Privacy Policy

1. Introduction

At Zeteo, our foundation is built on the belief that your financial data is yours and yours alone. This Privacy Policy explains in plain English how we collect, use, protect, and handle your personal information when you use our app and website.

Our promise to you: We do not sell your personal or financial data to anyone. You are our customer, not our product.

2. Information We Collect

We only collect information necessary to provide you with financial clarity:

• Information you provide to us: This includes your name, email address, and login credentials when you create an account.
• Financial Information: To power your budgets and forecasts, we retrieve your account balances, transaction history, and institutional data. We do this exclusively through our secure partner, Plaid (more on that below).
• Usage & Device Information: We automatically collect anonymous diagnostic data, such as your device type, operating system version, and how you navigate the app. This helps us squash bugs and improve the experience.
• Early-access list: If you ask us to tell you when Zeteo launches, we collect the email address you enter, the page you entered it on, your IP address, and the date and time. See Section 10.

3. Third-Party Integrations (Plaid)

Your security is paramount. We do not ask for, see, or store your bank usernames or passwords. Instead, we use Plaid Inc. ("Plaid") to securely connect to your financial institutions.

When linking an account, you will provide your credentials directly to Plaid, and they provide us with a secure, read-only token to access your transaction data. Information shared with Plaid is treated by Plaid in accordance with their privacy policy, which we strongly encourage you to review: Plaid End User Privacy Policy. Zeteo users can manage or disconnect their bank connections directly within the Zeteo app or through the Plaid Portal.

4. How We Use Your Information

We use your data strictly to operate and improve Zeteo:

• To provide our core services, such as 30-day forecasting, rollover budgeting, and group expense splitting.
• To perform smart auto-categorization and recurring subscription detection.
• To respond to your customer support inquiries.
• To track app performance and squash bugs.

5. Legal Basis for Processing (GDPR)

For users in the EU/EEA, we process your personal data under the following legal bases:

6. How We Share Your Information

As stated above, we do not sell your data. However, we do share data with trusted service providers to run our platform, under strict confidentiality agreements:

• Service Providers: We share data with trusted service providers to operate our platform:
  • Supabase and AWS for secure database hosting
  • Plaid for bank connections
  • PostHog for product analytics
  • Sentry for error monitoring (we scrub Personally Identifiable Information before it hits our crash reporters)
  • Resend for sending email, including account and security messages, replies to the contact form, and the early-access list
  • Firebase (Google) for push notifications via Firebase Cloud Messaging
  • RevenueCat for subscription management
  • OpenAI for AI-powered receipt parsing in Smart Split
• Firebase (Google LLC). We use Firebase Cloud Messaging (FCM) to deliver push notifications to your device on both iOS and Android. Your device push token is shared with Firebase solely for this purpose. Push notifications require your consent: on iOS and on Android 13 and later, your operating system asks you to grant notification permission, and you can withdraw it at any time in your device settings. Google's privacy policy governs Firebase's handling of this data. Firebase is a Google service operating under Google's Data Processing Addendum.
• OpenAI, L.L.C.. When you use Smart Split receipt scanning, the text extracted from your receipt photo is sent to OpenAI's API to itemize the bill. Your receipt photo never leaves your device. Only the extracted text is processed, and we never log or store the raw receipt text on our servers. Under OpenAI's API data-usage policies, data submitted through the API is not used to train OpenAI's models by default. OpenAI's retention periods vary by endpoint and configuration; under its standard abuse-monitoring terms, API data is retained for up to 30 days, and may be retained longer where required by law.
• RevenueCat, Inc.. We use RevenueCat to manage Zeteo Premium subscriptions. When you purchase or restore a subscription, your app account identifier and App Store purchase information are shared with RevenueCat to validate the purchase and manage your subscription status. RevenueCat never receives your bank, transaction, or other financial data. RevenueCat's handling of this data is governed by its privacy policy.
• Legal Requirements: We may disclose information if required to do so by law, court order, or subpoena.
• Business Transfers: If Zeteo is involved in a merger, acquisition, or sale of assets, your data may be transferred, but it will remain subject to the promises made in this Privacy Policy.

Platform availability: Zeteo is distributed through the Apple App Store and is in testing on Google Play. Our data practices are the same regardless of how you obtained the app. Where you obtain Zeteo through Google Play (including a testing track), the disclosures in our Google Play Data Safety form are kept consistent with this Privacy Policy, which is the analog to Apple's App Store privacy labels.

7. Analytics and Tracking Technologies

We use the following analytics and monitoring tools:

• PostHog: We capture anonymized in-app usage events (e.g., which features you use, which screens you visit) to understand how users interact with Zeteo and improve the product. These events do not include your financial data, account balances, or personally identifiable information. You may opt out of analytics in app settings.
• Sentry: We capture error reports when the app crashes or encounters an unexpected error. These reports include technical stack traces and device metadata. Personal and financial data is scrubbed before transmission to Sentry.

We do not use advertising identifiers (IDFA) or participate in cross-app tracking. Zeteo complies with Apple's App Tracking Transparency framework.

8. Data Security, Breach Notification, and Retention

We protect your data with multiple verifiable security controls:

• Encryption: Data is encrypted in transit using TLS. Your data is encrypted at rest by our infrastructure provider, Supabase (hosted on AWS), including AES-256 encryption at the storage layer. Sensitive credentials such as bank connection tokens are further protected using Supabase Vault's authenticated encryption.
• Isolation: We enforce Row-Level Security (RLS) on every application table, so your records are accessible only to you and, for shared group activity, the other members of that group, enforced at the database layer rather than only the application layer.
• Sessions: For your security, sessions expire after a period of inactivity, after which you will be prompted to sign in again.
• Vulnerability reporting: If you believe you have discovered a security vulnerability in Zeteo, please report it responsibly to security@zeteoapp.com. We aim to acknowledge reports promptly and to work with researchers in good faith. We do not currently operate a published bug-bounty program.
• Breach Notification: In the event of a data breach that poses a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
• Retention: We retain your data only for as long as your account is active. After account deletion, your personal and financial data is removed from our active database within 30 days. Encrypted backup copies maintained by our infrastructure provider (Supabase/AWS) may persist for up to an additional 30 days beyond that date before being permanently purged as part of the backup rotation cycle. Anonymized, non-re-identifiable aggregated data may be retained indefinitely for service improvement purposes.

9. Group Data, Shared Records, and People You Invite

Zeteo lets you track shared expenses and IOUs with other people in a group. This creates data that belongs to more than one person, which affects how visibility and deletion work.

• Shared visibility: When you add a shared expense, balance, settlement, or IOU to a group, the details you enter are visible to the other members of that group. That visibility is how shared tracking works, and it is not something we can hide from the people you are splitting with.
• Deletion of shared records: When you delete your account or an entry, records that other group members still rely on, for example a shared expense that determines what someone else owes, may be retained in a reduced or de-identified form so that the remaining members' records stay accurate. Where we retain such records, we disassociate your personal identifiers to the extent we can. This is a recognized limit on the right to erasure (under GDPR, PIPEDA, and similar laws) where deletion would unfairly affect other people's legitimate interests.
• People you invite (non-users): When you invite someone by name or email, we process that person's personal data to deliver the invitation and set up the shared group. Our lawful basis is performing the invitation you asked us to send and our legitimate interest in operating the group feature. A person who was invited but has not created a Zeteo account can ask us to remove their information at any time by emailing privacy@zeteoapp.com.

10. Early-Access List and Marketing Email

Before Zeteo is available in the app stores, our website offers a form where you can leave your email address so we can tell you when it launches. Joining is entirely optional and is not required to use anything else.

• What we collect and why: Your email address, the page you signed up from, your IP address, and the date and time. The address is used to email you when Zeteo is available and to send occasional updates about what we have built. The remaining fields exist to limit abuse of the form and to record your consent.
• Consent: We rely on the express consent you give by submitting the form after reading the notice printed beside it. We keep a record of that wording, so we can show what you agreed to.
• Where it is stored: In two places, and no others. Your address is held by Resend, the provider that sends our email. A copy of your address together with the signup details above and the consent wording is also delivered to an internal Zeteo mailbox, which is the record of your consent and our backup of the list. Neither copy is placed in the Zeteo app's database, and signing up does not create a Zeteo account.
• What we never do: We do not sell, rent, or share this list with anyone for their own marketing, and we do not use it for advertising or profiling.
• Unsubscribing: Every message includes a way to opt out. You can also email support@zeteoapp.com at any time and we will remove you from both copies. Opting out is honoured promptly and always within 10 business days.
• Retention: We delete the early-access list, including the internal mailbox copy, within 12 months of launch, or sooner on request. The address is not linked to any Zeteo account you may later create.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to the shared-data limits described below and to legal retention requirements.
• Right to Data Portability: Request a copy of your data in a machine-readable format (JSON or CSV) to transfer to another service. We will provide the export within 30 days of a verified request.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Object: Object to our processing of your data where we rely on legitimate interests as our lawful basis.
• Right to Opt-Out of Sale (California): We do not sell your personal data. This right is satisfied by our data practices.
• Right to Non-Discrimination (California): We will not discriminate against you for exercising any CCPA rights.

To exercise any of these rights, contact us at privacy@zeteoapp.com, or, where available, through your in-app account settings. We will respond within 30 days, except where applicable law allows a longer period (for example, California requests may take up to 45 days, extendable to 90 with notice, see the section below). For GDPR portability requests, we will provide your data within 30 days in JSON or CSV format.

Account and data deletion can also be requested via zeteoapp.com/delete-account, which documents both the in-app self-serve flow and the email request path.

EU/EEA users also have the right to lodge a complaint with your local data protection supervisory authority at any time.

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the British Columbia Personal Information Protection Act (PIPA), and, for Quebec residents, the Act respecting the protection of personal information in the private sector, as amended by Quebec Law 25. We believe all our users deserve strong protections worldwide.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by CPRA:

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you in the past 12 months, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We use your financial data only to provide the service you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising these rights.

To submit a California privacy request, email privacy@zeteoapp.com or use the account settings in the app. We will respond within 45 days (extendable to 90 days with notice).

13. Children's Privacy

Zeteo is intended for users 18 years of age or older. If we become aware that a user under 18 has created an account, we will suspend the account within 24 hours of identification and delete the associated personal data from our active systems, subject to the shared-record limits in Section 9 and the retention and backup-rotation timelines in Section 8.

Because our group feature lets an adult member invite other people, it is possible for an adult to invite a minor into a group. Zeteo is not directed to minors, and an invitation does not create an account. If we learn that an invited person is under 18, we will remove their information from the group and will not create an account for them. If you believe a minor's information has been added to a group, contact us at privacy@zeteoapp.com and we will remove it.

14. Changes to this Policy

We may update this policy as we add new features (like AI insights) or as regulations change. When we make material changes, we will notify you via email or a prominent notification within the app.

AI features: Any AI-powered insights we add in the future will be advisory only and do not constitute financial, tax, or legal advice. We do not use your identifiable financial data to train third-party AI models. Where we use AI today (such as Smart Split receipt parsing), processing is limited to delivering the feature you requested, as described in Section 6.

15. Governing Law

This Privacy Policy is governed by the laws of the Province of British Columbia, Canada, except where preempted by applicable law.

Notwithstanding the foregoing choice of law, nothing in this Privacy Policy limits any rights you may have under applicable data protection laws in your jurisdiction, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), PIPEDA, BC PIPA, or Quebec Law 25.

If you use Zeteo from outside the United States or Canada, you retain all mandatory rights granted by the consumer-protection and data-protection laws of your place of residence, and nothing in this Policy waives those rights.

16. Contact Us

We believe in transparency. If you have questions about how we handle your data, or wish to exercise your privacy rights, please reach out to us at privacy@zeteoapp.com.