone:

• Your cards: insured persons (surname, first name, address, postal code, country, phone or email and, depending on the report's country, patronymic, company name or tax code), drivers (identity, date of birth, contact details, driving licence), vehicles and trailers (make, registration number, country) and insurances (company, policy number, green card, agency).
• The report in progress: date, time and place of the accident, injuries and damage, witnesses (name, phone, address), circumstances, points of impact, description and photos of the damage, sketch, remarks and signatures.

The report in progress is erased from the app as soon as its PDF document is ready. Your cards stay saved until you delete them or uninstall the app.

3. Phone permissions

• Location: used only when you tap “Locate me”, to fill in the place of the accident. Your position is turned into an address by your phone's geocoding service (on most Android devices, a Google service). Only the resulting address is saved, never your coordinates.
• Camera and photos: used when you take or choose a photo of the sketch or of the damage. Images are copied into the app and are not published.

You can refuse or withdraw these permissions at any time in your phone's settings; the rest of the app keeps working.

4. Creating the PDF document

For a report with one driver, or with two drivers on the same phone, the PDF is created directly on your phone, without a connection. If that fails, the app may offer to send the report to our server instead: it is used there only to produce the document and is not kept, and nothing is sent unless you choose to. The PDF is then saved, opened or shared only when you ask, with the apps or people you choose (for example your insurer).

5. Two drivers on two phones

In this mode, each phone sends its part of the report to our server so that the two can be combined into one document: the report details, the sketch, that driver's signature and damage photos, a pairing code and a random identifier specific to your installation of the app.

• Transfers are always encrypted (HTTPS) and restricted to the app.
• Our server is hosted in the European Union by Laravel Cloud.
• The report parts and the generated documents are kept temporarily on our server for no more than 60 minutes, while both phones collect them, and are then deleted.
• The pairing code stays linked to the random installation identifier until the code is given to another report. Neither can be used to identify you.
• The server's technical logs may contain that code and identifier, never the content of the report, and are kept for no more than 30 days.

6. The assistant (ZenAssistant)

ZenAssistant is an optional mode that fills in the report for you from a conversation. It only works when you choose it, with an internet connection.

• What is sent: the messages you type or dictate, the photos of documents you choose to share (insurance certificate, registration certificate, driving licence) and the details of the report already filled in, so the assistant can ask the right questions. Dictation uses your phone's speech recognition (on most Android devices, a Google service); the app only receives the text.
• Who processes it: our server (Laravel Cloud, in the European Union) passes it to Anthropic PBC (United States), which provides the artificial intelligence model and acts as our processor. Anthropic does not use this data to train its models and keeps it only for a limited time, under its commercial terms. This transfer outside the European Union is covered by the European Commission's standard contractual clauses.
• What we keep: our server keeps neither your messages nor your photos. It keeps only the conversation's technical details (language, status, usage counters) for 3 months, and your credit balance and history, linked to a random installation identifier that cannot identify you. Your credit history is kept for 24 months; your balance is kept as long as you have credits left, and an installation with no credits and no activity for 24 months is deleted.
• Reports: if you report a reply, that reply and the reason you choose are sent to us so we can review it. They are kept for 12 months at most.
• Protection: to prevent abuse, Google Play Integrity checks that requests come from the genuine app installed from Google Play.
• Usage tracking: for each exchange, our server records the model used and the amount of text processed, to follow the service's costs — never the content.

The assistant can make mistakes: you check every section, and the sketch, before signing.

7. Usage statistics and error reports

When the PDF of a report is ready, the app sends our server a short anonymous record: the country of the accident (as a two-letter code), the mode (one driver, two drivers on one phone or two phones), whether the assistant was used, and the time. Nothing else: no place, no names, nothing from your cards, nothing that identifies your phone. If your phone is offline, the record waits in the app and is sent the next time it is online.

We use these statistics to know in which countries and how the app is used. They are kept by our hosting provider (Laravel Cloud, in the European Union) for 24 months, then deleted.

When the app or our server runs into an error (for example, the app closing unexpectedly), a technical report is sent to Sentry (Functional Software, Inc.), which hosts it for us in the European Union. The report describes what happened: the error message and the place in the code concerned, the app version, the Android version, the phone model and a random identifier specific to the installation, unrelated to your identity. It never contains the content of your report: no names, addresses, number plates, photos, signature, messages to the assistant or screenshots.

We use these reports only to detect and fix problems. Sentry keeps them for 30 days, then deletes them.

8. Advertising

ZenConstat is free and shows one full-screen ad before handing over the document, provided by Google AdMob. To show and measure these ads, Google may collect information about your device, including the advertising ID, IP address, device model and your interaction with the ad. Google acts under its own privacy rules: https://policies.google.com/privacy and https://policies.google.com/technologies/ads.

You can reset or delete your advertising ID, or opt out of personalised ads, in your phone's settings (usually under Google or Privacy, then Ads).

9. Import, export and backup

• Export and import: when you export your cards, a file is created where you choose; when you import, the app reads only the file you select. We have no access to it.
• Android backup: if backup is turned on for your phone, Android may include your cards in your Google account's backup, under Google's rules. The report in progress and photos are not included.

10. Legal bases

• Performing the service you ask for: preparing and producing your report, and combining both parts in the two-phone mode.
• Your consent: for location, the camera and, where the law requires it, personalised ads.
• Our legitimate interest: the security and proper running of the service (technical logs).
• For the assistant: performing the service you ask for when you choose it; protecting the service against abuse (Play Integrity, reports) is our legitimate interest.
• Usage statistics: our legitimate interest in knowing where and how the app is used.
• Error reports: our legitimate interest in keeping the app working properly and fixing its faults.

11. Who may receive your data

We never sell or rent your data. It is only passed to: our hosting provider (Laravel Cloud, in the European Union) in the two-phone mode; Google, for ads and, where applicable, turning your position into an address; and the people or apps you yourself choose to share the PDF with. Google may process some data outside the European Union, with the safeguards set out in its own policies.

When you use the assistant, your messages and document photos are also processed on our behalf by Anthropic (United States), and Google checks the app's integrity and, if you dictate, recognises your speech.

The usage statistics described in section 7 are kept only by our hosting provider (Laravel Cloud, in the European Union).

The error reports described in section 7 are processed on our behalf by Sentry (Functional Software, Inc.), in the European Union.

12. Security

The app's data is stored in the app's private space on your phone. Exchanges with our server are encrypted, and the PDF created on your phone is protected against modification.

13. Your rights

Under the GDPR, you have the right to access, rectify and erase your data, to restrict and object to its processing, to data portability and to withdraw your consent at any time. As most of your data only exists on your phone, you can view, change, export or delete it directly in the app, or erase all of it by uninstalling the app. For any request, write to [email protected]. You may also lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.

14. Children

ZenConstat is intended for drivers involved in an accident and is not directed at children.

15. Changes

This policy may change, in particular when the app does. The date of the last update is shown at the top of this page; for a significant change, we will let you know in the app or on its Google Play page.