Privacy Policy
How we collect, use, share, and protect your information.
Quick summary: Zivvy helps families schedule therapy routines. We do not provide medical advice. We collect only the data needed to run the app, never sell your data, and give you control to access or delete it.
Who we are
Zivvy (“we”, “us”, “our”) provides a scheduling and reminder app to help families stay consistent with therapy exercises at home.
What we collect
- Account data: name, email, password (hashed), and optional phone.
- Child profile data (optional): first name or nickname, age, and areas of focus (e.g., speech, motor). Avoid adding sensitive health details.
- Usage data: app interactions, device type, approximate region, and crash logs.
- Schedule & activity data: planned exercises, reminders, completion ticks, and notes you choose to record.
- Support data: messages you send to support.
How we use information
- Provide and improve Zivvy (scheduling, reminders, progress views).
- Send essential notices (service updates, security, billing).
- With your consent, send helpful tips or product updates (you can opt out).
- Maintain safety, prevent abuse, and comply with law.
Legal bases (EEA/UK)
- Contract: to deliver the service you signed up for.
- Legitimate interests: product safety, analytics, and improvement.
- Consent: marketing emails and optional data you add.
Children’s privacy
Zivvy is designed for parents and caregivers. We do not knowingly collect personal data directly from children. Parents control the information they store about their child. If you believe a child used Zivvy without consent, contact us to delete the account.
Sensitive data
Do not upload diagnoses, lab results, or medical histories into free‑text fields. Zivvy is not a medical device and is not intended for clinical decision making.
Sharing
- Service providers: hosting, analytics, notifications, email. They only process data on our instructions.
- Legal or safety: if required by law or to prevent harm.
- No selling of personal data.
Data retention
We keep data while your account is active. You can delete child profiles, activities, and your account at any time from settings or by contacting us.
International transfers
We may process data in the U.S. and other countries using appropriate safeguards (e.g., SCCs for EEA/UK).
Your rights
- Access, correct, export, or delete your data.
- Object or restrict certain processing.
- Withdraw consent (where applicable).
To exercise rights, email privacy@zivvy.app.
Security
We use encryption in transit, role‑based access, least‑privilege, regular backups, and monitoring. See Security & Data for details.
Third‑party services
- Hosting & DB: reputable cloud providers.
- Email/Notifications: transactional email and push providers.
- Analytics: privacy‑respecting product analytics with IP masking where possible.
Changes
We may update this policy. We’ll notify you of material changes by email or in‑app.