Privacy centre

• Account — name, email, optional photo and phone number.
• Location — continuous background location while you're a member, plus trip and driving records.
• Family content — messages, photo check-ins, places, check-in requests, SOS events.
• Device basics — battery level, charging state, network type, push notification token.

No advertising SDKs or advertising profiles. The website offers optional anonymous referral counts, described in our website storage policy.

your familyYour family can see your shared location and activity. You control location sharing in the app.

your choiceAnyone who has an active temporary link can view the shared location until it expires or you stop sharing. Keep the link private. Connected households give another household access only to the people deliberately shared with it. Pausing sharing hides your position from these views.

no saleWe do not sell your personal information or provide it to advertisers or data brokers for marketing. Service providers, including Google, process data to deliver features as explained in the privacy policy.

Data	Retention
Positions outside a trip	Removed by scheduled cleanup once older than 48 hours
Trips & their recorded positions	Trips older than 90 days are removed by scheduled cleanup. Positions attached to older trips are reduced in detail after 48 hours.
Place arrival & departure events	Removed by scheduled cleanup once older than 90 days
Messages	Until deleted, or until account deletion
Photo check-in images	Removed by scheduled cleanup once older than 30 days. The accompanying message can remain.
Weather lookups (cache)	48 hours, aggregated to an area — not linked to you
Account & consent records	Until deletion request

Cleanup is scheduled daily. The history you can view depends on your plan: 7 days on Free and up to 90 days on Premium. These view limits are different from server retention. Account deletion and any retention exceptions are explained on the account deletion page.

• Pause my sharing — in-app (Who can see my location). Your family stops seeing your position. Pausing location sharing does not disable SOS; delivery still requires connectivity.
• Family-away mode — 24-hour mute of check-in and curfew notifications while you're travelling. SOS is excluded from this mute, but alert delivery still depends on connectivity and notification settings.
• Delete account — in-app, self-serve, immediate.
• Export — request a copy of your data by email.

Child profiles are created by a parent, inside the parent's family, with parental consent captured at creation. A child’s location is visible to their family and, where a family admin explicitly grants access, selected connected households.

Consent is captured at signup and versioned — when the policy changes, you're asked again. You can withdraw consent and delete your account at any time. GDPR and Australian Privacy Principles requests: privacy@zamily.app.