Privacy Policy

Last updated: 7 October 2026

Zuzado Club (“Zuzado”, “we”) is a free social app at zuzado.net for chatting with friends, sharing posts, stories and Zo videos, and talking in voice and video calls. This page explains what information we collect, why, who can see it, how long we keep it, and the choices you have.

The short version

We don’t sell your information and we don’t show ads.
No advertising or tracking cookies, and no third-party trackers.
You choose who sees each post, Zo and story: everyone, friends, or only you.
Your password is protected on your device before it is sent, so we never see it.
You can delete your account at any time. It is permanent.

1. Who can use Zuzado

You must be 13 or older to use Zuzado. If we learn that an account belongs to someone under 13, we delete it. Parents or guardians who think their child has an account can write to privacy@zuzado.net.

2. Information you give us

Account: username, display name and email address. We use your email to sign you in, send sign-up codes, password-reset links and security alerts. One email can have one account.
Password: it is scrambled on your device before it is sent, then stored only as a one-way hash. If you turn on 2-step verification, its secret is stored encrypted and backup codes only as hashes.
Profile (optional): profile and cover photo, bio, school, work, city, birthday, contact email and links. You choose who can see your birthday and contact email.
What you share: posts, photos, Zo videos (with any text, stickers, songs, voice-overs and effects you add), stories, comments, reactions, saved posts, private messages, group messages, and the groups, channels, roles, webhooks and bots you create.
Files you send with “Send a file” go directly from your device to the other person’s device. They are not stored on our servers.
Points: your balance and history, gifts you send and receive, and your top-up requests. Payments for points happen outside Zuzado (for example a bank transfer); the receipt photos and messages you send in the Points chat are stored so admins can check them. We never ask for card numbers, PINs or passwords.
Safety: reports you send and people you block.

3. Information collected automatically

Sign-ins and security: the IP address and device/browser type of each sign-in and security change. We use it to show “Where you’re signed in” and “Recent security activity”, to warn you about new sign-ins, and to stop abuse (for example, fake invite rewards).
Activity for your feeds: what you view, react to, comment on and save, and how long you watch Zo videos. This is used only to order your “For you” and Zo feeds.
Calls: who called whom, when, and for how long (for call history). Calls themselves are encrypted and go directly between devices, or through Cloudflare’s relay when a network requires it. We don’t record calls.
Notifications: if you turn on push notifications, the push address your browser gives us.
Cookies and storage: a sign-in cookie, and one that lets your browser load private photos and videos. Your settings (theme, language, sounds, volume) are saved on your device.
Totals: daily counts of requests and storage, to stay within our hosting limits. These are not linked to you.

We only use your camera, microphone and photos when you choose to: recording a Zo, joining a call, or picking a photo.

4. How we use information

To run Zuzado: deliver messages and notifications, show your content to the people you chose, and keep the app working.
To keep accounts and members safe: sign-in protection, spam and scam-link filters, limits for new accounts, and checking reported content.
Zo videos and video stories are checked automatically for nudity before they are published. A few frames are checked by an AI service that runs on Cloudflare, only for this purpose.
To personalize your feeds (see above).
To send emails you need (codes, password resets, security alerts). We don’t send marketing emails.
To run points, gifts and rewards.

Other members: what you share, based on the audience you pick. Your username, display name and profile photo are visible to other members. Group members see the messages in channels they can access.
Bots in groups: if a group adds a bot, the person who made that bot can read the messages in the channels the bot can see.
Zuzado admins: only what they need to keep the service safe and help you: content that is reported, posts held for a link check, the Points chat, and account details when handling a problem. Private messages are stored on our servers so they can be delivered; they are not end-to-end encrypted. Admins only look at a private message when it is reported, to investigate abuse, or when the law requires it.
Service providers that process data for us and only as we instruct:
- Cloudflare: hosting, database, file storage, photo and video processing, the automatic content check, and the call relay.
- Resend: sending our emails.
- Google, Apple or Mozilla: delivering push notifications to your browser (the content is encrypted).
The law: we may share information if the law requires it, or to protect someone from serious harm.

We don’t sell or rent your information, and we don’t share it with advertisers.

6. Where it is stored

Zuzado runs on Cloudflare’s worldwide network, so your information may be stored or processed outside your country. Connections to Zuzado are always encrypted (HTTPS).

7. How long we keep it

Your account and content: until you delete them or your account.
Stories: 24 hours.
Activity used for feeds: views for 90 days, interests for 180 days.
Sign-in sessions: they end after 30 days without use. Security activity: 1 year.
Sign-up codes and password-reset links: they expire within 30 minutes.
Backups: we keep weekly backups for up to 8 weeks, and our database can be restored to any point in the last 30 days. After you delete something, copies in backups disappear within that time.

8. Your choices and rights

Edit your profile, choose who sees each post, Zo and story, and delete them at any time.
Turn off “Let others use this sound” on your Zo.
Block or report anyone. Turn push notifications and sounds on or off.
See where you’re signed in, log out other devices, and turn on 2-step verification in Settings → Security.
Delete your account in Settings → Account → Delete account. This permanently removes your profile, posts, Zo videos, comments, messages and photos for everyone.
To ask what information we have about you, to get a copy, or to correct it, write to privacy@zuzado.net. We reply within 30 days.

9. Security

We protect your information with encrypted connections, passwords that never reach us in readable form, encrypted 2-step verification secrets, limits on repeated attempts, and filters for scam links. No online service is perfectly secure; if you find a problem, please tell us at privacy@zuzado.net.

10. Changes to this policy

When we change this policy we update the date at the top. If a change is important, we will tell members in the app.

11. Contact

Questions or requests about your privacy: privacy@zuzado.net.