Privacy Policy
How we protect your data
Last updated: 9/2/2026
At Zaneza, protecting your privacy is our priority. This Privacy Policy explains how we collect, use, and protect your personal information when you use our mobile application and website.
1. Who are we?
Zaneza is a mobile and web application for organizing events with friends and family. Publisher: Zaneza — contact: support@zaneza.net.
2. Data collected
When registering, we collect your first name, last name (displayed to other participants as a display name), email address, and password (stored as a hash, never in plain text). App usage generates additional data: events created, invitation responses, and declared contributions. We also automatically collect IP address, device type, OS version, and connection timestamps. We do not collect GPS location, phone contacts, photos, biometric data, or payment information (payments are processed on zaneza.net via Stripe).
3. Why do we use your data?
Your data is used to: create and manage your account (performance of contract), allow you to create and manage events, send verification and password reset emails, ensure service security and functionality (legitimate interest), and improve the app through aggregated, anonymized analytics (legitimate interest). We do not use your data for advertising purposes and never sell it to third parties.
4. Data sharing
Your data is never sold to third parties. It may be shared only with our sub-processors: Supabase (database hosting and authentication, in Europe), Resend (transactional email delivery), and Stripe (payments, only via zaneza.net — the mobile app does not process payments). These providers act as processors and are subject to strict confidentiality obligations.
5. Retention periods
Data associated with your active account is retained for the duration of your use. Upon deletion, your data is erased within 30 days of the request. Past events are retained for 12 months after their date, then deleted. Technical logs are retained for a rolling 90-day window.
6. Your rights (GDPR)
In accordance with the GDPR, you have the following rights: access (obtain a copy of your data), rectification (correct inaccurate data), erasure, portability, and the right to object to certain processing. To exercise these rights, contact us at support@zaneza.net. You can also delete your account directly from the app (Profile → Delete my account). If your complaint is not resolved, you may contact the CNIL (www.cnil.fr).
7. Security
Passwords are hashed (bcrypt via Supabase Auth). Communications are encrypted in transit (HTTPS/TLS). Authentication tokens are stored securely on your device, and no sensitive data is stored in plain text on your phone.
8. Minors
Zaneza is not intended for persons under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at support@zaneza.net.
9. Changes to this policy
In the event of significant changes, we will notify you by email or by an in-app notification. The date of the last update is shown at the top of this document.
10. Contact
For any questions regarding this privacy policy — Email: support@zaneza.net — Website: https://zaneza.net