Privacy Policy
1. What data we collect
When you create an account and use Zovu, we collect:
- Account information — your email address and password (stored securely via Supabase Auth)
- Profile information — first name, age, gender, photos, bio, passions, job title, city, height, and who you are looking for
- Event data — which event you have registered for within the app
- Discovery preferences — the gender and age range you want to see in swipe mode
- Activity data — swipes, matches, messages, and reactions within the app
- Device data — browser type, device type, and push notification token (if you enable notifications)
We do not collect your precise GPS location. "Nearby" features use city-level data you provide manually.
2. How we use your data
- To show your profile to other users attending the same event
- To match you with people based on your discovery preferences
- To send push notifications about matches and messages (only if you have enabled them)
- To let you communicate with your matches inside the app
- To process future payments (e.g. unlimited likes subscription)
- To prevent abuse and keep the platform safe
3. Who we share data with
We use a small number of trusted third-party services:
- Supabase — our database, file storage, and authentication provider. Data is stored in EU data centers. Supabase Privacy Policy
- Cloudflare — CDN and DNS provider that serves getzovu.net. Cloudflare Privacy Policy
- Stripe — payment processing for subscriptions (when enabled). We never see or store your card details. Stripe Privacy Policy
We do not sell, rent, or trade your personal data to any third party, ever.
4. Your photos
Photos you upload are stored in Supabase Storage and are publicly accessible via a URL to enable in-app display. Do not upload photos you do not want to share with other Zovu users.
5. Your rights (GDPR)
If you are based in the EU or EEA, you have the following rights:
- Access — request a copy of the data we hold about you
- Correction — update inaccurate data via your profile settings
- Deletion — delete your account and all associated data from within the app (Settings → Delete Account), or by emailing us
- Portability — request your data in a machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, contact us at support@getzovu.net. We will respond within 30 days.
6. Data retention
We keep your data for as long as your account is active. When you delete your account, your profile, photos, matches, and messages are permanently deleted. Some anonymised activity logs may be retained for up to 90 days for security purposes.
7. Push notifications
If you enable push notifications, we store a device token to deliver them. You can disable notifications at any time via Settings or your device settings. Disabling notifications does not affect your account.
8. Cookies
Zovu is a Progressive Web App (PWA). We use browser storage (localStorage / sessionStorage) to keep you logged in between sessions. We do not use tracking cookies or advertising cookies.
9. Children
Zovu is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us immediately and we will remove it.
10. Security
All data is transmitted over HTTPS. Authentication is handled by Supabase Auth using industry-standard security practices. Despite our efforts, no system is perfectly secure — please use a strong, unique password.
11. Changes to this policy
We may update this policy as the app evolves. We will update the date at the top of this page when we do. Continued use of Zovu after changes constitutes acceptance of the updated policy.
12. Contact
Questions, requests, or concerns: support@getzovu.net