Privacy & permissions

The short version. No spyware. No accounts. No servers. Zenith has nowhere to send your data and never will — there is no "us" to send it to. This page is the honest, exact version of that: what stays on your device, the little that can leave, and why each permission is asked for.

#What stays on your device

Everything Zenith keeps lives in the app's own private storage on your phone. None of it is uploaded. That includes:

• Your star charts — the layout of each sky.
• Your settings.
• Your talismans — your gesture shortcuts.
• Your custom icons.
• Your ask the sky chat history, when you turn memory on.

A backup file is written only when you export one, to a location you choose. Nothing is written off-device on its own.

#What can leave — and only if you allow it

Zenith can send data off your phone in a small number of ways. Each is opt-in, and each goes straight to the service, never to Zenith.

Weather and my sky. When you turn on the weather overlay or my sky — the live real-sky wallpaper — Zenith asks Open-Meteo, a public weather service, for current conditions. It sends an approximate location: your latitude and longitude, each rounded to about a kilometer. The rounding happens before the request, so your precise position never leaves the phone. No name, no account, no identifier — and no request at all while weather is off.

Ask the sky. The AI assistant sends nothing until you add your own provider key. When you do, your message, the assistant's instructions, and its list of tools are sent directly to the provider you chose — under your own key. Zenith, Black Syntax, and Friend Castle never receive or store it; it goes to the provider, whose privacy policy and your key's terms then govern it. The first time you send to a given provider, Zenith shows a one-time disclosure sheet naming exactly what is sent and to whom, and sends nothing unless you accept. You can withdraw that consent per provider, or all at once, on the privacy settings page. An on-device model, if you use one, has no network path, so it never prompts and never sends.

#The permissions, and why each is asked for

Every permission is optional — the launcher runs without any of them. Zenith asks for a permission only when you turn on the feature that needs it.

• Internet — the app's only network path. Used for the weather request and, if you set a key, ask the sky. Nothing is sent automatically.
• Location (coarse) — an approximate, city-block-level fix for weather and the real night sky. It is rounded before use and never stored.
• Calendar (read) — powers the next-event overlay only. The event is read and shown on your phone, never sent.
• Notification access — turns your notifications into comets — the notes drifting across the sky. They're shown on your device only, never stored, never sent.
• Accessibility (zenith actions) — an assistive input method that lets your gestures do system things, like locking the screen or opening the notification shade. It reads nothing from your screen — it only performs the actions you assign.
• Vibrate — haptic feedback.

Zenith also draws the quick ring bubble over other apps and runs a small background service to host it, and it can remove apps you uninstall from deep sky. Inside the Zenith Suite, a signature-protected channel lets co-signed sibling apps on the same phone share Gold, keys, settings, and the Shuttle — this stays between apps on your device and reaches no server.

A note on accessibility. Zenith's accessibility service performs actions but is built to inspect nothing: the system does not hand it your screen content, and its event handler does nothing. This "reads nothing" stance is exact for that service. It is not a claim that no data ever leaves the phone — the weather and ask the sky paths above do send data, on your say-so.

#AI content safety stays on-device too

Ask the sky is screened by an on-device gate before a request reaches the model and before a reply is shown. A blocked request never reaches the model, and nothing about this screening leaves your phone. If you report a reply, its wording is added to a local block list the gate consults next time — again, on-device only. Each reply also carries a reminder: "✦ AI-generated — verify anything that matters."

See also. AI safety — Zenith Guard · Set up Ask the Sky · Backup, restore & reset · About Zenith Launcher