Privacy Policy

Zentally (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile application and related services (collectively, the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your email address and display name. You may optionally provide a phone number and profile photo.

Financial Data

We collect expense descriptions, amounts, currencies, dates, split information, and settlement records that you voluntarily enter into the Service. This data is essential for the Service to function.

Device Information

We collect device identifiers, operating system version, and push notification tokens to deliver notifications and ensure app compatibility.

Usage Data

We collect anonymized analytics about how you use the Service, including screen views, feature usage, and error reports via Sentry.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process and display your expenses, balances, and settlements
• To send push notifications about expenses and payment reminders
• To convert currencies using real-time exchange rates
• To respond to support requests
• To detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored on Supabase, a cloud platform built on PostgreSQL. Data is encrypted at rest and in transit using TLS 1.2+. We use row-level security policies to ensure you can only access your own data and data shared with your groups.

Authentication tokens are stored securely using platform-specific secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).

4. Third-Party Services

We use the following third-party services:

• Supabase — Database, authentication, and file storage
• ExchangeRate-API — Real-time currency exchange rates
• Sentry — Error tracking and performance monitoring
• Expo — Push notification delivery

These services have their own privacy policies. We encourage you to review them.

5. Data Sharing

We do not sell your personal data. We share information only in the following circumstances:

• With other users in your groups or individual connections, limited to expense and balance data
• With third-party service providers as described above
• When required by law or to protect our legal rights

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise these rights, email us at privacy@zentally.co.

7. Data Deletion

You can delete your account from the Profile settings in the app. Upon deletion, we will remove your personal data within 30 days. Some anonymized data may be retained for analytics purposes. Transaction data shared with other users will be retained for their records but your personal identifiers will be removed.

8. Cookies

Our mobile app does not use cookies. Our marketing website (zentally.co) uses essential cookies for functionality and anonymized analytics cookies. No advertising cookies are used.

9. Children’s Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or email. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: privacy@zentally.co