Legal Process Guidelines
These guidelines are intended for use by law enforcement agencies when requesting information from ZUKKA.
What is ZUKKA
ZUKKA is a secure collaboration and messaging platform designed for both professional and personal use. It allows users to establish secure networks for exchanging messages, files, and other forms of communication. Senders control access to their messages, including determining who can view them and when they will expire. Encrypted messages are temporarily stored on our servers and are deleted after being downloaded to the recipient’s device(s). We do not retain plaintext copies of shared content or the keys to decrypt customer messages.
ZUKKA complies with valid and binding legal processes issued under applicable laws. We are only able to provide non-content user information, and law enforcement requests for user account information must be properly served to ZUKKA.
Required Legal Process
ZUKKA will not release customer information without a valid, legally binding request, such as a subpoena, search warrant, or other authorized legal process. ZUKKA objects to overbroad or inappropriate demands and will take action to ensure that requests are consistent with the applicable law.
Method of Service
ZUKKA accepts subpoenas, search warrants, and other legal processes only through the ZUKKA Law Enforcement Request Portal, which can be accessed at https://www.zukka.app/LER/. All legal documents must be uploaded to this portal for review and processing.
Access to the Law Enforcement Application Portal
To gain access to the Law Enforcement Application Portal, authorities must possess valid login credentials, which will be provided by ZUKKA upon request. Access will be granted following thorough communication with ZUKKA and the provision of necessary documentation and certification.
Retention Periods for Metadata
ZUKKA retains minimal metadata to protect user privacy. This includes basic account details such as account creation date, login timestamps, and message counts. Metadata is deleted regularly unless legal obligations require its retention for longer periods.
International Requests
Requests originating from outside the United States must be submitted through official Mutual Legal Assistance Treaty (MLAT) channels or accompanied by a letter rogatory. ZUKKA will only comply with such requests to the extent they align with U.S. law.
Encrypted Communication Disclaimer
ZUKKA employs end-to-end encryption and cannot decrypt, modify, or access message content. Any requests for such content are inherently unfulfillable.
User Account Suspension or Restriction
If ZUKKA receives a legally valid order requiring the suspension or restriction of a user account, the platform will carefully evaluate the request and act only in compliance with binding legal obligations.
Emergency Requests for Data
Law enforcement agencies seeking expedited data access must provide clear justification for the emergency, such as imminent threats to life or safety. Emergency requests must be submitted through ZUKKA’s emergency response portal and will be handled as a priority.
No User Activity Monitoring
ZUKKA does not monitor user activity, message content, or usage patterns beyond what is essential for operational purposes. Consequently, requests for detailed behavioral information may be restricted by the nature of the data ZUKKA collects.
Data Minimization and Privacy Commitment
ZUKKA collects only the data strictly necessary for its operations. The scope of information available for legal requests is inherently limited due to this data minimization policy.
Transparency Reports
ZUKKA is committed to transparency regarding legal requests. It plans to publish periodic transparency reports summarizing the volume and types of legal demands received (e.g., subpoenas, warrants, or emergency requests) and the percentage of requests complied with.
Currently, ZUKKA has not yet issued any transparency reports but intends to do so in the near future as its operations grow.
Preservation of Data
Upon receiving a lawful and binding request, ZUKKA will preserve the requested information for up to 90 days. Extensions may be granted with valid legal justification.
What Information Does ZUKKA Store?
ZUKKA maintains the following information about user accounts:
• Network affiliation
• ZUKKA nickname
• Email address (if provided)
• Phone number (if provided)
• Account creation date
• Types of devices used with the account
• Last usage date
• Total number of sent and received messages
• Profile picture/avatar (if provided by the user)
• Limited records of recent account setting changes, such as the addition or suspension of devices (excluding message content, routing, and delivery details)
What Must Be Included in Account Information Requests?
Requests for customer information from law enforcement must contain:
• Identifying details for the account in question, such as the user ID or nickname; and
• A clear description of the specific information being sought.
Contents of Communications Are Not Available
ZUKKA’s system is designed to protect the privacy of its users. As a result, ZUKKA does not have access to the decrypted content of messages. All content stored on ZUKKA’s platform remains encrypted and is not accessible by us.
Will ZUKKA Notify Customers of Requests for Account Information?
No, ZUKKA will not notify customers of requests for account information. Notifications will only be issued in cases where content information is disclosed. Since ZUKKA does not have access to decrypted content, no notifications are issued.