Privacy Policy

Effective Date: February 13, 2026

Your privacy matters. Here's exactly what we collect, why we collect it, and how we protect it.

Our Commitment

Zovia Studio ("we," "us," or "our") builds software that respects your privacy. We don't sell your data. We don't track you for advertising. We collect only what's necessary to make our apps work well. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile applications: **Zistil** (inventory management), **Zots** (counter and schedule tracker), **Zyve** (family calendar), **Zuzzle** (puzzle game), **Zupply** (smart grocery list), and **Zynq** (family check-ins).

Information We Collect

1. Account Information

When you create a Zovia account, we collect:

  • **Email address** (for sign-in, account recovery, and important app notifications)
  • **Display name** (editable by you at any time, can be a pseudonym)
  • **Authentication tokens** from Google or Apple if you sign in with those services (we receive only your email and name, not your full Google/Apple account access)
  • **Note:** Zuzzle allows anonymous play without an account. Game progress is stored locally until you choose to create an account.

2. App Data You Create

The content you create varies by app:

  • **Zistil:** Inventory items (names, categories, quantities, expiration dates), item photos, purchase details, insurance policies, serial numbers, notes, voice search queries (transcribed via Google Cloud Speech Recognition API), scanned receipts and barcodes (processed via Google Cloud Vision API)
  • **Zots:** Counter names, current counts, counter history (who incremented/decremented and when), scheduler names, scheduled times, completion records, notes
  • **Zyve:** Activity titles, descriptions, start/end times, activity types (task/meeting/event/reminder/busy block), location names and GPS coordinates (when you add locations), Google Place IDs, attendee assignments, completion status
  • **Zuzzle:** Game progress, puzzle solutions, completion times, best scores, stars earned, daily challenge completions, hints used
  • **Zupply:** Grocery list items (names, categories, quantities), scanned receipts (images processed via Google Cloud Vision API for text extraction, then parsed by Google Gemini AI for intelligent line-item recognition), receipt line items, store visits and nearby store detection (via Google Places API when you grant location permission), price history, purchase matching data
  • **Zynq:** Check-in status (active, paused, escalated), activity timestamps (when you last used your phone), "I'm Good" confirmations, optional location data (only when you choose to share it with check-ins), alert history, pause settings
  • **Spaces (all apps):** Shared space names, member email addresses, member roles, permissions, invite tokens

3. Location Data

**Zyve, Zistil, Zupply, and Zynq collect location data** when you use location-based features:

  • **Zyve:** GPS coordinates of locations you add to activities, Google Place IDs, location names/addresses, your current location (when you enable smart reminders for travel time calculations)
  • **Zistil:** Your current location (optional, for contextual reminders and weather information)
  • **Zynq:** Your current location (optional, only when you choose to include location with "I'm Good" check-ins as a Premium feature). Location is never collected automatically or in the background.
  • **Zupply:** Your current location (optional, for detecting nearby grocery stores when you use Store Mode). Location is sent to Google Places API to find stores near you. Location is only collected when you actively use Store Mode, never in the background.
  • **We do NOT:** Track your location continuously, store location history, use background location tracking, or monitor your movements.
  • **Other apps:** Zots and Zuzzle do NOT collect any location data.

4. Photo Data

**Zistil and Zupply collect photos** for receipt scanning and documentation:

  • **Zistil item photos:** Up to 3 photos (Premium) or 6 photos (Gold) per item for insurance documentation
  • **Zistil receipt photos:** Scanned receipts and purchase documentation
  • **Zupply receipt photos:** Receipt images for OCR scanning (processed via Google Cloud Vision API to extract line items and prices)
  • **Storage:** Photos are compressed and stored in Firebase Storage
  • **Other apps:** Zots, Zyve, Zynq, and Zuzzle do NOT access your camera or photo library.

5. Usage and Technical Data

To improve our apps and fix bugs, we collect:

  • **Device information:** Device model, operating system version, app version, timezone
  • **Performance data:** App crash reports, error logs (via Firebase Analytics)
  • **Feature usage:** Which screens you view, which features you use (we track that you used a feature, not what specific data you entered)
  • **Game events (Zuzzle):** Level starts, completions, failures, hint usage, session duration
  • **Weekly credit usage (Zistil):** Number of voice searches used per week
  • **We do NOT track:** Your browsing outside our apps, your behavior for advertising purposes, or sell any usage data to third parties.

6. Payment Information

When you make a purchase (subscription or one-time), payment is processed entirely by Apple App Store or Google Play Store. We receive only:

  • **Purchase confirmation:** That you purchased a specific tier or product
  • **Transaction ID:** A unique identifier from Apple/Google for verification
  • **Purchase date:** When the purchase was made
  • **Subscription status:** For apps with subscriptions (Zynq, Zupply), whether your subscription is active, expired, or canceled
  • **We NEVER see:** Your credit card numbers, billing addresses, or any payment method details. All payments are processed by Apple or Google.
  • **Subscription apps:** Zynq and Zupply offer auto-renewable monthly and yearly subscriptions, as well as lifetime (one-time) purchase options. Subscriptions auto-renew until canceled at least 24 hours before the current period ends.
  • **One-time purchase apps:** Zistil, Zots, Zyve, and Zuzzle offer lifetime purchases only with no recurring charges.

How We Use Your Information

We use your information to: • Provide core app functionality (sync across devices, offline access, real-time updates) • Enable Spaces (shared multi-user collaboration for families, roommates, teams) • Process voice searches via Google Cloud Speech Recognition API (Zistil sends voice audio to Google's cloud for transcription) • Scan receipts and barcodes using Google Cloud Vision API (Zistil and Zupply send photos to Google's AI for text extraction and product recognition) • Parse receipt text using Google Gemini AI (Zupply sends extracted receipt text to Google Gemini for intelligent line-item recognition, store identification, and price parsing — no images are sent to Gemini, only the text extracted by Vision API) • Detect nearby grocery stores using Google Places API (Zupply sends your current GPS coordinates to find stores near you when you use Store Mode) • Provide location-based features via Google Maps SDK (Zistil for contextual reminders, Zyve for activity locations) • Calculate smart travel times (Zyve sends your origin and destination to Google Distance Matrix API to get traffic data) • Provide AI-powered place summaries (Zyve sends Google Place IDs to Google Places API, which returns Gemini-generated logistics summaries) • Send you notifications (expiration reminders, scheduled task alerts, smart departure times, space activity updates) • Manage your tier benefits and weekly credit allocation • Calculate percentile rankings for Zuzzle leaderboards • Track app installs for marketing attribution via Facebook SDK (not for ads or user profiling) • Fix bugs and improve app performance • Respond to your support requests • Prevent fraud and ensure account security **We do NOT:** Sell your data to anyone, share it with advertisers, use it to build marketing profiles, or track you across other websites and apps.

How We Store and Protect Your Data

Cloud Storage

Your data is stored securely on **Back4App** (Parse Server), a trusted cloud hosting provider. All data is:

  • **Encrypted in transit** (HTTPS/TLS 1.2+)
  • **Encrypted at rest** (AES-256 encryption)
  • **Backed up regularly** to prevent data loss
  • **Access-controlled** using role-based permissions (you can only access your own data and Spaces you're a member of)
  • Photos (Zistil) are stored in Firebase Storage with the same encryption standards.

Local Storage

For offline-first functionality, data is cached locally on your device using secure device storage (iOS Keychain, Android EncryptedSharedPreferences). This local data syncs with the cloud when you're online and is deleted if you uninstall the app.

Security Measures

We implement industry-standard security practices:

  • Server-side user identity verification (prevents spoofing of user IDs)
  • Session token expiration and automatic rotation
  • Role-based access control for Spaces (owner/member permissions)
  • Private/public data separation (mark items as private to hide from space members)
  • Regular security audits and dependency updates

Third-Party Services

We use these trusted third-party services. Each service has its own privacy policy:

Back4App (Parse Server)

**What it does:** Cloud hosting and database for all user data. **Apps:** All apps use this. [Privacy Policy](https://www.back4app.com/privacy)

Firebase (Google)

**What it does:** Push notifications (FCM), crash analytics, photo storage (Zistil only). **Apps:** All apps use Firebase for notifications. Only Zistil uses it for photo storage. [Privacy Policy](https://firebase.google.com/support/privacy)

Google Sign-In / Apple Sign-In

**What it does:** Optional authentication methods. **Data received:** Email address and display name only. We do NOT get access to your full Google or Apple account. **Apps:** All apps support these sign-in methods.

Google Places API

**What it does:** Location search, business information, nearby store detection, AI-powered place summaries (using Google Gemini). **Apps:** Zyve and Zupply use this. **Zyve:** Search queries, selected Place IDs. Returns place names, addresses, coordinates, hours, ratings, Gemini-generated logistics summaries. **Zupply:** Your current GPS coordinates (when you use Store Mode). Returns nearby grocery store names, addresses, and distances. Location is only sent when you actively use Store Mode. **Data sent:** Search queries, GPS coordinates, Place IDs. **Data received:** Place names, addresses, coordinates, hours, ratings, store information. [Google Privacy Policy](https://policies.google.com/privacy)

Google Distance Matrix API

**What it does:** Calculates travel times with real-time traffic for smart departure reminders. **Apps:** Only Zyve uses this, and only when you enable "smart reminders" on an activity with a location. **Data sent:** Your current GPS coordinates, destination coordinates, travel mode (driving/walking/transit/bicycling), departure time. **Data received:** Estimated travel duration with current traffic conditions.

Google Cloud Speech Recognition API

**What it does:** Converts voice audio to text for voice search in Zistil. **Apps:** Only Zistil uses this. **Processing:** Voice audio is sent to Google Cloud Speech Recognition API for transcription. Processing happens in the cloud. **Data sent:** Voice audio snippets (only while you're actively using voice search). **Data received:** Transcribed text of what you said. **Important:** Audio is not permanently stored by Google or Zovia after processing completes. [Google Cloud Speech-to-Text Privacy](https://cloud.google.com/speech-to-text/docs/data-logging)

Google Cloud Vision API

**What it does:** AI-powered receipt scanning, barcode recognition, and text extraction from photos. **Apps:** Zistil and Zupply use this. **Data sent:** Photos you scan (receipts, barcodes, item images). **Data received:** Extracted text, recognized barcodes, product information, receipt line items. **Important:** Scanned images are sent to Google's AI for processing and are not permanently stored by Google or Zovia after processing completes. [Google Cloud Vision Privacy](https://cloud.google.com/vision/docs/data-usage)

Google Gemini AI

**What it does:** Intelligent parsing of receipt text to extract structured data (store names, line items, prices, discounts). **Apps:** Zupply and Zyve use this. **Zupply:** After Google Cloud Vision extracts raw text from a receipt image, the extracted text (not the image) is sent to Google Gemini AI for intelligent parsing. Gemini identifies individual line items, prices, store information, and transaction details. No receipt images are sent to Gemini — only the text output from Vision API. **Zyve:** Google Place IDs are sent to Google Places API, which uses Gemini to generate logistics summaries for locations. **Data sent:** Extracted receipt text (Zupply), Place IDs (Zyve). **Data received:** Structured receipt data with line items and prices (Zupply), place summaries (Zyve). **Important:** Receipt text sent to Gemini is processed in real time and is not stored by Google for model training. All processing occurs server-side through our secure cloud functions — no data is sent directly from your device to Gemini. [Google Gemini Privacy](https://ai.google.dev/gemini-api/terms)

Google Maps SDK

**What it does:** Displays maps and provides location-based features. **Apps:** Zistil (contextual reminders), Zyve (location selection for activities), Zupply (nearby store detection). **Data sent:** GPS coordinates when you use location features. [Google Privacy Policy](https://policies.google.com/privacy)

Facebook SDK

**What it does:** Attribution tracking for app installs and install sources (helps understand marketing effectiveness). **Apps:** Active in Zistil, Zyve, Zupply, and Zynq. **Data sent:** Anonymous install events (device type, install timestamp, install source), purchase events (product ID only, no payment details). **What we do NOT do:** We do not use Facebook for advertising, user profiling, or behavioral tracking. No Facebook Ads integration. No user data shared for ad targeting. [Facebook Privacy Policy](https://www.facebook.com/privacy/policy/)

Your Rights and Choices

Access Your Data

You can view all your data within each app:

  • **Zistil:** Export inventory to CSV or PDF with photos (Settings → Export)
  • **Other apps:** View all data in-app. Automated export features are not yet implemented. Contact hello@zovia.studio to request a data export.

Correct Your Data

You can edit or delete any data you create directly in the app at any time. Changes sync immediately across all your devices.

Delete Your App Data

You can delete data for a specific app while keeping your Zovia account and other apps:

  • In-app: Profile or Settings → Reset [App Name]
  • Confirm deletion
  • Your data is deleted immediately (purchase history is preserved so you can restore your tier if you reinstall)

Delete Your Entire Account

To permanently delete your Zovia account and ALL data across all apps:

  • Send email to: hello@zovia.studio
  • Subject: "Delete My Zovia Account"
  • Include the email address or phone number you use to sign in
  • List which apps you've used (Zistil, Zots, Zyve, Zuzzle, Zupply, Zynq)
  • When you delete your entire account, all your data (items, counters, activities, game progress, photos, spaces) is permanently removed from our servers. Purchase records are anonymized and retained only for fraud prevention. This deletion is permanent and cannot be undone.
  • See our [Data Deletion](/data-deletion) page for detailed instructions.

Opt Out of Notifications

You can disable push notifications in your device settings (iOS: Settings → Notifications → [App Name]) or within each app (Settings → Notifications). You can also disable specific notification types (expiration alerts, smart reminders, completion notifications) individually.

Opt Out of Analytics

**Note:** Analytics opt-out is planned but not yet implemented. Currently, all apps collect anonymous usage analytics via Firebase Analytics. We do not collect personally identifiable information in analytics events.

Data Retention

We retain your data as follows: • **Active accounts:** Data is kept indefinitely while your account is active • **Deleted app data:** Permanently deleted immediately when you delete app-specific data (purchase records are anonymized and retained) • **Deleted accounts:** All personal data permanently deleted immediately. Purchase records anonymized for fraud prevention (no longer tied to your identity). • **Inactive accounts:** Accounts with no activity for 3+ years may be deleted with 30 days advance notice via email • **Legal compliance:** Some anonymized data may be retained longer if required by law (e.g., tax records, fraud investigations) • **Backup retention:** Deleted data may remain in encrypted backups for up to 30 days before being permanently purged

Children's Privacy

Our apps are not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has created an account without parental consent, please contact us at hello@zovia.studio and we will delete the account immediately.

International Users

Zovia Studio is based in the United States. By using our apps, you consent to your data being transferred to and processed in the United States. **GDPR Rights (EU Users):** If you're in the European Union, you have additional rights under GDPR, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at hello@zovia.studio to exercise these rights. **CCPA Rights (California Users):** California residents have the right to know what personal information we collect, request deletion, and opt out of its sale. **We do NOT sell your personal information to third parties.**

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new features, or legal requirements. If we make significant changes, we'll notify you via: • In-app notification when you next open the app • Email to your registered email address • Update to the "Effective Date" at the top of this page Continued use of our apps after changes means you accept the updated policy. If you don't agree to the changes, please stop using our apps and contact us to delete your account.

Questions?

Contact us at hello@zovia.studio