Summary
ZeroBound LLC provides Elyndo, an academic planner for Mac, iPhone and iPad. Elyndo has no advertising or third-party analytics SDKs and does not track you across other companies’ apps or websites.
- Your saved planner lives on your devices and, when available, in your private iCloud account.
- When you authorize an AI read or revision, selected syllabus and planner information passes through Elyndo’s service to the named processor.
- Elyndo keeps account, purchase and reading records to maintain credits and resume paid reads. Deleting the planner does not delete these separate service records.
On your devices and iCloud
Your planner includes courses, tasks, notes, schedules, objectives, tracked time, saved views and imported documents. Elyndo stores this on your device and syncs it through your private iCloud account when available. Some preferences also sync through iCloud. ZeroBound LLC does not have access to your private iCloud planner through its server. Information you choose to share for AI processing is a separate data flow described below.
Syllabus reading and AI revisions
Choosing a file stages it for review; buying or refreshing credits does not start a read. Before sharing, Elyndo asks for processor-specific permission. DeepSeek receives syllabus text. Anthropic receives the original photo or scanned document and any extracted text. A scan also requires confirmation of its three-credit cost.
The request includes the file name, type and page count; today’s date, time zone and week start; and relevant course information, including its name, term, dates, section, meetings and existing task titles, kinds and deadlines. Revisions include your answers and the current extracted schedule, including your edits. Other courses’ major deadlines and course or label names are sent only if you enable cross-course clash checking, which is off by default.
Elyndo’s gateway forwards this information and returns the result to your device. Its database does not store the document, prompt or AI response body. Selected context can contain personal information, so review it before authorizing a read. You can decline and use the planner without AI.
DeepSeek: Elyndo uses the Open Platform API. We have not verified an API-specific retention period, training policy or processing location for downstream user content. DeepSeek’s general consumer privacy policy excludes this downstream API processing; it does not establish those facts. We do not promise zero retention or no training. See the DeepSeek Open Platform terms.
Anthropic: its standard commercial API policy permits retention of inputs and outputs for up to 30 days, with exceptions for policy enforcement, law and particular features or agreements. Flagged content can remain for up to two years, and safety classification scores for up to seven years. Commercial data is not used for model training by default; feedback or an explicit opt-in can change that. We have not verified a special zero-retention agreement. See Anthropic’s retention policy and training policy.
These processors have their own terms and practices. See the AI guide for the read and consent flow. We do not promise that processing stays in the United States.
Purchases and credit records
Apple processes app and credit-pack payments. Elyndo verifies Apple’s signed transaction information; it does not receive your payment-card details. The service keeps an environment-specific app-transaction identity, starter-credit flag, balance and timestamps. Purchases add a transaction identifier, product, quantity, granted credits and dates. Consumable packs belong to their purchaser; family members have separate balances.
A paid read has an intake identifier and idempotency key, account link, read type, processor, model, credit cost, request count, timestamps and a SHA-256 source digest. The digest binds retries to the same source and can link a record to a known document; it is not anonymous. Short-lived authorization tokens are stored as hashes, expire after 45 minutes and are replaced when a saved read resumes. Raw signed Apple transactions are verified rather than stored in these ledger tables.
Calendars, Reminders and notifications
With your permission, Elyndo reads the calendars and Reminders lists you choose and can write timeboxes or tasks to them through Apple’s frameworks. Elyndo’s service does not receive those integration databases. Tasks you bring into the planner can form part of the selected AI context described above. Notifications are scheduled on your device. You can change these permissions in system settings.
Service retention, hosting and support
Active credit-account, purchase and intake records remain while needed to preserve nonexpiring credits, prevent duplicate grants and resume paid reads. They are not automatically erased when you remove a syllabus or delete your planner. You can delete the credit account itself in the app, as described under Your choices.
Service maintenance removes expired authorization-token rows hourly and sandbox usage records older than 30 UTC days. A daily boundary and the maintenance interval can extend sandbox history to about 31 days. Database outages can delay removal; the service retries cleanup after recovery.
The existing service and credit database are hosted by DigitalOcean in New York. Application diagnostics use fixed error codes rather than document bodies, purchase credentials or raw provider errors. No external log-forwarding destination is configured. Hosting and network providers receive connection information, such as IP addresses, and may process security or diagnostic information. Their retention of that information follows their own policies.
DigitalOcean documents daily managed PostgreSQL backups with a seven-day retention window. If a database is restored from backup, completed deletion requests are reapplied before it serves traffic.
If you contact support, Microsoft 365 handles your email address, message and anything you attach. Send only what is necessary; do not send passwords, raw purchase receipts or private syllabi for routine troubleshooting. Our selected retention rule is to remove resolved routine support correspondence after 12 months, with documented exceptions for active disputes or required retention.
Your choices and privacy requests
- Decline AI sharing, or withdraw permission in Settings › AI & Credits. The next read or revision will ask again; withdrawal cannot recall information already sent.
- Turn off cross-course clash checking to keep other courses’ context out of subsequent AI requests.
- Delete planner data from Elyndo and manage iCloud data in system settings. Read the all-device deletion warning before confirming.
- Use Settings → Data → Export credit records to export your authenticated service metadata. It excludes planner/iCloud data, support messages, processor-held content and infrastructure logs.
- Use Settings → Data → Delete credit account to delete your credit account. Elyndo shows your unused balance first. Deleting gives up unused credits and paid-read resumption, makes purchases made before deletion ineligible for credits, and removes your account, purchase, reading and authorization records from Elyndo’s service. It does not issue an Apple refund or delete your planner. To prevent another starter grant, reuse of old purchases and automatic account recreation, Elyndo keeps a protected identifier, the deletion date and a purchase cutoff date for the lifetime of the credit service. This record remains associated with your App Store identity; it is not anonymous. You can reopen the account later with zero credits.
- For other privacy questions and records outside the in-app export and deletion, contact [email protected]. Never email a raw signed transaction, password or authorization token.
We aim to acknowledge privacy requests within seven days and resolve them within 30 days, subject to applicable deadlines and necessary identity checks. We will explain any records that need to remain for purchase integrity, disputes or legal obligations.
Children and families
Elyndo is designed for academic planning, with a focus on college students. It does not impose a minimum user age. AI sharing is optional and requires the permission described above. Parents or guardians can contact support about a child’s information or privacy rights.
Changes
We will update this page and its effective date when this policy changes. Material changes to AI processors, shared information or privacy disclosures require renewed in-app permission.
Contact
ZeroBound LLC · [email protected].