Privacy Policy
Last updated: April 15, 2026
Our Data Promise
WE NEVER SELL, RENT, TRADE, OR SHARE YOUR PERSONAL INFORMATION WITH ANY THIRD PARTIES FOR MARKETING, ADVERTISING, OR ANY OTHER PURPOSE. Your data stays within Xelora PTY LTD. While we may contact you about our own other products, your information never leaves our company. This is our unwavering commitment to you and your family.
Zamily is a product of Xelora PTY LTD, an Australian company committed to protecting your family's privacy. At Zamily, privacy isn't an afterthought—it's the foundation of everything we build. We understand that sharing your location with family requires an enormous amount of trust, and we take that responsibility with the utmost seriousness. This Privacy Policy explains exactly what data we collect, how we use it, and—most importantly—how we protect it.
Our Core Privacy Principles
1. You Own Your Data
Your data belongs to you, period. We are merely custodians. You can access, export, or delete your data at any time. We will never claim ownership of your personal information.
2. We Never Sell or Share With Third Parties
We do not and will never sell, rent, trade, or share your personal information with advertisers, data brokers, or any other third parties. Your data stays within Xelora PTY LTD. We may occasionally tell you about our own other products, but your information never leaves our company.
3. Families Are Private
Your location is shared only with people in your family group in the app. Other Zamily users cannot see your location unless they are in your family. Like any online service, our systems process and store data as described in this policy so the app can work—we do not sell it or use it for third-party advertising.
4. Security by Design
All data is encrypted using industry-leading standards both in transit and at rest. We employ multiple layers of security to protect your information from unauthorized access.
5. Minimal Data Collection
We only collect the data necessary to provide our core service. We don't gather extraneous information just because we can. Less data means less risk.
What Information We Collect
We are transparent about every piece of data we collect. Here's exactly what we gather and why:
1. Location Information
Location data is the core of our service. When you use Zamily, we collect:
- Real-time GPS coordinates — To share your current location with your family (as shown in the app)
- Background location updates — Only when you grant permission, to keep your family updated even when the app isn't open
- Place (geofence) events — When you enter or leave saved zones (e.g. home, school)
- Trip data — Routes, start/end times, and duration when automatic trip tracking is enabled
- Speed information — To detect driving mode and provide driving safety alerts
Retention: Trip history is retained according to your plan—7 days on the free tier and up to 90 days for Premium (as implemented in the service). Other location-related data may be stored only as long as needed to operate features you use.
2. Account Information
- Email address — Required for account creation, login, and important communications
- Name — Displayed to members of your family in the app
- Profile photo (optional) — Only if you choose to upload one
- Phone number — Collected at registration and used for account and safety features as described in the app
- Family memberships — Who you've invited and who has invited you (see Settings → Family)
3. Device Information
We collect minimal technical data to ensure the app functions properly:
- Device type and OS version — For compatibility and troubleshooting
- Device ID — To link your account to your device securely
- Battery level — Shared with your family so they know if your phone is low on charge
- App version — To provide updates and support
4. Diagnostics & product improvement
We may process aggregated or technical data to keep the app reliable and improve features (for example, performance metrics or error diagnostics). Where we can, we minimise personal identifiers. Exact tooling may change over time; we do not use this for third-party advertising.
What We DO NOT Collect
Just as important as what we collect is what we deliberately do NOT collect:
- Contacts from your phone — We don't access your address book
- Photos or media — Only your optional profile photo
- Messages or communications — We don't read your texts or emails
- Browsing history — We don't track what websites you visit
- Biometric data — No fingerprints, face scans, or health data
- Street-address profiles — We do not require you to type a full postal address. Location is based on GPS coordinates; the app may show approximate labels (for example, road or area names) using reverse geocoding for display only
How We Use Your Information
1. To Provide Our Core Service
The primary purpose of data collection is to share your real-time location with your designated family members in the app. This enables:
- Live location sharing on the map
- Arrival and departure notifications
- SOS alerts in emergencies
- Place (geofence) entry/exit alerts
- Trip history and driving summaries
2. To Improve the App
We use aggregated or technical information (as described under "Diagnostics & product improvement" above) to:
- Identify and fix bugs
- Understand which features are most valuable
- Optimize battery usage and performance
- Plan new features based on user needs
3. To Communicate With You
We may send you:
- Security alerts — If we detect suspicious activity on your account
- Service notifications — Important updates about the app
- Support responses — Replies to your inquiries
- Product updates — Information about new features, improvements, or changes to Zamily
4. Marketing Communications (From Xelora PTY LTD Only)
With your consent where we ask for it, or as otherwise allowed under applicable law, Xelora PTY LTD may occasionally send you information about:
- New apps or software products developed by Xelora PTY LTD
- Related family safety services or features
- Special offers or promotions for Xelora PTY LTD products
Important: These marketing communications come exclusively from Xelora PTY LTD about our own products. We never share your email address or personal information with third parties for their marketing purposes. Your data stays with us.
Opt-Out: You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link in any email or by contacting us at Email Privacy. Even if you opt out of marketing, you'll still receive essential service communications (security alerts and, when in-app purchases are available, billing-related notices).
How We Protect Your Data
Encryption Standards
- In Transit: All data is encrypted using TLS 1.3 (the latest standard)
- At Rest: Stored data is encrypted using AES-256 encryption
- API Communications: All API calls use secure authentication tokens
- Database: Our database uses industry-standard encryption protocols
Access Controls
- Only you and members of your family group in the app can see your shared location as designed
- Operational and support access is limited to what is needed to run the service and comply with law
- Administrative access is limited to essential personnel only
- All access is logged and audited
Data Retention & Deletion
| Data Type | Free Users | Premium Users |
|---|---|---|
| Trip history (Driving tab) | Up to 7 days | Up to 90 days (as implemented in the service) |
| Places (saved zones / geofences) | Up to 4 Places | Unlimited Places (as implemented in the service) |
| Account Data | Until account deletion (then 30 days for backup purge) | |
Your Rights & Controls
You have complete control over your data. You can:
Access Your Data
You may request a copy of personal data we hold about you by emailing Email Privacy. We will respond within a reasonable time and as required by applicable law (typically within 30 days where the Australian Privacy Act applies).
Correct Your Data
Update your display name and phone number under Settings → Profile. Changing your sign-in email may require contacting support if not available in the app.
Delete Your Data
Permanently delete your account and all associated data:
- All location history will be permanently erased
- Your profile and account information will be deleted
- You'll be removed from every family you're connected to in the app
- Backups are purged within 30 days
To delete your account: Open the Settings tab, scroll to the bottom, and use Delete Account (not available for child accounts managed by a parent), or email Email Privacy
Export Your Data
If you need a structured export, ask us at Email Privacy. The mobile app may not include a full self-serve export button in every version.
Control Location Sharing
- Adjust location permission in your device settings (e.g. "always" vs "while using")—this affects how often we can update your position
- Leave a family or adjust membership from Settings → Family where your role allows
- On Premium, configure Quiet Hours (under Settings) to reduce non-emergency notifications during chosen times
Children's Privacy (COPPA Compliant)
Zamily is designed for families, including those with children under 13. We are fully compliant with the Children's Online Privacy Protection Act (COPPA):
- Children under 13 cannot create accounts independently
- Parents or legal guardians must create and manage accounts for children
- We do not knowingly collect personal information directly from children under 13
- Parents can review, delete, or refuse further collection of their child's data
- To exercise parental rights, contact us at Email Privacy
Third-Party Services (Minimal & Vetted)
We use a strictly limited number of third-party services, all vetted for privacy and security:
Cloud infrastructure
Our backend runs on secured cloud infrastructure with access controls appropriate to the data we process. Specific providers may change; we use data processing arrangements that require protection of personal information.
Payment Processing
We do not sell subscriptions or take payment on zamily.app—you cannot enter a card number or pay for Zamily on this marketing site.
When Premium is a paid service, purchases are completed inside the mobile app through the platform store: Google Play on Android and the App Store on iOS (when available). We never see or store your full payment details; billing is handled by Google or Apple under their respective payment and privacy terms.
Push notifications (Firebase Cloud Messaging)
The Android app uses Google Firebase Cloud Messaging (FCM) to deliver push notifications. Google processes technical identifiers (for example, device tokens) needed to route messages; see Google's Privacy Policy for how Google handles data.
What We DON'T Share With Third Parties
We do NOT share the following with any third parties (other companies, advertisers, data brokers, etc.):
- Your real-time location
- Your location history
- Members of your family in the app
- Your personal messages or communications
- Your contact information for third-party marketing purposes
Clarification: While we may use your email address to tell you about other Xelora PTY LTD products (as described in the "Marketing Communications" section above), we never sell, rent, or transfer your data to outside companies for their own marketing. Your information stays within Xelora PTY LTD.
Legal Disclosure Exceptions
We will only disclose your information in the following limited circumstances:
- Legal Requirement: If required by law, court order, or legal process
- Emergency: If we believe disclosure is necessary to prevent imminent harm
- Business Transfer: If Zamily is acquired, users will be notified before any data transfer
International Data Transfers
Your data is stored on secure servers. As an Australian company, we primarily operate within Australia and comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are located outside Australia, your data may be transferred to and processed in Australia or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for all international transfers in compliance with Australian privacy laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes:
- Through the app notification system
- By email (for material changes)
- By updating the "Last updated" date at the top of this page
Your continued use of Zamily after changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, your data, or your rights, please contact our Data Protection Officer:
Email: Email Privacy
Response time: We aim to reply within 24 hours on business days (Australia, AEST/AEDT), consistent with our Support page
Remember Our Promise
WE NEVER SELL, RENT, TRADE, OR SHARE YOUR PERSONAL INFORMATION WITH THIRD PARTIES. Your data stays within Xelora PTY LTD. While we may occasionally contact you about our own other products, your information never leaves our company. Your family's privacy is our highest priority. Xelora PTY LTD is committed to earning and keeping your trust every single day, in full compliance with Australian privacy laws.