Privacy Policy

Zoey is a family coordination app: shared lists, calendars, posts, chats, and chores for your household. We treat your family's data with the care it deserves. This policy explains what we collect, how we use it, who we share it with (very few), and how you and your family can exercise your rights.

If you have questions, email us at privacy@zoeyorganizer.com.

1. Who we are

Zoey is operated by the team behind https://zoeyorganizer.com. Contact: privacy@zoeyorganizer.com.

2. What we collect

We collect only what's needed for the app to work. Specifically:

• Account info: email address, name or nickname, optional avatar photo
• Profile info: birthdate (if you choose to enter one), member type (adult / child / pet / etc.), allergies, and personal notes you record
• Household data: the posts, replies, chat messages, calendar events, chores, shopping/grocery lists, responsibilities and claims, photos, and other content you create
• Subscription state: your current tier and renewal status (we don't see card numbers — those go directly to Stripe)
• Device tokens: push notification tokens so we can deliver alerts to your signed-in devices
• Coarse location: only if you enable household member location sharing — never precise location
• Diagnostics: crash logs and basic usage events (screen views, app opens) auto-collected by Firebase Crashlytics and Firebase Analytics, used to fix bugs and understand which features are used

We do not collect: payment card numbers, precise location, contacts, microphone audio, browsing history, search history, health records, or advertising identifiers.

3. How we use your data

• To run the app — show you your household, deliver push notifications, sync data across devices
• To suggest meals and weekend plans using AI (your grocery items + family preferences are sent to our AI provider Anthropic for that one request; results are stored in your household, not used to train models)
• To process subscriptions via Stripe
• To diagnose and fix bugs (crash logs, performance data)
• To understand which features people use, in aggregate (Firebase Analytics)

We do not sell your personal data, share it with advertisers, or use it for cross-app tracking. We do not show ads.

4. Who we share data with

Zoey uses a small number of trusted vendors who process data on our behalf under data-processing agreements:

• Google Firebase — authentication, real-time database (Firestore), file storage, push messaging, crash reporting, analytics
• Stripe — subscription billing (we never see card numbers; Stripe is the payment processor of record)
• Anthropic — AI meal and weekend suggestion generation (your grocery items + family meal preferences are sent for the suggestion request; Anthropic does not train models on this data per our agreement)
• WeatherAPI.com — weather forecasts for weekend suggestions (we send your area, not your identity)

We may also share information when legally required (e.g., subpoena), or to protect rights and safety.

5. Children's privacy (COPPA)

Zoey is designed for families and supports child member profiles managed by an adult in the household. Children under 13 in the United States are protected by the Children's Online Privacy Protection Act (COPPA). Here's how we handle their data:

• An adult member of the household is required to add a child profile and provides parental consent at the time the child is added
• Data we collect about a child mirrors what we collect about adult members: name or nickname, birthdate (optional), avatar (optional), allergies, profile notes, and any household content the child creates (posts, replies, chat messages, claim photos)
• We do not knowingly collect from children under 13 outside of this parent-managed flow
• We do not show advertising to anyone, including children
• We do not sell, rent, or otherwise share children's personal data with third parties for advertising or marketing
• Children's data is shared only with the same trusted vendors listed in Section 4, all of whom are configured to comply with COPPA

Parents' rights

If you are a parent or legal guardian, you have the right to:

• Review the personal data we have collected about your child
• Have us delete the personal data we have collected about your child
• Refuse further collection or use of your child's data

To exercise any of these rights, email privacy@zoeyorganizer.com from the email address associated with your account. We respond within 30 days. You can also remove a child profile from your household directly in the app, which removes that child's data from active surfaces immediately.

If we learn that we have collected personal data from a child under 13 without verifiable parental consent, we will delete that data promptly.

6. Users in the EU and UK (GDPR / UK GDPR)

If you are in the EU, UK, or another region with similar privacy laws, you have additional rights:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure ("right to be forgotten") — have your account and data deleted
• Portability — receive your data in a machine-readable format
• Restriction / Objection — limit how we use your data
• Withdraw consent at any time without affecting prior processing
• Lodge a complaint with your local data protection authority

For users under the age of digital consent in their country (13–16 depending on member state), parental consent is required, exercised the same way as the COPPA flow described above.

Our legal basis for processing is your consent (when you sign up and use the app) and contractual necessity (to provide the service you asked for). To exercise any right, contact privacy@zoeyorganizer.com.

7. Account deletion and data retention

You can delete your Zoey account at any time from inside the app (Account → Privacy → Delete my account) or by contacting privacy@zoeyorganizer.com. Account deletion:

• Removes your profile, login, and avatar
• Anonymizes posts, replies, and chat messages you authored in shared households (so other family members' replies remain coherent)
• Cancels your active subscription and removes your billing record from Zoey (the Stripe customer record is retained for tax / accounting purposes per Stripe's terms)
• If you are the sole adult in any household, deletes that household entirely along with all child and pet profiles in it
• Removes you from any shared households where other adults remain

We retain backups for up to 30 days to allow recovery from operational incidents. After that, deleted data is unrecoverable.

While your account is active, we keep your data for as long as it's needed to provide the service. Diagnostic data (crash logs, analytics events) is kept for up to 14 months by Firebase per their default retention.

8. Data security

All data is transmitted over HTTPS. Data at rest in Firestore and Firebase Storage is encrypted by Google. Authentication is handled by Firebase Auth, supporting email/password, Sign in with Apple, and Sign in with Google.

We use Firestore Security Rules to enforce that household data is only accessible to members of that household. We continuously audit and tighten these rules as part of our development process.

9. Cookies and tracking

On https://zoeyorganizer.com we use Google Analytics 4 to understand which marketing pages people visit. The web app at app.zoeyorganizer.com uses cookies only for authentication. We do not use cross-site tracking cookies, advertising pixels, or third-party tracking. The iOS app does not show an App Tracking Transparency prompt because we do not track users across other companies' apps and websites.

10. Affiliate links

Some links in the Zoey app go to retailer storefronts (currently Amazon) using Zoey's affiliate program identifiers. When you tap one of these links and complete a purchase, the retailer may pay Zoey a commission at no additional cost to you. As an Amazon Associate, Zoey earns from qualifying purchases.

Zoey does not share any personal information with retailers as part of this program — we only attach a static identifier to the outbound URL so the retailer knows the visit came from Zoey. We do not receive any details about which products you buy, your payment information, or your retailer account.

Affiliate-link buttons are only shown to adult members of your household. Children and other member types do not see them.

11. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date at the top and, for significant changes, notify you in-app or by email. Continuing to use Zoey after a change constitutes acceptance of the updated policy.

12. Contact

Questions, requests, or concerns about your privacy? Email privacy@zoeyorganizer.com and we'll respond within 30 days.