Privacy Policy

Zerofy stores the account details and bill-tracking data you enter so the app can work. We don't sell your data, we don't run ads, we don't connect to your bank, and you can export or delete everything at any time.

Account information. Your email address, your name, and a hashed password (we never see or store the password itself — authentication is handled by Supabase).

The data you enter to use the app. Property names and addresses, bill names and amounts, account balances, payment records, notes, and similar tracking data. This can include financially sensitive information — that's the point of the app — and it is only ever used to show your own data back to you.

What we deliberately do not collect: bank credentials, account numbers, card numbers, Social Security numbers, or any live connection to a financial institution. Zerofy has no integration that could access your money.

• To provide the Service — storing and displaying your data.
• To send transactional email (signup confirmation, password reset). We don't send marketing email without your consent.
• To respond when you contact support.
• To debug problems and keep the Service secure.

We do not sell or rent personal data. Ever.

Your data is stored in a PostgreSQL database hosted by Supabase in the United States (AWS us-east-1). Every table is protected by row-level security — database rules that scope every query to your own account. The application itself is hosted on Vercel. Both providers process data on our behalf under their own privacy and security terms; neither uses your data for their own purposes.

Zerofy uses only the cookies required to keep you signed in (Supabase authentication session cookies). There are no advertising or cross-site tracking cookies. If we add privacy-friendly usage analytics later, this policy will be updated first.

Your data is kept while your account is active, with automatic housekeeping: detailed monthly payment records older than 12 months and payment audit history older than 36 months are deleted on a rolling basis. You can export everything as CSV from Settings at any time.

When you delete your account (email support@zerofyapp.com), your data is permanently deleted from the production database. Residual copies in encrypted backups expire on the backup provider's rolling schedule (currently up to 30 days).

You can access, correct, export, or delete your data. Editing and CSV export are self-service in the app; for full account deletion or anything else, email support@zerofyapp.com and we'll handle it promptly. Depending on where you live (e.g. the EU/EEA under GDPR or California under CCPA) you may have additional statutory rights — contact us and we'll honor them.

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from children.

If this policy changes materially, we'll notify you by email or an in-app notice before the change takes effect. The “Last updated” date at the top always reflects the current version.

Privacy questions or requests: support@zerofyapp.com. See also the Terms of Service.