Your notes belong to you.

01Provider and contact

Responsible for this website and for the ZimeZumi app is Nico Plagemann, who operates under the brand name Post Hope Production as an individual developer.

Nico Plagemann · Post Hope Production
Rua das Trinas 34
1200-858 Lisboa
Portugal

Contact for support and privacy: help@posthopeproduction.com. Full provider details are in the legal notice.

02Scope

This version describes ZimeZumi for Mac as well as ZimeZumi for iPhone and iPad. Features differ per platform; the respective scope is described on the Features and Mobile pages.

03What is processed on your device

ZimeZumi processes the notes and files you create, select or import: text, folder and file names, timestamps, tags, markers, pins, internal references, images, PDFs and other attachments. On the Mac, board drawings and their source references are added.

Notes are HTML files in the selected vault. The app also processes local settings, the chosen vault path or the folder permission protected by the operating system, and feature-related preview and temporary data. Exports can create additional files outside the vault.

Creating, reading, searching and editing locally available notes requires no ZimeZumi account. The reviewed app state contains no sign-in of its own, no built-in advertising or analytics SDKs and no integrated telemetry sent to the developer. ZimeZumi operates no necessary server-side note storage.

04File and cloud services you choose

If the vault sits in iCloud Drive or another synchronised folder, the service you chose processes those files under its own terms. That synchronisation is the user's decision and not a ZimeZumi cloud.

Only locally available files are accessible without a network. Backups, version history and deletion periods of the file service are not determined by ZimeZumi.

05External links, previews and images

On the Mac, pasting a web address can trigger a link preview and the retrieval of preview images. Notes can also contain external images or other external resources. When such content is retrieved, and when a link is opened, the target providers can receive in particular the IP address, the requested address, the time and technical request data. Addresses themselves can contain personal information.

These connections go to the respective target providers, not to a ZimeZumi note server. Store sensitive content without external embeds if you want to avoid such requests. A local vault does not mean that every optional feature works without a network.

06AI text actions through your own AI program

On the Mac, ZimeZumi can hand selected text to an AI program that you installed yourself and signed in with your own account: Claude Code by Anthropic or Codex by OpenAI. This only happens when you trigger an AI action.

What is handed over is the selected text, at most 8,000 characters, and, if you write one, your instruction of at most 300 characters. Note titles, other notes, files or the vault are not handed over. The program runs without tools and without access to your files.

The AI program sends the text to its provider through your account.

Processing, storage and any use for training are governed by the terms and settings of your account with Anthropic or OpenAI. ZimeZumi and Post Hope Production receive no content, no credentials and no usage data in the process.

In Settings ZimeZumi only stores the provider, the model and, if needed, the program path on your Mac, no texts, instructions or credentials. You can also switch the feature off there.

07AI connection through MCP

The MCP server on the Mac runs locally and is deliberately set up with a compatible AI client and a vault. It is switched off by default. Through its tools the client can receive requested notes, search results and metadata. Which read and write actions are allowed is determined by the setup and the permissions of that client; ZimeZumi adds file, conflict and write-protection limits.

A local MCP server does not make a connected cloud model local.

The AI client can pass received content to its model provider or to further configured services. In this state ZimeZumi contains no cloud model of its own. Only process sensitive content with a configuration chosen deliberately for that purpose. The AI provider's own terms and settings govern processing, storage and any use for training.

08Operating system and extensions

Use the share menu on iPhone and iPad to send photos, links and other attachments to ZimeZumi. They are saved in the INBOX of your vault. Browser capture on the Mac provides an additional route for content from the browser. The local capture connection does not replace a general cloud service. Browsers and the websites you visit have their own data processing.

The dictation button on the Mac starts the macOS system dictation. Whether speech is processed locally or sent to Apple depends on the device, language and system settings. Apple describes the details in its notes on Siri, dictation and privacy. ZimeZumi provides no speech recognition cloud of its own. When you create a note with Siri on iPhone or iPad, Siri processes your speech under Apple's terms; ZimeZumi saves the recognised title and text as a note in your INBOX.

When you export content, send it by email or hand it to another app, the recipient or service you chose receives that data. A portable HTML note can also contain embedded attachments, so check its full content before sharing.

09Support requests

If you contact us by email, your sender address, the message and any files you attach voluntarily are processed in order to handle the request. Please do not send complete private vaults, credentials or sensitive attachments when they are not needed for the question.

The mailbox help@posthopeproduction.com is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, which therefore also processes incoming messages. No second provider is involved and no transfer to a third country takes place.

Depending on the request, the legal basis may be the handling of pre-contractual or contractual matters under Art. 6(1)(b) GDPR, or the legitimate interest in answering other enquiries under (f).

Your enquiry is deleted once it has been dealt with, unless statutory retention obligations require otherwise.

10This website

This website consists of static HTML pages, one local CSS file, one small local JavaScript file for fade-ins while scrolling, and locally hosted images, short films, icons and font files. It contains no contact form, no externally loaded fonts, no advertising pixels and no analytics scripts, and it sets no cookies or browser storage entries of its own. Clicking an external link opens that provider.

These pages are hosted by STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin) and embed no external services: no fonts from third-party servers, no maps, no videos from third-party platforms, no analytics tools, no cookies. The short films are stored on the same server as the site, and a film file is only loaded when a film is started. When a page is requested, the host stores technically necessary server logs (among others the IP address, the time, the file requested and the browser identification) in order to keep the service running; the legal basis is Article 6(1)(f) GDPR.

The servers are located within the European Union. STRATO does not disclose the exact locations for security reasons. No transfer to a third country takes place.

By its own account, STRATO keeps visitors' IP addresses for at most seven days, to detect and fend off attacks.

The download buttons lead to the download page on posthopeproduction.com. There, downloads are counted without personal data, and you can voluntarily sign up for update emails (double opt-in, sent via Brevo). Details are in section 14 of the privacy policy at posthopeproduction.com/kendoshi/privacy.

11Control, deletion and security

You control the files in the selected vault and can manage copies, exports and cloud synchronisation yourself. Removing the app does not automatically delete an externally selected vault or copies you have already shared. Check your own backups and your file service's retention rules as well.

Note write protection guards against changes in supported ZimeZumi operations. It is not file encryption. Protecting the device, the user account, backups and shared folders remains important. No complete security guarantee is given.

12Your rights

Where the respective conditions are met, you can request access, rectification, erasure, restriction and data portability, and object to processing. You can withdraw consent with effect for the future. You can lodge a complaint with a competent supervisory authority; for Portugal that is the Comissão Nacional de Proteção de Dados (CNPD).

For content stored purely locally there is no central ZimeZumi data set that the developer could retrieve on your behalf.

13Changes

This notice has to be updated when the app, the services used or the operation of the website change. Version date: 29 September 2026.

This text is not legal advice and should be reviewed by a lawyer before public operation.