Zavoy — Privacy Policy

Last updated: 12 July 2026

Zavoy ("the app") is a private family-schedule app used by a single household — parents, nannies, and babysitters — to coordinate kids' activities and driving. It is not a commercial product and is not offered to the general public. This policy explains what the app handles and why.

What the app accesses

• Family schedule data — the kids' events, venues, contacts, and driving assignments you already keep in the household's private schedule. The app reads and writes this through the household's own private server.
• Your location — only while you have explicitly started a driving shift in the app. During a shift, and only then, your location is shared with the family so they can follow the run and see arrivals, even while your phone is locked. Outside of an active shift the app does not track your location. You can decline location access entirely and still use the rest of the app.
• Notifications — with your permission, the app sends push notifications (e.g. a new request or schedule change) via Apple Push Notification service.

How data is used and shared

• Data is used only to run the household's shared schedule. It is visible to the family members who use the app.
• We do not sell, rent, or share your data with third parties for advertising or any other purpose.
• Map display and turn-by-turn directions are provided by Mapbox; only the addresses needed to draw a route are sent to their mapping service. See the Mapbox privacy policy.
• Push delivery is handled by Apple (APNs) under Apple's privacy policy.

Data storage and retention

Schedule data lives on the household's private server, behind an access gate. Location "pings" sent during a shift are short-lived and retained only briefly to render the in-progress run, then aged out. A per-device access token is stored securely in the iOS Keychain and can be revoked at any time.

Your choices

You can deny or revoke location and notification permissions in iOS Settings at any time. To stop the app entirely, delete it — its device token can also be revoked server-side by the family administrator.

Children

The app is operated by the family for the family. It is not directed at children as a public service and collects no data from children beyond the schedule the parents themselves maintain.

Contact

Questions about this policy: privacy@zavoy.app.