Opening your next possibility…
Zimzo is currently an early product preview. This page describes the behaviour of this preview.
Selecting a photo in an editor first creates a preview inside your browser. It is uploaded only when you choose to save a photo pick or create an edit. Closing or refreshing the page clears an unsaved selection.
Free edits happen on your phone; your photo is not uploaded. The Creative Tools (Portrait Blur, Crop & Frame, Film filters and Light & Colour) open your photo in your browser and do all of the work there, with no account needed. Your photo, the edits and the result are not sent to Zimzo or to any AI provider. The browser downloads the tool code and, for Portrait Blur, a small on-device model from Zimzo’s own servers; those are ordinary file requests that contain no information from your photo. Nothing is kept: closing or refreshing the page clears the photo and your edits.
Saving downloads the finished JPEG to your device. Sharing opens your device’s share sheet, and the app you choose receives the file under its own policies. Saved JPEGs are re-drawn from the edited pixels and do not carry the original file’s metadata, such as location. Choosing an effect in “Effects” opens one of our AI effect studios with your edited photo already in it. That copy stays in this tab’s memory: nothing is uploaded, and it is gone if you close or reload the page. A photo is uploaded only if you then press Create for that effect, as described below. To suggest effects that fit, the editor checks on your device whether a person is in the photo.
Without an account, saved effects and samples stay on this device. When signed in, new saves belong to your private account and sync across devices. Moving existing device saves into an account requires choosing Import in My creations. Samples remain pre-made examples.
We count effect cards that stay at least half visible for one second, and visits to effect pages. These first-party requests contain only public effect names, event types and a random batch ID. They do not include your account, photos, cookies or referring page. No persistent visitor identifier is created. We respect browser Do Not Track and Global Privacy Control signals.
Daily counts are kept for up to 31 calendar days and are not linked to individual creations. To prevent duplicate requests and abuse, daily housekeeping removes batch IDs older than 48 hours and rotating keyed connection-address hashes older than 24 hours. These are cleanup thresholds; removal follows the scheduled cleanup. Raw connection addresses are not stored in these records. We do not send these observations to advertising services.
Supabase provides account authentication, database storage and private photo storage. We store your sign-in identity and email, saved effect choices, sample records, and photos you explicitly upload to your private library. Your photos are not sent to an AI provider when you save them. Uploaded images are resized and saved as JPEG or PNG without their original metadata. Transparent artwork stays PNG.
Private library files remain until you remove them or delete your account. Access links expire after a short period. Sign out on shared devices. Account deletion locks the collection, removes its files and then closes the account; if cleanup is interrupted, retry deletion from Account.
Saving a photo pick is optional. Its name and image stay in your private library, so you can choose it again in another editor. Using a pick prepares a copy for that edit; generation begins only when you choose Create. Deleting a pick removes the library copy. Copies already accepted for a creation are removed with that creation or when you delete your account.
A remix link shares the effect, preset and supported look settings. It does not share your photos, result, custom text, selected areas or reference images. Anyone with the link can read those look settings and try the effect using their own photos. Copying a link does not publish your creation on Zimzo.
When you choose Share, you can turn on “Show my result on the link”. Then anyone with that link can see your finished result, the effect name and a button to try the effect on their own photo. Your original photo stays private unless you also tick “Include my before photo”. The link is a long random address that only you receive; your result is not listed or searchable, and the page asks search engines not to index it. Zimzo keeps the result in its private storage and only hands a viewer a temporary address for it. Choose Stop sharing on the creation (or turn the option off) and the link stops working at once; a previously opened picture can stay on a viewer’s device or in a chat preview until it expires, which takes about a minute for the preview Zimzo serves. Deleting the creation or your account also ends the share. For each link Zimzo keeps only two anonymous counters, how often it was opened and how often someone started their own version. No viewer information is stored.
When you choose a reveal export, Vercel combines the original photo accepted for your edit and its finished result into a short branded video. This does not send another request to an AI provider. The export stays in private storage and is removed with the parent creation or your account. A video you download or share elsewhere contains both photos; Zimzo cannot remove copies you have shared outside the service.
Cloudflare delivers sign-in emails from signin@auth.zimzo.app. Supabase creates and verifies your one-time code. Your email address and the sign-in message are processed to deliver that email.
After a personal result is ready, you can rate how it turned out. We store your response, any issue categories or optional written explanation you choose, the question version and the effect version with your account. Your feedback does not publish your photo or video. Our product team can read your explanation to improve the effect. You can change or remove a vote. Removing a creation removes its feedback; deleting your account removes your votes, including any older effect requests.
We also record whether you requested a finished creation’s download link, once per creation. This does not tell us whether you saved or posted it. We combine these signals with generation failures and provider costs in private product reports to improve our effects. Removing the creation removes its download signal. We do not send these signals to advertising services.
Eligible accounts can create personalized photo effects. For AI edits, choosing Create uploads your selected photos privately and sends the required photos and instructions through Vercel AI Gateway to Google Vertex AI to make the image. Editors marked as local processing use ordinary image processing without an AI provider request. Simply selecting a photo or saving an original does not start generation. The provider’s standard retention and data-use policies apply to your photo, instructions and generated image.
Supabase stores your source photo and finished portrait privately. Vercel runs the creation job so you can leave and return. We keep the job state, recipe version and provider usage needed to deliver it and control costs. Your source and result remain until you remove the creation or delete your account. Deletion blocks new access and removes the files; interrupted transfers receive background cleanup retries. Previously issued private links expire within 60 seconds.
Essential secure cookies maintain your session. Short-lived rate-limit records use hashed email and connection information to limit sign-in abuse. We do not use your account or photos for advertising analytics.
Invited accounts can test After hours: first create and review a Neon nights portrait, then choose whether to make a five-second video. Choosing Create video makes a private copy of that portrait and sends it through Vercel AI Gateway to ByteDance. Earlier video tests used Alibaba Cloud. The provider’s standard retention and data-use policies apply to the portrait, instructions and generated video. The source link expires after 30 minutes.
Supabase stores the copied portrait and video privately. Vercel runs the job, and we store its status and provider receipt so an interrupted request can be checked without starting another paid generation. Your viewing and download links expire after 60 seconds. Removing a video deletes its copied portrait and video file; your original portrait stays in your library. Removing the original portrait after the copy is prepared keeps your video. Deleting your account removes both, with background cleanup for interrupted transfers.
Choosing Make my Outfit Change uploads your full-body photo and starts one scene with two looks. Vercel AI Gateway sends the photo to Google Vertex AI to prepare two images, using the first image alongside your original photo for continuity. The prepared images then go through Gateway to ByteDance for two short video shots. Vercel combines the shots and adds animated Zimzo branding after generation. The providers’ standard retention and data-use policies apply to the content sent to them.
Your original, intermediate images and shots, clean master and branded result stay in private Supabase storage. Your account can view the original and completed branded video; intermediate files and the clean master are server-only. Removing the scene or your account removes all seven files, with background cleanup for interrupted transfers. Provider source links expire after 30 minutes; viewing and download links expire after 60 seconds. Retrying a failed finish uses saved shots and does not send another AI request.
For invited accounts with access, choosing Make my Coffee Spill uploads your waist-up photo privately. Vercel AI Gateway sends your photo and our cup-and-café reference to Google Vertex AI to prepare one scene image. That prepared image goes through Gateway to ByteDance for a short performance. Vercel edits the performance around a pre-made coffee close-up and adds animated Zimzo branding. The close-up contains no customer photo. The providers’ standard retention and data-use policies apply to the content sent to them.
Supabase privately stores your source, prepared image, performance, clean master and branded result. Your account can view the source and completed branded video; intermediate files and the clean master are server-only. Removing the scene or your account removes all five files, with background cleanup for interrupted transfers. Provider source links expire after 30 minutes; viewing and download links expire after 60 seconds. Retrying a failed finish uses saved media and does not send another AI request.
AI provider policies determine how long submitted content is kept and whether it may be used to improve their models. Deleting a creation from Zimzo removes our stored copies; it does not change the provider’s own retention policy.
We will publish final seller details and applicable purchase terms before enabling paid credits or subscriptions. The limited creation beta does not create a subscription or use paid credits.
Vercel hosts Zimzo and may process technical request information, such as your IP address and browser details, to deliver and secure the site. This preview does not include advertising pixels or third-party marketing analytics.
For questions about your account, your photos, or your privacy, contact Zimzo at hello@zimzo.app. You can also remove your saved photos or close your account from Account when signed in.