Zzip App Privacy Policy

This policy explains what data the Zzip iOS app ("Zzip", "the app") processes, why, who it is shared with, and what your rights are. The waitlist form on our website is covered by a separate section of the website's privacy page; the waitlist inside the app is covered here.

In short:

• Your sleep data is yours. We do not sell it or use it for advertising. There are no ads and no advertising tracking in the app
• We collect usage statistics to improve the app; your health and sleep values never go into them, and you can turn them off in the app
• Microphone audio is never recorded. In night mode it never leaves your phone; only the number of snores is kept
• We only read from Apple Health and never write to it
• You can delete your account and all of your cloud data from inside the app in one tap

1. Data controller

Zzip is developed by Furkan Aksoy. Furkan Aksoy is the data controller under Turkey's Personal Data Protection Law No. 6698 ("KVKK") and, where it applies, the EU General Data Protection Regulation ("GDPR").

Contact: info@getzzip.com

2. What data we process

Account information

• When you first open the app, an anonymous account ID is created for you. It contains no name or email address
• If you choose, you can link your account with Sign in with Apple or Google. In that case the email address Apple or Google passes to us (with Apple this may be a private relay address) and the account ID are processed

Profile information (what you enter)

• Your name or nickname, date of birth, gender, height and weight
• Your sleep goal, bedtime and wake time, how long you take to fall asleep, your goals
• If you choose to share them: health conditions (for example sleep apnea, reflux, insomnia), medication and notes
• Your choices in the app: avatar, settings, alarms and routines

Health conditions and medication are special categories of personal data. These fields are optional; you can use the app without filling them in.

Sleep and daily data

• Your nights: bedtime and wake time, sleep duration, estimated sleep stages (deep, REM, light, awake), how you felt in the morning
• In night mode: movement intensity in bed minute by minute and the number of snores per minute
• Water tracking, steps and an activity summary

Cycle tracking

Cycle tracking is optional. Your entries (period start dates, cycle and period length, reminder preference) are stored on your phone and never go into usage statistics.

If you choose the encrypted backup, these entries are encrypted on your phone and sent to your account only in encrypted form. The key that opens them lives in Apple's iCloud Keychain and never reaches our servers, so we cannot read your entries. If iCloud Keychain is off, the backup cannot be opened on a new phone. You turn the backup on from the cycle card on the Balance page and can turn it off at any time from its Edit screen.

If you do not choose the backup, your entries never reach our servers. In that case they are removed from your phone when you sign out or delete the app, and we cannot bring them back.

Apple Health (HealthKit)

If you allow it, we only read the following from Apple Health: sleep analysis, heart rate, resting heart rate, blood oxygen, respiratory rate, step count, active energy, walking and running distance, workouts. We do not write any data to Apple Health.

We use HealthKit data only to provide you with sleep and health features. We do not use it for advertising, marketing or data sales, and we do not share it with advertisers or data brokers.

Motion and Fitness

If you allow it, your phone's own motion history and step counter are processed on the phone to estimate your sleep from the hours the phone stays still and to show your daily steps. This raw motion history is never sent to our servers; only the night estimate made from it (bedtime, wake time, duration) is saved.

Microphone

In night mode the microphone is used to count snoring. Audio is not recorded, not stored and never sent off the phone. A sound classifier on the phone evaluates the sound in real time; only "how many snores were counted in this minute" is kept.

If you dictate in the chat, the microphone is on only from the moment you press the button until you stop. Your speech is turned into text by the phone's speech recognition; if your phone cannot do this on the device for your language, the audio goes to Apple's speech recognition service for that purpose. Zzip does not record audio or send it to its own servers. The resulting text is processed as a chat message only if you send it.

Notifications

To send notifications, a notification token for your device (push token) is processed. If notifications are allowed, besides alarms and reminders we may send sleep tips and, if you do not use zzip Pro, notifications that introduce zzip Pro. You can turn off notifications introducing zzip Pro and campaigns in the app under Profile → Notifications → Tips from Zziper; while this is off you will not receive promotional remote notifications either. You can turn off all notifications in Settings → Zzip → Notifications on your iPhone.

Zzip device waitlist

If you join the waitlist in the app, the email address you enter is stored in your account. It is used only to let you know when the Zzip device goes on sale; it is not used for advertising or any other purpose and is not shared with anyone. When you delete your account, your email address is deleted too; to have it deleted earlier, write to info@getzzip.com.

Purchase information

zzip Pro subscriptions are bought through Apple. We never see your payment details (card etc.). Your subscription status, product and renewal dates are processed by our subscription provider together with your account ID.

App usage statistics

To improve the app, we record with Firebase Analytics which screens are opened and which features are used (for example completing onboarding steps, starting night mode, finishing a test, seeing the subscription page and purchase steps). These records are associated with your account ID and an app instance ID specific to your device.

You can turn usage statistics off at any time in the app with the Profile → Account → Usage statistics switch; while it is off, no usage information is sent.

These records only contain "that something was done". Your name, email, the content of your chats and none of your health or sleep values (sleep duration, snore count, mood, test answers and results, water intake, sleep goal, Apple Health and Motion data) are ever added. The advertising identifier (IDFA) is not collected, the data is not used for ad personalisation and it is not combined with your behaviour in other companies' apps.

Device and app identifiers

Your account ID, an app installation ID specific to your device (issued by Firebase) and your notification token are processed. They are used to recognise your account, send notifications, link your subscription to the right account and count usage statistics.

Approximate location

Location permission is never requested and GPS location is not used. The usage statistics service derives an approximate country and city level location from the connection's IP address; the IP address itself is not stored.

Diagnostics and performance data

To understand crashes, freezes or slowness, technical information such as device model, iOS version, app version, error logs and launch or screen transition times may be collected. This information contains no health data.

App security

So that our services can only be used from the genuine Zzip app, devices are verified with Apple App Attest. This verification contains nothing that identifies you personally.

Zzip AI chat (zzip Pro)

When you send a question to Zzip AI, the following is sent to our AI service provider so that an answer can be generated:

• The message you wrote and the recent messages in the same chat
• A summary of your record in the app: your name or nickname, age, gender, body mass index, sleep goal and schedule, the goals and health conditions you shared, a summary of your last 14 nights (times, duration, score, estimated stages, snore count, morning feeling), your water, step and activity record for the last 14 days (steps, walking distance, workout time, active energy, how the day felt)

Your email address and account details are not sent. This data is used only to generate your answer; under the provider's paid service terms it is not used to train AI models. Your chats are stored on your phone and, if your account is linked, in your account in Firebase so you can see them later; you can delete any chat from the Chats page. Using Zzip AI is optional; your permission is asked the first time, and if you do not use it, nothing is sent. You can withdraw this permission at any time under Profile → Account → Zzip AI permission.

Zzip AI answers are for information only; they are not medical advice, diagnosis or treatment.

3. Why we process data (purposes and legal bases)

We do not use your data to make automated decisions about you by profiling, to show ads or to sell to third parties.

4. Who we share data with

We share your data only with the following service providers that help us provide the service and work on our behalf, and only as far as needed:

• Google LLC (Firebase): account infrastructure (Firebase Authentication), cloud database and backup (Cloud Firestore), notifications (Firebase Cloud Messaging), app verification (Firebase App Check), usage statistics and approximate location (Firebase Analytics / Google Analytics), diagnostics and performance data, and the AI infrastructure of the Zzip AI chat (Firebase AI Logic)
• RevenueCat, Inc.: subscription and purchase management; it also passes subscription events (trial, renewal, cancellation) to our usage statistics
• Apple Inc.: payment, Sign in with Apple, Apple Health and App Attest
• Google LLC (Google Sign-In): if you choose to sign in with Google

These providers are bound to protect your data at least as well as described in this policy. We may also provide information to competent public authorities when legally required, to the extent the law requires.

5. International transfers

Our service providers' servers may be located outside Turkey (mainly in the European Union and the United States), so your data is transferred abroad. These transfers rely on your explicit consent under Article 9 of KVKK and/or standard contracts with the providers.

6. How long we keep data

• Your account and cloud data are kept until you delete your account
• When you delete your account, your profile, nights, daily entries, chats, settings and waitlist email in the cloud are deleted immediately; if you linked Apple, the authorisation Sign in with Apple gave Zzip is also revoked
• Your encrypted cycle backup is deleted immediately when you turn the backup off, delete cycle tracking or delete your account; its key is also removed from iCloud Keychain. Signing out does not delete the backup
• Data on your phone is deleted from your phone when you delete the app
• Purchase records may be kept by the subscription provider for as long as tax and accounting law requires
• Usage statistics are kept for at most 14 months and then deleted automatically; diagnostics and performance data are kept for at most 90 days
• Your chats with Zziper are kept until you delete them or delete your account; when you sign out, the copy on your phone is deleted and it stays in your account. Records the AI service provider keeps for a short time to prevent abuse are subject to its terms

7. Deleting your account and data

You can delete your account and all of your cloud data in the app under Profile → Account → Delete account. If you cannot access the app, write to info@getzzip.com; we will complete your request within 30 days at the latest.

You can turn off Apple Health permissions at any time on your iPhone under Settings → Health → Data Access & Devices → Zzip, and microphone, motion and notification permissions under Settings → Zzip.

8. Your rights

Under Article 11 of KVKK and the GDPR you have the right to:

• Learn whether your personal data is processed and, if so, request information about it
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties in Turkey or abroad to whom it is transferred
• Ask for it to be corrected if it is incomplete or inaccurate
• Ask for it to be deleted or destroyed
• Ask for corrections and deletions to be notified to the third parties it was transferred to
• Object to a result against you arising from analysis exclusively by automated systems
• Claim compensation if you suffer damage because of unlawful processing
• Withdraw your consent at any time
• Object to processing based on legitimate interest (usage statistics, diagnostics)
• Receive a copy of your data in a portable format (GDPR)

You can send your requests to info@getzzip.com. We will reply free of charge within 30 days at the latest. If you are not satisfied with our reply, you can apply to the Turkish Personal Data Protection Board or, in the EU, to your local data protection authority.

9. Security

Data is encrypted in transit (HTTPS/TLS). Only your account can access your cloud data; this is protected by access rules and app verification (App Check). No system is entirely risk free; if a data breach happens, we will inform you and the relevant authorities as the law requires.

10. Children

Zzip is not directed at children under 13, and we do not knowingly collect data from children under 13. If you notice that such data has been collected, write to info@getzzip.com and we will delete it.

11. Medical disclaimer

Zzip is not a medical device. Sleep stages, snore counts, energy estimates, recommendations and Zzip AI answers are estimates for information only; they cannot be used for diagnosis or treatment. Talk to a doctor about any concerns about your health.

12. Changes

We may update this policy from time to time. When there is an important change, we will let you know in the app. The current text is always published on this page, with the date at the top.

Website waitlist

What data do we collect?

When you leave your email address in the “Be the first to know” form, we only record the following: your email address, the date the record was created, the page you filled the form on and the country code the connection came from. We do not store your IP address, name or any other personal information.

What do we use it for?

Only to share Zzip’s progress and launch announcement. We do not share your address with third parties, sell it or use it for advertising.

Where is it stored?

Records are kept on Cloudflare infrastructure, in a database created only for this site. Access is limited to the site administrator.

If you want your record deleted

You can leave the list at any time. Just write to info@getzzip.com with “I want to unsubscribe” and we’ll delete your record.

Other connections

No third-party analytics or advertising trackers are used on the site. To improve the site we keep a single anonymous counter on our own infrastructure: daily totals of page views and form interactions. No IP address or personal information is stored, and this counter uses no cookies.