• Kept encrypted Encrypted at rest, and every account is isolated from every other.
• The database refuses, not just the app Every document is scoped to the account that owns it by the database itself. Zala's own code cannot ask for somebody else's.
• Deleted means destroyed Delete a document and the file itself is destroyed, backup copy included — not hidden from a list.
• Leaving is a button, not a request Download every original whenever you want, and close your account to have everything erased.

Zala holds no security certification and does not claim one. Every line above is a fact you can check. How Zala behaves