Zuzu Privacy Policy

Zuzu is a baby and pregnancy tracker for iPhone, iPad, Apple Watch and Android, provided by Magic Lab Solutions. This policy explains what Zuzu collects, why, who helps us run it, how long we keep it, and how to reach us. It covers the Zuzu apps and the services behind them.

What Zuzu collects

Your account. You can start using Zuzu without an account. If you create one, we receive your email address and, if you sign in with Apple or Google, the name and email address they share with us; with an email and password, we receive the email address. Your account has a random user ID. If you don’t create an account, Zuzu still gives your installation a random ID so your diary can be saved.

Your family. The name you use in the family, your role (parent or caregiver), and who belongs to your family. When you invite someone, we create an invite code; if you invite them by email, we receive their email address and send them the invitation.

Your baby’s diary. What you choose to log about your baby: the baby’s name, date of birth or due date, gender if you give it, and entries for sleep, feeding, pumping, diapers, growth (weight, length, head size), teeth, milestones, notes, name ideas, and health records such as medicine, illness, temperature, vaccinations and doctor visits. During pregnancy this includes your due date and, if you use them, contraction and kick sessions. This is information about your child and, in part, health information, and it is only used to provide Zuzu to your family.

Photos. Photos you add to milestones and memories are kept on your device and uploaded so your family can see them on their devices.

Settings and notifications. Your notification preferences, language, time zone, and a push token so we can send you reminders and tell your family’s devices when something changes.

Purchases. Apple or Google processes every payment, and we never receive card details. To know which plan your family has, our subscription services receive your account’s random user ID, the purchase records the store sends (the product, dates, prices and transaction identifiers), the app version and the store country. On iPhone this is our own service, Horse Revenue, which runs on Google Cloud; on Android, and for purchases made in older iPhone versions, it is RevenueCat. If you redeem a Zuzu code, we receive the code, and on iPhone a token for it is kept in your iCloud account so another of your devices can take over the access.

How the app is used, and crashes. Firebase Analytics records events such as which screens are opened and which features are used, with your device type, app version, country and a random app-instance ID. Firebase Crashlytics records crash reports and diagnostic information when the app fails. On Android, both are also linked to your account’s random user ID. Neither includes your name or email address.

Ads that brought you to Zuzu. Zuzu does not show ads. To learn which of our ads lead people to install and subscribe, the Meta (Facebook) SDK tells Meta when the app is opened and when a purchase is made, with the product, price and currency. On iPhone, Meta receives the advertising identifier only if you allow tracking when Zuzu asks; if you don’t, Zuzu does not track you. On Android, the Meta SDK and Firebase can use your device’s advertising ID, which you can reset or delete in your Android settings. On iPhone, if you installed Zuzu from an Apple Search Ads ad, Apple tells us the campaign, ad group and keyword, without identifying you.

How we use it

To provide Zuzu: save and sync your family’s diary across your devices, show predictions, insights, charts and reminders, send invitations and notifications, and give your family the plan it has. To keep Zuzu working: fix crashes and errors, prevent abuse, and keep records of purchases. To improve Zuzu and decide what to build next, from usage and crash information. To measure which of our ads work, as described above. We do not sell your personal information, and we do not use your baby’s diary for advertising.

AI insights

If your family has Premium and you ask Zuzu for insights, a summary of your baby’s recent diary, including the baby’s name, age and the entries above, is sent to Google’s Gemini AI service, which returns written insights. Gemini processes it to answer the request on our behalf. Insights are only created when you ask, and we keep the latest answer for a few hours so asking again doesn’t send your baby’s data a second time.

Who sees your information

Your family. Everyone you invite to your family sees and can add to your baby’s diary, according to the role you give them. A caregiver can be removed from the family at any time.

Providers that run Zuzu for us. They process information only to provide their service to us:

Meta, for measuring our ads, as described above. Meta uses this information under its own policies.

We may also disclose information when the law requires it, to protect the safety of our users, or as part of a sale or merger of our business, in which case this policy continues to apply.

Where it is stored and how it is protected

Your family’s data, photos and our servers are on Google Cloud in the United States. Zuzu’s apps talk to our servers over encrypted connections (HTTPS), access to your family’s data requires your signed-in account, and only members of your family can read it. If you live outside the United States, your information is transferred there; where the law requires it, these transfers rely on safeguards such as the European Commission’s standard contractual clauses offered by our providers.

How long we keep it

We keep your account and your family’s diary while you use Zuzu. You can delete your account in the app, in Settings → Family & Account (on Android, Delete Account at the bottom of that screen; on iPhone, in the ⋯ menu at its top), or by emailing us. Deleting your account removes your access to the family:

• If you set the family up and you are its only parent, the family and everything in it (the baby profiles, the diary and the photos) are deleted, and any caregivers are removed from it.
• If you set the family up and another parent is in it, the family and its diary pass to that parent, and your account and your own information are deleted.
• If you joined someone else’s family, your account and your own information are deleted, and the family’s diary stays with them.

Our daily database backups are deleted automatically after 30 days, so deleted information can remain in them until then. Purchase records are kept as long as needed for support, accounting and legal obligations. Usage statistics and crash reports are kept to understand and improve the app and are not linked to your name or email address. On iPhone, Settings lets you export your baby’s data at any time.

Children

Zuzu is made for parents and caregivers, who must be adults, and is not directed at children. It stores information about babies and children only as their parents or caregivers enter it, and that information stays under their control: they can change or delete it at any time, as described above.

Your choices

• You can use Zuzu without an account, and create one later.
• On iPhone, you can allow or refuse tracking when Zuzu asks, and change it in Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID in your device’s settings.
• You can turn notifications off in Zuzu’s settings or your device’s settings.
• You can remove someone from your family, or leave a family, at any time.
• You can delete your account in the app or by emailing us.

Your rights and questions

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how we use it, and to withdraw consent you have given. Where the GDPR applies, we rely on our contract with you to provide Zuzu, on your consent for ad measurement on iPhone and for notifications, and on our legitimate interests for usage statistics, crash reports and security. To exercise a right or ask a question, email contact@magiclabsolutions.com. You can also raise a concern with your local data-protection authority.

When you contact us

If you email us, we receive your address and whatever you include. We use it to reply and resolve your request, and keep the correspondence only as long as needed for support and applicable obligations. Our email provider processes messages to deliver this service.

These web pages

The privacy link in the app opens this website only when you select it. These pages contain no advertising tags, analytics scripts or cookies set by us. Our hosting provider, GitHub Pages, receives technical request information such as an IP address when a page is loaded.

Changes

If Zuzu’s data practices change, we will update this page and its date, and give any notice or choices the change requires.