← Back

Privacy Policy

Last updated: October 7, 2026

Welcome to Zoku. We take your privacy very seriously. This privacy policy explains how we collect, use, share and protect your personal information.

Zoku offers a free version and a Premium subscription version. Personal data is processed in the same way regardless of the version used.

Data controller

The data controller for personal data is:

• Name: Romain Loeuillet
• Status: Self-employed (auto-entrepreneur)
• Email: [email protected]
• Country: France

1. Information we collect

1.1 Information you provide

• User account: first name, last name, email address
• Family information: family members
• Content: messages, events, memos, recipes, shopping lists
• Photos and images: images sent via family chat from your camera or gallery
• Location: GPS position only when the user voluntarily triggers the feature via a dedicated button (no automatic or background collection)

2. How we use your information

We use your information to:

• Provide and improve our services
• Create and manage your account
• Enable communication between family members
• Synchronize your data across your devices
• Send notifications (events, locations, etc.)

3. Sharing your information

3.1 Within your family

Your family data is shared only with members of your family group. This includes: messages, events, family memos, shopping lists, shared locations.

3.2 With third parties

We share certain information with:

• Firebase (Google): data hosting, authentication, push notifications
• Google Play Billing / Apple App Store: management of payments and Premium subscriptions. No banking data is accessible or stored by Zoku.
• Google Analytics 4 (website): audience measurement for myzoku.fr, only after you accept
• WhatsApp (Meta): only if you choose to contact us via WhatsApp from the app. The pre-filled message contains the app version, the language and a short identifier of your account, so we can help you; you can edit it before sending. Your messages go through WhatsApp and are subject to Meta's privacy policy.

We NEVER sell your personal data to third parties.

4. Data retention

We retain your data:

• Account data: as long as your account is active
• Messages and content: until you delete them
• Technical logs: 90 days maximum

You can delete your account directly from the app or by contacting us by email. Deletion results in the permanent erasure of your personal data.

5. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: delete your data ("right to be forgotten")
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: restrict the processing of your data

To exercise these rights, contact us at [email protected]

6. Security

We implement robust security measures:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest (Firebase)
• Secure authentication with Firebase Auth
• Passwords hashed with bcrypt
• Monitoring and detection of suspicious activity
• Regular backups

7. Location data

Location sharing is entirely optional and under your control:

• You choose when to share your location
• You can stop sharing at any time
• Location is shared only with your family

8. Camera and gallery access

Zoku may request access to your device camera and gallery so you can send images in your tribe chat.

• Sent images are stored securely
• They are shared only with members of your family group
• Camera and gallery access is only used when you choose to send an image
• No image is collected automatically or in the background

9. Minors' data

Zoku may be used by minors under the supervision of their parents/legal guardians. Parents are responsible for creating and managing their children's accounts.

For minors under 16: parental consent is required. Parents must supervise their children's use of the app.

10. Similar technologies and technical data

This page covers both the Zoku mobile app and the myzoku.fr website.

In the mobile app

The app does not use web cookies. It relies on equivalent technologies (local device storage) to:

• Keep your session signed in
• Remember your preferences (language, theme)
• Analyze app usage
• Improve performance

On the myzoku.fr website

The website sets two categories of tracker. The first are necessary for it to work (session, language and theme preference) and cannot be turned off. The second are for audience measurement: we use Google Analytics 4 to know which pages are visited and how many people read them.

Google Analytics is only loaded after you explicitly accept. Until you do, no measurement script is downloaded and no audience cookie is set. Declining is as easy as accepting, and the « Cookies » link at the bottom of every page lets you change your mind at any time. We serve no advertising and resell no data.

We also count clicks on some of the site's links (menu, social networks, download buttons), with no cookie and no consent required. Only a daily total is kept, broken down by country (inferred from the connection by our host, without us reading or keeping your IP address), device type, operating system, language and referring site. No data can identify you or follow your browsing.

11. Changes to this policy

We may modify this privacy policy. In case of significant changes, we will inform you via:

• Push notification in the app
• Email to your registered address
• Banner in the app

The "Last updated" date at the top of this page indicates when the policy was last modified.

12. International transfers

Your data may be transferred to and stored on servers located outside your country, notably in the United States (Firebase/Google Cloud). We ensure that these transfers comply with the GDPR and data protection laws.

13. Legal basis for processing

We process your data based on:

• Performance of contract: to provide our services
• Consent: for optional features (location, notifications)
• Legitimate interests: service improvement, security, fraud prevention
• Legal obligations: compliance with applicable laws

14. Supervisory authority

If you believe your rights are not respected, you can file a complaint with the French data protection authority (CNIL):

• Website: www.cnil.fr
• Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, France

© 2026 Zoku - All rights reserved