Skip to content
ZukiBack to Home

Privacy Policy

Last updated: October 20, 2026

1. Introduction

Zuki Ltd. ("Zuki," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile applications and website (collectively, the "Service").

By using the Service, you consent to the practices described in this Privacy Policy. Analytics cookies on our website are the exception: they are used only if you accept them in the cookie banner (see Section 15).

2. Information We Collect

Information You Provide

  • Account Information: Name, phone number, email address, date of birth
  • Profile Information: Profile photo, business name (for Providers)
  • Payment Information: Payment method details (processed by Stripe; we do not store full card numbers)
  • Communications: Messages between Providers and Clients, support requests

Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: Features used, pages viewed, actions taken within the App
  • Location Data: General location based on IP address (we do not track precise GPS location)
  • Log Data: IP address, access times, app crashes and errors

Information from Third Parties

  • Authentication Providers: If you sign in with a third-party service
  • Payment Processors: Transaction confirmations from Stripe

3. How We Use Your Information

We use your information to:

  • Provide the Service: Create accounts, process bookings, facilitate payments
  • Communicate: Send booking confirmations, reminders, and important updates
  • Improve: Analyze usage to improve features and user experience
  • Support: Respond to your questions and provide customer service
  • Safety: Detect and prevent fraud, abuse, and security incidents
  • Legal: Comply with legal obligations and enforce our Terms

4. How We Share Your Information

We may share your information with:

Service Providers

  • Payment Processing: Stripe processes payments on our behalf
  • Cloud Hosting: Supabase hosts our database infrastructure
  • Analytics: We use PostHog (EU-hosted) to understand usage. On this website, analytics run only after you accept in the cookie banner (see Section 15)
  • Push Notifications: Firebase Cloud Messaging delivers notifications

Other Users

  • Providers see: Client name, contact information, booking details
  • Clients see: Provider name, business name, service details, reviews

Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of Zuki, our users, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion:

  • Account data: Deleted within 30 days
  • Transaction records: Retained for 7 years for legal/tax compliance
  • Anonymized analytics: May be retained indefinitely

6. Your Rights and Choices

Access and Portability

You can access your personal information through the App settings. You may request a copy of your data by contacting us.

Correction

You can update your profile information in the App at any time.

Deletion

You can delete your account in the App settings. Some information may be retained as described above.

Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" or adjusting notification settings in the App.

Push Notifications

You can disable push notifications in your device settings.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Regular security assessments
  • Access controls and authentication
  • Employee security training

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

For users aged 13-17, parental or guardian consent is required. Parents can manage their children's accounts through the Family features in the App.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United Kingdom and countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

  • Email notification
  • In-app notification
  • Notice on our website

The "Last updated" date at the top indicates when changes were made.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at [email protected].

13. Additional Information for EEA/UK Users

If you are in the European Economic Area or United Kingdom:

Legal Basis for Processing

We process your data based on:

  • Contract: To provide the Service you requested
  • Legitimate Interests: To improve and secure the Service
  • Consent: For optional features, marketing, and analytics cookies on our website
  • Legal Obligation: To comply with applicable laws

Your Additional Rights

  • Right to object to processing
  • Right to restrict processing
  • Right to lodge a complaint with a supervisory authority

14. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your rights

To exercise these rights, contact us at [email protected].

15. Cookies and Website Analytics

Our website (zukiapp.com) uses PostHog, a product-analytics service hosted in the European Union, to understand how people discover and move through the site. We use it to measure where visitors come from (for example a social post, a search, or a direct visit) and which pages lead people to our apps.

  • Consent first. No analytics cookies are set and no analytics events are sent until you choose Accept in the cookie banner. If you Decline, analytics stays off. Using the website does not by itself grant consent.
  • What is stored. On acceptance, PostHog stores a random identifier and related analytics data in your browser (cookies and local storage). This identifier is pseudonymous — it is not your name — but it is still personal data. We do not enable session recording on the website.
  • Across our apps. So we can understand a single journey from the website to our web app, the identifier is scoped to the shared zukiapp.com domain and is read by both the marketing site and the web app at app.zukiapp.com.
  • Changing your mind. Use the Cookie settings link in the footer (or at the bottom of our app-link pages) to re-open the banner at any time. Declining there stops further analytics capture and clears the analytics identifier from your browser. Your choice is stored for 180 days in a small first-party cookie (zuki_analytics_consent) that contains only your choice, not an identifier.
  • Retention. PostHog keeps analytics events for up to 7 years, the fixed retention period of our PostHog plan. Your IP address is not stored with these events: PostHog discards it after deriving an approximate location (such as your country). If you decline or withdraw consent, no new events are collected.

This Privacy Policy is effective as of the "Last updated" date shown above.