Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how Nicholas Johnson-Pope ("we," "us") collects, uses, and protects your information when you use the ZOEY. app and related services.

Information we collect

• Account information: your name, email address, and profile photo when you create an account.
• Pet information: details you add about your pets, including names, breeds, ages, photos, microchip numbers, and care notes.
• Health records: vaccination records, medications, vet visits, and other health-related information you enter.
• Care activity: care tasks you complete, schedules you create, streaks, and badges earned.
• Photos & moments: images and videos you upload to your pet profiles and moments feed.
• Location data: if you enable location features, we may collect location when you check in at Places or tag moments with a location.
• Family & social data: information about family members you invite and interactions within your family account.
• Subscription information: we use RevenueCat to manage subscriptions and verify purchases, which processes your transaction history, subscription status, and an app-specific identifier. Payments are processed by Apple through the App Store — we do not receive or store your full payment card details.
• Usage & device data: device type, app version, crash reports, and usage analytics to improve the app.

How we use your information

• To provide, operate, and improve the app and your account.
• To store and display your pets' profiles, health records, and photos.
• To calculate health scores, streaks, badges, and other app features.
• To enable family sharing and social features like leaderboards.
• To show you relevant Places and provider information based on your location.
• To process and manage subscriptions.
• To send care reminders, notifications, and service-related messages.
• To respond to support requests.
• To maintain security, prevent abuse, and meet legal obligations.

How we share information

We do not sell your personal information. We share it only with:

• Family members and keepers you choose to share with through the app's sharing features.
• Service providers who help us run the app, including Supabase (database hosting, authentication, and file storage), RevenueCat (subscription management), and our analytics and crash-reporting and push-notification providers.
• Apple's App Store for subscription billing and payment processing.
• Places & providers may see anonymized, aggregated visit data and reviews you choose to post publicly.
• Legal authorities where required by law or to protect rights and safety.

Where your data is stored

Your account and pet data are stored using Supabase, a managed backend service that provides our database, authentication, and file storage, hosted on cloud infrastructure (Amazon Web Services). Supabase acts as our service provider and processes this data on our behalf. Data is stored on servers located in the United States (US East). We limit access to stored data to what is necessary to operate the app.

Data retention & deletion

We keep your information while your account is active. You can delete your account and associated data at any time from within the app (Settings → Account → Delete account), or by emailing us. After deletion we remove your personal data within 30 days, except limited information we must retain for legal, tax, or fraud-prevention purposes.

Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest, and access controls. No system is completely secure, but we work to safeguard the data you entrust to us.

Children's privacy

ZOEY. is a general-audience app intended for adults. Child accounts can only be created and managed by a parent or guardian within a Family plan. When a parent or guardian adds a child, they provide the child's age, which determines the child's privileges and how we handle their information:

• Children under 13: the account is limited to reduced privileges — the child can complete assigned care activities only, and cannot upload profile photos or post content. For these accounts we collect only the child's name, provided by the parent or guardian at setup; we do not collect an email address or other contact information for the child. The parent or guardian provides consent for this collection when creating the account and can review, edit, or delete the child's information at any time from the Family account settings.
• Ages 13 and older: the account has standard child-account privileges within the Family plan.

Retention of a child's information. We keep a child's information only for as long as the Child account is active and only as long as reasonably necessary to provide it. When a parent deletes the Child account or revokes consent, we delete the child's personal information within 30 days and purge it from backups on a rolling basis thereafter. This deletion is performed automatically on the stated timeframe.

We do not knowingly collect personal information from children under 13 except as described above, and we do not require a child to provide more information than is reasonably necessary to participate. If you believe a child has provided us personal information without parental consent, contact us at support@thezoeyapp.com and we will delete it.

Notice to Parents (Children Under 13)

This notice describes the information ZOEY. collects from a child under 13 through a Child account. It is provided to you, the parent or guardian, in the app before you create the account, and you must review and agree to it as part of setup.

• What we collect from your child: your child's first name, which you enter at setup, and a limited account/device identifier used only to sign your child in and keep the app operating and secure. We do not collect an email address, photos, videos, posts, precise location, or other contact information from a Child account.
• How we use it: only to provide the Child account's features (letting your child complete the care activities you assign) and to support the internal operations of the app, such as authentication, security, and basic functioning. We never use a child's information for advertising, marketing, profiling, or behavioral tracking.
• Who we share it with: we do not sell your child's information or share it with third parties for their own purposes. We use it only with service providers that operate the app on our behalf (for example, our hosting provider) under confidentiality obligations.
• Your consent is required: we will not collect any personal information from your child unless you consent, which you do by creating the Child account. If you do not consent, we will not create the account or collect the information.
• Your ongoing choices: at any time you can review your child's information, correct it, delete it, and revoke your consent to stop any further collection — from Family account settings, or by emailing support@thezoeyapp.com.
• How long we keep it: we retain your child's information only while the Child account is active, and delete it within 30 days after you delete the account or revoke consent.

For complete details about our data practices, see our Privacy Policy above.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, email support@thezoeyapp.com.

Changes to this policy

We may update this policy from time to time. We'll post the new version here and update the "Last updated" date. Material changes will be communicated through the app.

Contact

Questions about privacy? Email support@thezoeyapp.com or write to Nicholas Johnson-Pope.