PRIVACY POLICY

Effective: 24 August 2026

In plain terms: we collect what we need to run ZodKin (your phone number, profile info, photos), we never sell your data, and you can delete your account and everything with it at any time.

1. Overview

This Privacy Policy explains what information ZodKin ("we", "us") collects when you use the app, why we collect it, and the choices you have. By using ZodKin, you agree to the practices described here.

2. Information We Collect

• Account info: Phone number, password (stored securely — see Section 6)

• Profile info: Name, handle, birth date, gender, bio, preferred gender

• Photos & content: Avatar, banner, photos, Flares, posts, and captions you upload

• Messages: Messages you send to your matches

• Activity: Likes, passes, matches, reactions, blocks, and reports you make

• Country: Derived automatically from your phone number, to show you nearby matches first

• Device info: A push-notification token, so we can send you match and message alerts

We do not currently collect precise GPS location — only a country-level signal derived from your phone number.

3. How We Use It

• To create and secure your account, and verify you're a real person via SMS/phone verification

• To show you other users, calculate compatibility, and power the Orbit matching deck

• To deliver messages, notifications, and in-app alerts

• To let you post and share photos, Flares, and posts with your matches and followers

• To detect abuse, enforce our Terms, and act on blocks and reports

• To improve the app's reliability and performance

We do not use your data to train third-party advertising profiles, and we do not sell your personal information.

4. What Other Users See

Your name, handle, bio, zodiac sign, public photos, and Flares are visible to other users you match or interact with. Your phone number and password are never shown to other users.

You control visibility with the "Visible in Orbit" setting, and can block or report anyone who makes you uncomfortable — see Section 8.

5. Who We Share Data With

We don't sell your data. We do use a small number of trusted service providers to run the app:

• Firebase (Google) — verifies your phone number via SMS during signup and password reset

• Supabase — securely stores your photos and uploaded media

• Render — hosts our backend servers and database

We may also disclose information if required by law, or to protect the safety of our users.

6. How We Protect It

Your password is never stored in plain text — it's one-way hashed using industry-standard encryption (bcrypt), so even we can't see it. Traffic between the app and our servers is encrypted in transit. We limit how many login attempts can be made on an account to guard against unauthorized access.

No system is 100% secure, but we take reasonable steps to protect your information and continuously review our safeguards.

7. How Long We Keep It

We keep your information for as long as your account is active. If you deactivate your account, your profile is hidden but your data is retained in case you return. If you permanently delete your account, we remove your personal data, except where we're required to keep limited records for legal or safety reasons.

8. Your Choices

• Edit or update your profile information at any time in the app

• Hide yourself from Orbit's matching deck with the "Visible in Orbit" toggle

• Block or report any user, which prevents further contact

• Deactivate your account temporarily, or permanently delete it and your data, from account settings

• Turn off push notifications from your device settings

9. Children's Privacy

ZodKin is open to users of all ages, but certain features are restricted by age. Specifically, Orbit — where users browse, match, and message people they haven't met — is limited to users 18 and older; we verify birth date at signup and do not allow anyone under 18 to access it. Other parts of the app do not involve contact with strangers and remain available to younger users. We do not knowingly collect more information from users under 18 than is necessary to provide the service and enforce these age restrictions. If we learn an account has misrepresented its age to bypass the Orbit restriction, we will act on it accordingly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll let you know in the app before they take effect.

11. Contact

Questions about this Privacy Policy or your data can be sent to support@zodkin.com.