Privacy Policy
Last updated: August 25, 2026
Overview
ZIVO is a private, personal application for organizing the parts of your day — moments, workouts, diet, expenses, and more — in one calm place. This policy explains what ZIVO stores, how it is used, and the choices you have.
The Short Version
- Your content is private to your account and never sold or shared for ads.
- ZIVO does not use your data or your content to train third-party models.
- Backups live in your own Google Drive, under your own control.
- You can delete your content at any time, from inside the app.
Account & Authentication Information
ZIVO uses Firebase Authentication to sign you in, with Apple, Google, or email/password as sign-in options. Depending on the method you choose, ZIVO receives basic account details such as your name, email address, and a unique account identifier. That identifier is what keeps every piece of your data scoped to your account only.
Email Verification Codes
If you sign in with email, ZIVO sends a short verification code to confirm your address. Codes are hashed before storage (never kept in plain text), expire within minutes, and are used for nothing beyond verifying that the address is yours.
Your Content
Everything you create in ZIVO — moments, workout plans and sessions, diet plans and entries, expense logs, body-weight entries, and profile details — is stored in your account so the app can show it back to you across your devices. It is private to you and not visible to other users.
Photos & Local Storage
Where a feature lets you attach a photo (such as Moments or your profile), ZIVO accesses your device's photo library only when you pick or capture an image. Media lives first on your device; cloud backup happens only through the backup target you explicitly choose.
AI Assistant ("Ask")
Ask is an opt-in assistant that can answer questions about your own data — your workouts, meals, and spending. When you send a message, the relevant context is processed by the model provider solely to answer you. Conversations are stored privately in your account so history works across devices, and are never used to train third-party models.
Spotify
The music feature connects to your own Spotify account when you ask it to. ZIVO uses Spotify's official SDK to control playback and read what's currently playing. You can disconnect at any time, from Settings.
Account & Security Metadata
To keep your account safe and supportable, ZIVO keeps a small record of authentication events — when your account was created, when you last signed in and how, and when verification emails were sent. This metadata is security bookkeeping: it is never sold, shared, or used for advertising.
Google Drive Backup
Backup is optional and, if enabled, runs against your own Google Drive — using Google's drive.file scope, the most restrictive level of Drive access Google offers. It lets ZIVO see and manage only the files ZIVO itself created; it does not give ZIVO access to the rest of your Drive. Where this feature is not yet available in the version of ZIVO you are using, this section describes how it is designed to work once enabled.
Each user's backup lives in that user's own Google Drive, under their own control — ZIVO does not use a shared or centralized Drive account. Files backed up there are used solely to restore ZIVO-created media across your devices; they are never scanned, analyzed, or shared for any other purpose.
Data Sharing
ZIVO does not sell or rent personal data. Data is processed only by the infrastructure needed to run the app — Google Firebase / Google Cloud (authentication, database, and app logic) — plus the integrations you explicitly enable: your own Google Drive and your own Spotify account.
Data Retention & Deletion
Your content is retained until you delete it or delete your account. Files in your own Google Drive stay there until you remove them or disconnect the integration; ZIVO does not control retention of files once they exist in your Drive.
Your Control Over Your Data
You control the content you store in ZIVO and can remove it at any time within the app. Google Drive backup and the Spotify connection are opt-in and can be disconnected at any time — from Settings, or from your Google Account's third-party access settings.
Security
Access is enforced end-to-end: Firebase Authentication for identity, and Firestore security rules so that only your authenticated account can read or write your data. Verification codes are stored only as salted hashes, and data is encrypted in transit. No method of transmission or storage is 100% secure, but ZIVO is built to keep your personal content scoped to you.
Changes to This Policy
This policy may be updated as ZIVO's features evolve. The "Last updated" date above always reflects the most recent revision.
Contact
Questions about this policy or how ZIVO handles your data can be sent to ziadelsewedy1@gmail.com.