ZoraSafe Privacy Policy

Effective Date: 04/01/2025

ZoraSafe (“we,” “our,” or “us”) is committed to protecting your privacy and your trust. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, mobile app, and services (“Services”).

We collect information in several ways to provide and improve our Services:

• Name, email address, phone number, password, and optional profile photo
   
• Role and group information if part of a family, group, or organization plan
   
• Payment and billing information (handled securely by trusted payment processors)
   

• Details about how you interact with ZoraSafe (features used, games played, lessons completed, dashboards accessed)
   
• Device information (type, OS, browser, IP address)
   
• Logs of security scans, threat alerts, and blocked issues
   

• When you use security features, we may temporarily analyze the content of URLs, attachments, or messages to detect threats.
   
• This data is processed using encrypted, automated systems (see Section 5 for more details).
   

• Support requests, feedback, survey responses, and correspondence with our team
   

• Approximate city or region (never precise GPS) to enhance security analysis and community leaderboard features
   
• You can control location permissions in your app settings
   

• If you enable add-ons (e.g., Memory Companion, Family Calendar), additional data (such as calendar entries, reminders, or check-ins) may be collected, but only as needed to provide those features

We use your data for the following purposes:

• To operate, maintain, and improve ZoraSafe and all features
   
• To personalize your experience, dashboards, and learning recommendations
   
• To process payments, subscriptions, and manage account access
   
• To detect and prevent security threats, scams, and fraud
   
• To provide customer support, answer your requests, and resolve issues
   
• To communicate with you about important updates, security alerts, or educational tips (you control your communication preferences)
   
• To conduct analytics and research for product improvement and safety
   
• To comply with legal obligations and enforce our policies
   

We do not sell your personal information. We may share information only as described below:

• We use trusted third-party vendors (like Netskope for threat detection, Stripe for payments, etc.) to deliver our services. These partners only access data needed for their function and are contractually required to protect your privacy.
   

• If you are part of a group plan, some information (like security status or quiz completion) may be visible to the group admin for safety and management.
   

• We may share information if required by law, regulation, subpoena, or to protect our rights, users, or the public.
   

• In the event of a merger, acquisition, or sale, your data may be transferred to the new provider. We will notify you if this happens.

You have control over your information:

• Profile & Account: Update or correct your info anytime in your account settings.
   
• Delete Account: Request deletion at [hello@zorasafe.com]. We will erase your data unless we must retain it for legal or business reasons.
   
• Communication Preferences: Unsubscribe or manage notification types in-app or via email links.
   
• Add-On & Data Controls: Enable/disable features and data sharing for add-ons in your settings.
   
• Location & Threat Detection: You may disable location sharing and, in some cases, opt out of advanced data inspection (note: this may limit security features).

ZoraSafe uses automated threat detection, including services by Netskope, to keep you safe from scams and online threats.

• What’s Scanned: Content like URLs, email attachments, or suspicious messages is scanned for security risks.
   
• How: Analysis is performed using encrypted, automated systems. We minimize the amount of data inspected and only keep it as long as needed to detect threats.
   
• No Human Review: Except with your explicit consent (e.g., when contacting support), your content is never manually reviewed.
   
• Third-Party Compliance: Vendors like Netskope are contractually bound to strong privacy, data security, and compliance standards.
   
• Opt-Out: You may opt out of certain scanning features via app settings, but this may reduce your protection.

• We use industry-leading security protocols, including encryption, secure servers, and regular security reviews.
   
• Access to your data is limited to authorized personnel only.
   
• No system is 100% secure, but we take all reasonable steps to protect your data.

• ZoraSafe is designed for family use, but children under 13 may only use the service with verifiable parental consent.
   
• We do not knowingly collect personal information from children without such consent.
   
• Parents can review, manage, or delete a child’s information at any time by contacting support.

• We retain your personal information only as long as necessary to fulfill the purposes described here or as required by law.
   
• You may request deletion at any time.
   

• ZoraSafe is headquartered in the United States. If you access our Services from outside the U.S., your information will be transferred and processed here.
   
• We follow standard contractual clauses and safeguards for international data transfer as required by law.

Depending on your location, you may have the right to:

• Request access to, correction of, or deletion of your personal information
   
• Request a copy of your data (data portability)
   
• Object to or restrict certain types of data processing
   
• Opt out of the sale of personal information (ZoraSafe does not sell your data)
   
• File a complaint with your local data protection authority
   

Contact us at [hello@zorasafe.com] for any requests or questions.

We may update this Policy from time to time. Material changes will be communicated via email or in-app notification. Your continued use of ZoraSafe means you accept the updated Policy.