Privacy Policy

Zinc: Events for Friends
Last Updated: April 8, 2026

1. Introduction

This Privacy Policy describes how we ("we," "us," or "our") collects, uses, and protects your personal information when you use the Zinc: Events for Friends mobile application ("the App"). By using the App, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Phone number — used for authentication via SMS one-time password (OTP) verification
Name — your display name within the App

2.2 Profile Information

You may optionally provide:

Profile photo — uploaded from your device's photo library
Date of birth (optionally) — used for profile personalization

2.3 Contact Information (Optional)

If you grant the App access to your device contacts and explicitly import them, we collect:

Phone numbers from your contacts — normalized to E.164 format and stored on our servers to identify which contacts are already using the App
Contact display names — stored locally on your device only (never transmitted to our servers), used solely to show you a recognizable label for each imported contact

Contact import is entirely opt-in. You can view, remove individual contacts, or re-sync your imported contacts at any time from the Imported Contacts screen in the App's settings.

2.4 Event Information

When you create or interact with events, we collect:

Event title, description, date, and time
Event type (open or closed)
Event images uploaded from your device's photo library
RSVP status (invited, attending, or declined)

2.5 Social Connection Data

The App collects information about your connections with other users:

Relationships between users (pending or confirmed connections)
Connection method (QR code scan or in-app request)

2.6 Automatically Collected Information

Authentication tokens — session tokens stored locally on your device for maintaining your login state. These are managed by our backend service provider (Supabase) and are not used for tracking purposes.

3. Information We Do NOT Collect

We do not collect your geographic location
We do not collect device identifiers or device-specific information
We do not use analytics, crash reporting, or advertising SDKs
We do not access your device contacts without your explicit action — contact data is only read and transmitted if you choose to import contacts via the Imported Contacts feature
We do not track your activity across other apps or websites

4. How We Use Your Information

We use the information we collect solely to:

Authenticate your identity and maintain your account
Display your profile to other users within the App
Enable you to create, manage, and participate in events
Facilitate social connections between users
Display a social graph visualization of your connections
Suggest potential connections by identifying which of your imported contacts already use the App (phone numbers only; contact names are never sent to our servers)

5. Data Storage and Security

Your data is stored securely using Supabase, a cloud infrastructure platform. Specifically:

Account and profile data is stored in a PostgreSQL database hosted by Supabase
Photos (profile and event images) are stored in Supabase Storage
All data transmission between the App and our servers is encrypted using HTTPS/TLS
Authentication is handled via Supabase Auth with SMS OTP verification through Twilio

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties.

Your data may be shared in the following limited circumstances:

With other App users: Your name, profile photo, and connection status are visible to other users you connect with. Event information is visible to invited or attending participants.
Service providers: We use Supabase (database, storage, authentication) and Twilio (SMS delivery) to operate the App. These providers process data on our behalf and are bound by their own privacy policies.

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your user data is removed from our systems.

8. Your Rights

You have the right to:

Access your personal data through the App
Update your profile information at any time
Delete your account and associated data using the account deletion option in the App's profile screen
Withdraw consent for data processing by deleting your account

If you are located in the European Economic Area (EEA), you may also have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

9. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

10. Camera, Photo Library, and Contacts Access

Camera: The App requests camera access solely for scanning QR codes to connect with other users. No photos or videos are captured or stored via the camera.
Photo Library: The App requests photo library access to allow you to select images for your profile photo and event images. Only images you explicitly select are uploaded.
Contacts: The App requests contacts access only if you choose to use the Imported Contacts feature. If granted, all contacts currently shared with the App are read and their phone numbers are transmitted to our servers to identify which contacts already use the App. Contact names are stored locally on your device only. You can review, remove individual contacts, or re-sync your contact list at any time from the Imported Contacts screen. Revoking contacts permission in your device's OS settings will prevent future imports but does not automatically remove previously synced data — you can delete that data from within the App.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy within the App. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: zonc.support@gmail.com