Privacy Policy

1. About This Policy

This Privacy Policy explains how Zupali handles information when you use the Zupali Android app, website, social features, messaging, media features, notifications, safety tools and related services.

Zupali is designed for adults aged 18 and older. Our Child Safety Standards explain how we handle underage and child-safety concerns.

2. Information We Process

Account and profileEmail address, display name, language, profile details, preferences and account identifiers.

Messages and social activityDirect messages, reactions, follows, comments, posts, stories, reels, reports, blocks and related interaction records.

Photos, video and audioMedia you choose to upload, voice notes, thumbnails and limited technical metadata needed to provide media features.

CallsAudio/video call signalling, call status, duration and technical connection information needed to operate calls.

Device and notificationsPush-notification tokens, app/device technical information, network state and information needed to deliver alerts and keep the service secure.

Safety and supportReports, moderation decisions, safety signals and information you provide when contacting support.

3. Camera, Microphone and Media Access

Zupali requests camera or microphone permission only when a feature needs it, such as taking or selecting media, recording a voice note, or joining an audio/video call. You can deny or revoke Android permissions through your device settings.

Zupali does not request precise location, contacts, SMS or call-log permissions in the current Android release.

4. How We Use Information

create and maintain your account and profile;
deliver messaging, social, media, notification and audio/video call features;
show people and content you are allowed to view;
prevent spam, fraud, abuse, impersonation and unsafe conduct;
process reports, blocks and moderation actions;
provide support, troubleshoot problems and maintain reliability;
comply with applicable legal and safety obligations.

5. Automated Safety and AI-Assisted Moderation

Zupali uses automated safety systems to help review certain user-generated content for policy violations. This may include text and selected media submitted to social features.

Our current moderation stack can use Cloudflare Workers AI as an automated safety provider. Automated results may approve content, reject clear violations, or send content for further review. Reports can also enter a moderation queue for human review.

Important: Automated moderation is a safety aid, not a promise of continuous human monitoring. Use the in-app report and block tools whenever you encounter unsafe content or behavior.

6. Service Providers

Depending on the feature you use, information may be processed by:

Supabase — authentication, database, storage, realtime features and server-side functions;
Firebase Cloud Messaging — push-notification delivery;
Agora — real-time audio/video call media and related technical call functionality;
Cloudflare — website/security infrastructure and automated moderation services, including Workers AI where enabled.

Third-party providers process data according to their own terms and privacy practices. Zupali remains responsible for configuring integrations and limiting use to the functionality described here.

7. Advertising and Analytics

The current Google Play release does not use the Android Advertising ID for live ad delivery. Firebase Analytics collection is disabled in the current Android configuration. If Zupali later activates advertising or additional analytics, the relevant disclosures and Google Play Data Safety information will be updated.

8. Storage, Security and Retention

We use access controls, encrypted network connections and account-scoped permissions intended to restrict access to user data. No system can guarantee absolute security.

Information is retained for as long as reasonably needed to provide the service, maintain safety and integrity, resolve disputes, prevent fraud or meet legal obligations. Deleted information may remain temporarily in secure backups or technical systems until normal backup rotation completes.

9. Account Deletion

You can request deletion inside the Zupali app through Safety and privacy → Delete account. A submitted request receives a 24-hour grace period. During that period, you can cancel the request before processing begins.

After the grace period, Zupali begins processing deletion of the account and associated active data, subject to limited information that may need to be retained for security, fraud prevention, abuse investigations, dispute resolution or applicable legal obligations.

If you cannot access the app, use our Delete Account web resource to start a deletion request without reinstalling the app.

10. Child Safety

Zupali is for adults 18+. Child sexual abuse and exploitation, CSAM, grooming, sexual solicitation involving minors and other child endangerment are prohibited. See our Child Safety Standards.

11. Your Choices

edit profile information available through the app;
manage notification preferences and Android permissions;
block or report users and content;
request account deletion and cancel a pending request during the grace period;
contact us with privacy or support questions.

12. Contact

For privacy questions, account concerns or data requests, email support@zupali.com or use our Contact page.

Never send your Zupali password, verification code, recovery code or financial credentials in an email or support request.