Safety and privacy in Zupzi: you decide what happens
In short
Zupzi is a free family chore app where parents decide what happens. The app has no ads and no third-party analytics or tracking software, and a child can only ever talk to Zuzi. Mission photos go only to your family's parents unless you turn on the photo coach, and both AI features stay off until you allow them.
Updated
Does Zupzi have ads or tracking?
No. There is no advertising in the app or anywhere else, and the app has no third-party analytics or tracking software and no advertising identifier. Zupzi never sells, rents or shares personal information for marketing, and there is nothing to buy in the app. Zupzi does keep its own event log to run the service; it carries internal ids, never a child's name, photo or words.
The privacy label on the App Store page, which Apple shows as the developer's own answers, lists Data Linked to You for App Functionality only: contact info (email address, name), user content (photos or videos, audio data, other user content) and identifiers (user ID, device ID). It has no "Data Used to Track You" section.
Who sees my child's mission photos, and for how long?
Only your family's parents, unless you turn on the optional photo coach below. Your child takes the photo with the camera (the mission screen never opens the photo library), and it goes to your phone for approval. Photos sit in private storage, kept apart for each family, and are shown only through short-lived links.
They are kept for one month by default, or 1 week, 3 months or 1 year if you choose. After that the image is deleted and only the record that the mission was done remains. See Photo proof and the video Approve with one tap.
Can my child talk to other people in Zupzi?
No. There is no chat or messaging between users: a child can only ever talk to Zuzi, the voice companion inside Zupzi, and only after you allow it. Your child's side has no web links and no way out to a browser, and it opens with her own four-digit PIN. The Funny Mirror, the silly-faces camera on the Games shelf, works entirely on the device: nothing is saved, sent or shared.
When does Zuzi listen?
Only after you allow it. In the Safety Center, Where Zuzi listens starts at Not yet. Until you choose Allowed, your child sees "Zuzi needs a grown-up" and no voice leaves the device.
- Where it goes: Alibaba Cloud's Qwen voice service in Singapore, through Zupzi's relay on Fly.io, which keeps nothing.
- What is sent: your child's voice and words, and her first name. Never an e-mail, a photo or your family's identity. Alibaba Cloud says it does not use this data to train its models.
- What Zupzi keeps: no audio. The full transcript and a summary are e-mailed to you after every conversation; Zupzi keeps the transcript only in that e-mail, plus a short record of when and for how many minutes, and the summary in your notices.
- How much: 10 minutes a month for the whole family, plus a daily limit you set from 0 to 50 minutes.
- Reports: report any conversation from its notice. A person reads every report.
Zuzi's instructions tell her to say she is a toy character, never a person, and never to ask for a last name, address, school or phone number. She is software and can still make mistakes, which is why the transcript comes to you. Read more on Zuzi, the voice companion or watch Talk to Zuzi.
What does the photo coach send, and where?
Nothing, unless you turn it on: it starts at Not yet. When allowed, the mission photo, the mission's name and its steps go to Alibaba Cloud's Qwen service in Singapore, and an AI model answers with a word of encouragement and a tip. Your child's name is never sent, and the data is not used for training. Zupzi keeps no copy of the photo for the coach, only one short sentence of what it said, for your approval screen. The coach can be wrong, and it never decides Stars: you still approve.
What does Zupzi keep about my child?
- Her first name or nickname, and an optional date of birth, which is never shown to anyone else.
- A portrait: a drawing from the gallery or a photo you choose, in private storage.
- Her four-digit PIN, stored only as a salted, one-way hash.
- What she does in the app: missions completed, Stars earned and spent, rewards asked for.
- Mission photos, for the period you pick, and the date you gave consent for her.
Children never create an account; a parent or legal guardian aged 18 or older holds it. Zupzi sends e-mail only about your own family, never to children, and never sends newsletters or marketing.
Which companies process data for Zupzi?
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and private photo storage | United States |
| Vercel | Runs Zupzi's server | United States |
| Resend | Delivers Zupzi's e-mails | United States |
| Apple, Google | Sign-in, only if you choose them | Their own regions |
| Alibaba Cloud (Qwen) | Zuzi and the photo coach, each only after you allow it | Singapore |
| Fly.io | Relays Zuzi conversations; keeps nothing | United States |
None of them may use the data for anything else. The full list is in the privacy policy, which is the source of truth for everything on this page.
How is my family's data protected?
Everything travels over HTTPS, and photos sit behind signed, short-lived links. A child's phone or tablet joins your family with a 6-digit code that expires after 10 minutes, and you can turn off any paired device (Set up your kid's tablet). Zuzi only opens with a ticket the server signs for that device.
How does parental consent work?
Zupzi records when you agreed, and Zuzi and the photo coach each have their own switch with its own date. The privacy policy calls this how Zupzi meets the parental-consent requirements of COPPA (United States) and article 14 of the LGPD (Brazil). That is Zupzi's own statement; no outside organization has certified the app.
How do I delete everything?
- One child: Family → the child → Remove.
- The whole family: Settings → Delete family account. You type a word to confirm, and your children, missions, Stars, rewards, photos and login are removed. This cannot be undone.
- Anything else, such as a copy of your data: write to support@zupzi.io. Privacy requests are answered within 30 days.
What can I set in the Safety Center?
Six settings on one parent screen. Nothing changes until you tap Save changes. Watch The Safety Center for a one-minute tour.
Quiet hours
Off until you turn them on, then 8 PM to 7 AM unless you move them. They stop the buzz; notices still wait for you in the morning.
Mission photos
Keep them for 1 week, 1 month (the default), 3 months or 1 year.
Time with Zuzi
A daily limit from 0 to 50 minutes; zero means no Zuzi today. The family's monthly minutes still count.
Where Zuzi listens
Not yet (the default) or Allowed.
Photo coach
Not yet (the default) or Allowed. Until you allow it, no photo leaves Zupzi.
Notifications ("Tell me about")
Which notices reach your phone: Everything, Approvals only, or Nothing.
What Zupzi doesn't do
- Zupzi holds no third-party privacy certification or seal.
- Alibaba Cloud does not publish a fixed retention period, so Zupzi does not promise that nothing is kept there once you allow Zuzi or the photo coach.
- Zuzi and the photo coach are software and can be wrong; that is why every Zuzi transcript reaches your inbox and the coach never decides Stars.
- Zupzi does not block apps, limit screen time or track your child's location.
What else do families ask?
Is Zupzi a safe chore app for my family?
Zupzi is built so that parents decide what happens: no ads, no third-party tracking software in the app, no chat with other people, and every AI feature off until you allow it. The privacy policy spells out exactly what is kept and where.
Does Zupzi show ads or sell my data?
No. There is no advertising in the app or anywhere else, and Zupzi never sells, rents or shares personal information for marketing.
Can strangers contact my child through Zupzi?
No. There is no chat or messaging between users. A child can only ever talk to Zuzi, and only after you allow it.
Does Zupzi keep recordings of my child's voice?
No. Zupzi keeps no audio. The full transcript is e-mailed to you after every conversation and is not stored on Zupzi's servers beyond the time it takes to send it.
Is my child's data used to train AI models?
Alibaba Cloud, which runs Zuzi and the photo coach, says it never uses this data to train its models. Neither feature sends anything until you allow it, and the photo coach never receives your child's name.
Does Zupzi follow COPPA and the LGPD?
Zupzi's privacy policy says the consent you give when adding a child is how it meets the parental-consent requirements of COPPA and article 14 of the LGPD. That is Zupzi's own statement, not an outside certification.
Can I use Zupzi without Zuzi or the photo coach?
Yes. Both start at Not yet, and missions, photo proof, Stars and rewards all work without them. More answers are on Help & FAQ.
How do I delete my child's data?
Remove the child under Family → the child → Remove, or delete everything under Settings → Delete family account, photos included. For anything else, write to support@zupzi.io; a person reads every message.
Zupzi is free on the App Store
iPhone and iPad · United States and Brazil · nothing to buy inside