Privacy Policy

Last updated: August 12, 2026

1. Introduction

Family Zone Limited ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Family Zone application and website (collectively, the "Service").

We are registered in England and Wales with company number10811218.

2. Data Controller

Family Zone Limited is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@familyzone.ai.

3. Information We Collect

3.1 Information You Provide

  • Account Information: Name, email address, password, profile picture
  • Family Information: Family member names, relationships, roles
  • Content: Calendar events, tasks, notes, shopping lists, meal plans, photos, documents
  • Communications: Chat messages, support requests
  • Payment Information: Billing details (processed securely by our payment provider)

3.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type
  • Usage Data: Features used, time spent, interactions
  • Log Data: IP address, access times, error logs
  • Cookies: See our Cookie Policy for details

3.3 Information from Third Parties

  • Calendar Sync: Events from connected Google, Microsoft, or Apple calendars
  • Email Intelligence: Email content analysis (with your explicit consent)
  • Social Login: Profile information if you sign up via Google or Apple

4. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process your transactions and subscriptions
  • Send you notifications and reminders you've requested
  • Provide AI-powered features (meal planning, Zoe assistant, email intelligence), which share data with our AI provider once you permit it — see section 7
  • Improve and personalize your experience
  • Respond to your support requests
  • Send important updates about the Service
  • Detect and prevent fraud or abuse

5. Legal Basis for Processing (GDPR)

Under the UK GDPR and EU GDPR, we process your data based on:

  • Contract: To provide the Service you've signed up for
  • Consent: For AI features, email intelligence, marketing communications, analytics cookies
  • Legitimate Interests: To improve our Service, prevent fraud, and ensure security
  • Legal Obligation: To comply with applicable laws

6. Data Sharing

We may share your information with:

  • Family Members: Content you choose to share within your family
  • Service Providers: Cloud hosting (Microsoft Azure), payment processing, email delivery
  • AI Provider: Microsoft Azure OpenAI Service, with your permission and only for the AI features you use — see section 7
  • Legal Requirements: If required by law or to protect our rights

We do NOT sell your personal data to third parties for advertising purposes.

7. AI Features and Our Third-Party AI Provider

Family Zone's AI features — the Zoe assistant, photo descriptions and tag suggestions, meal and recipe help, chat summaries and smart replies, and Email Intelligence — send your data to a third-party AI service. We ask for your permission in the app before any data is sent, and nothing is sent until you grant it.

7.1 Who receives the data

The Microsoft Azure OpenAI Service, operated by Microsoft Corporation, is the only third-party AI provider we use. We do not send your data to any other AI provider.

7.2 What is sent

  • The messages and questions you write to Zoe
  • The items relevant to your request: task titles, calendar events, shopping and meal items, notes, contacts, budget entries, and recipes
  • Photos you ask Zoe to describe or tag, with their existing description, capture date, and location name
  • If you enable Email Intelligence, the content of emails in the mailbox you connected
  • Your first name, family or space name, and language, so replies are personal and in your language

Your password, payment details, and precise device location are never sent to the AI provider.

7.3 How that data is used and protected

The data is sent only to generate the answer or suggestion you asked for. We confirm that Microsoft provides protection for this data equal to our own: it is processed under the Microsoft Products and Services Data Protection Addendum as our data processor, encrypted in transit and at rest, and not used to train or improve any AI model, not shared with other Microsoft customers, and not used to build any Microsoft product. Microsoft acts only on our documented instructions and is bound by confidentiality and security obligations at least as protective as those in this policy.

We keep a metering record of AI usage (feature, timestamp, token count) to enforce plan limits. That record does not contain the content of your requests.

7.4 Your choice

AI features are off until you allow them. You can withdraw your permission at any time under Settings › AI data sharing in the app. AI features stop sending data immediately, and the rest of Family Zone continues to work.

8. International Data Transfers

Your data may be processed in countries outside the UK/EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK ICO and European Commission.

9. Data Retention

We retain your data for as long as your account is active. After account deletion:

  • Personal data is deleted within 30 days
  • Anonymized analytics may be retained indefinitely
  • Legal/compliance data is retained as required by law

10. Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@familyzone.ai.

11. Children's Privacy

Family Zone allows parents to add child profiles. Child accounts have restricted features and their data is controlled by parents. We do not knowingly collect data from children under 13 without parental consent.

12. Security

We implement industry-standard security measures including:

  • 256-bit TLS encryption in transit
  • AES-256 encryption at rest
  • Regular security audits
  • Access controls and monitoring

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

For privacy-related inquiries:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.