ZingooPrivacy Policy
Zingoo is an app for sharing an event's photos and chat with the people you invite. This policy explains what information Zingoo handles, why, who else sees it, and the choices you have. We wrote it to match what the app actually does. If something here is unclear, email us at support@begether.net.
The short version
- You sign in with an email and password, with Google, with Apple, or with a phone number. We never see or store your password.
- The photos and messages you post are visible to the other people in that event, and only them.
- We remove location and device details from your photos before anyone else can see them.
- We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
- You can delete your account, and everything you created, from inside the app at any time.
- You can report content, block people and delete your own posts. Reports are seen only by our moderation team.
1. Information we collect
Information you give us
- Account details: your name and a verified phone number (every account needs one), plus your email address if you sign up with email or Google. If you sign in with Google or Apple, they share your name and email with us (see Section 4); Apple lets you hide your real email behind a private relay address, and shares your name only the first time. Our sign-in provider texts a code to your phone number to check it's yours, and we keep the number so you can sign in with it and so friends can invite you. Passwords are handled entirely by our sign-in provider, Google Firebase Authentication.
- Events: the title, start and end time, and place you enter, plus the coordinates of a place if you pick one from the location search. Events you create, and the invites and RSVP answers (Yes, Maybe or No) attached to them.
- Photos: pictures you take or choose from your library and post to an event.
- Messages, replies, comments and reactions: what you write and the emoji you add inside an event.
- Reports and blocks: if you report a photo, message or comment, we keep who reported it, which item, the reason you chose and any note you add. If you block someone, we keep that pair of accounts. If our team suspends an account, we keep that fact on the account.
- Support emails: anything you send us when you contact us.
Information about people you invite who aren't on Zingoo yet
You can invite someone who hasn't joined. We then keep the email address or phone number you gave, the name you know them by, which event it's for and who invited them. It waits for them: when they sign up with that verified phone number or email, it becomes an ordinary invitation they can see (only for events that are still active or in the future). We delete it when the event ends, if you withdraw it, or if you delete your account. If you gave an email address, we send that person one invitation email that names you and the event, with a link to stop further messages. No address gets more than three of these from Zingoo in a week, and none after someone opts out. We don't send text messages yet. If you got an invitation email and don't want it, use the "stop these messages" link in it, or write to support@begether.net and we'll delete what we hold about you.
Information from your device and the app
- Camera and photos: the app asks permission to use the camera and to read photos you choose. On iPhone you can choose to share only selected photos. Zingoo only receives the pictures you pick.
- Notifications: if you allow them, a push-notification identifier for your device (see OneSignal in Section 4) so we can tell you about invites, events starting, and new messages and photos.
- Contacts (optional): if you choose Import contacts when inviting guests, the app asks permission to read your address book. It reads names, email addresses and phone numbers on your phone so you can pick people to invite. That list is kept on your phone and is not uploaded to us; you can delete it any time from Account → Remove imported contacts. We only receive the details of the people you actually invite.
- Motion sensor: an optional "raise your phone to take a photo" gesture reads your phone's motion sensor while an active event is open. The readings are processed on your phone and are never stored or sent to us.
- Crash and error reports: when something breaks, the app and our servers send a technical report (error details, app version, device model and operating system, and technical request details) so we can fix it.
- Server logs: our hosting provider records standard request information, such as IP address, time and the page or action requested.
Zingoo does not ask for access to your device's GPS location or microphone, and only asks for your contacts if you choose to import them.
Information inside your photos
Photos from a camera can carry hidden details called metadata: when and where the picture was taken, and the make and model of the device. When you post a JPEG photo, our server reads the capture time and, if present, the GPS position from that metadata and keeps them with the photo so the event can show when it was taken. It then removes the location and device details from the copy that other people see, and keeps the picture's orientation. Photos in other file formats are stored as they are.
2. How we use information
- To run Zingoo: create your account, show events, photos and chat to the right people, and send the notifications you've allowed.
- To keep it safe and working: review reports, remove content that breaks our Terms of Use, suspend abusive accounts, prevent abuse, limit the rate of requests, and find and fix bugs.
- To respond to you when you contact us.
We don't use your information for advertising, and we don't build advertising profiles.
3. Who can see what
- Events are private to their guests. The creator and the people they invite can open an event. Guests who answered Yes can post and see everything; guests who answered Maybe can see but not post; guests who answered No, or haven't answered, can't see an event's photos or chat.
- Your name is visible to other guests on your photos, messages, comments and reactions. Your phone number (and your email address, if you have one) is visible to the creator and the other guests in the guest list of an event you're part of.
- You invite people by their email address or phone number. If they already have a Zingoo account the invitation reaches them straight away; if not, it waits for them (see Section 1) and they can only see the event once they have joined with that verified phone number or email.
- Reports and blocks are not shown to the other person. The person you report or block isn't told. A report is seen only by our moderation team, who can see the reported item, who reported it, the reason and any note, so they can review it. The event's host can delete any content in their event and remove guests from it.
- Blocking works both ways. If you block someone, neither of you sees the other's photos, messages or events, and neither can invite the other. Content that has been reported is hidden from the person who reported it, and, once the event's host or two different people have reported it, from everyone except its author and the host while we review it.
- Photo links expire. Photos are delivered through links that stop working after a short time, and the app asks for a fresh one when needed. Anyone who is shown a valid link can open it until it expires, so only share events with people you trust, and remember that guests can take screenshots or save photos.
- Ending an event doesn't delete it. Past events keep their photos and chat for the guests until they are deleted (see Section 6).
4. Who we share information with
We don't sell your information. We use these service providers to run Zingoo, and they handle information only to provide their service to us:
| Provider | What it does | Information involved |
|---|---|---|
| Google (Firebase Authentication, Google Sign-In) | Creates and signs you in to your account, sends password-reset emails, and texts the codes used to sign in with a phone number | Name, email address, phone number, sign-in credentials, sign-in timestamps and IP address |
| Apple (Sign in with Apple) | Lets you sign in with your Apple Account | Your name and email (or Apple's private relay address) when you choose to share them, and an identifier for your Apple Account |
| Render | Hosts our servers | Everything the app sends to our servers, plus standard server logs |
| Neon | Hosts our database | Accounts, events, invites, messages, comments, reactions and photo records |
| Cloudflare (R2) | Stores your photo files | The photos you post, with location and device details removed |
| OneSignal | Delivers push notifications | A device push token, your Zingoo user ID and notification content |
| Sentry | Collects crash and error reports | Technical error details, app version, device model and operating system |
| Resend | Sends the invitation emails to people who aren't on Zingoo yet | The invited person's email address, your name, and the event's title and start time |
| OpenStreetMap (Nominatim) | Looks up places when you search for an event location | The place text you type into the location search, and your IP address |
| Apple App Store and Google Play | Distribute the app | Governed by Apple's and Google's own policies |
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the service, in which case we'll tell you and this policy will continue to apply to your information.
5. Where your information is processed
Our providers operate data centers in the United States and elsewhere, so your information may be processed in countries other than your own. Where required, we rely on the safeguards our providers offer for international transfers.
6. How long we keep information, and deleting it
We keep your information while your account exists. You can delete your account at any time:
- In the app: (full instructions: zingoo.com/delete-account) open Account (top right of the main screen) and choose Delete my account. You'll be asked to confirm twice.
- By email: write to support@begether.net from the email address on your account (or tell us the phone number on it) and ask us to delete it. We'll confirm when it's done.
Deleting your account permanently removes: your account and sign-in; every event you created, including its photos, messages, comments and reactions; everything you posted in other people's events (photos, messages, comments and reactions) and the comments and reactions others attached to your posts; and your invites and RSVP answers. Your blocks, the reports you filed, and the reports other people filed about your content are deleted too. Invitations you sent to people who hadn't joined yet are deleted. Invitations you sent to other members stay in place so those guests aren't dropped from the event. Photo files are deleted from storage.
You can delete your own photos, messages and comments at any time from the ⋯ menu in the app. You can also ask us to delete specific content. A few things can outlast deletion for a short time: copies in our providers' routine backups, and server and error logs, which our providers keep for limited periods set by them.
7. Your choices and rights
- Notifications: turn them off any time in your phone's settings.
- Contacts: change or withdraw access in your phone's settings, and remove the copy Zingoo keeps from Account; you can still invite people by typing an email or phone number.
- Camera and photos: change or withdraw access in your phone's settings; you can still use chat and the rest of the app.
- Access, correction and portability: ask us for a copy of the information we hold about you, or to correct it.
- Deletion: see Section 6.
- Objection and restriction: you can object to or ask us to limit certain uses of your information.
Depending on where you live (for example, the European Economic Area, the United Kingdom or California), you may have additional legal rights. To use any of them, email support@begether.net. We may need to confirm it's you first. You can also complain to your local data-protection authority. If the GDPR applies, we process your information to provide the service you asked for (contract), to keep Zingoo secure and fix errors (legitimate interests), and, for push notifications, with your consent.
8. Security
Connections between the app and our servers are encrypted. Access to our systems is limited, and accounts and passwords are handled by Google Firebase Authentication rather than stored by us. No service can be completely secure, so please use a strong, unique password.
9. Children
Zingoo isn't intended for children under 13 (or the minimum age required in your country), and we don't knowingly collect their information. If you believe a child has given us personal information, email us and we'll delete it.
10. This website
zingoo.com doesn't use cookies, advertising or analytics, and doesn't load third-party scripts or fonts. Our hosting provider keeps ordinary server logs.
11. Changes to this policy
If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, tell you in the app or by email before they take effect.
12. Contact
Questions, requests, or concerns: support@begether.net.