Privacy Policy

Data we collect

Account data (name, email and, optionally, phone and photo) provided at sign-up or via Google sign-in. Plus, data entered by your family while using the app:

• Information about the elder under care (health conditions, medications and vital signs)
• Tasks and shifts
• Expenses
• Diary entries
• Attached files (receipts and photos)
• Push notification identifier of your device or browser, when you turn notifications on

This data is visible only to the members of your family on Zelo.

Health data

Health information about the elder under care (conditions, medications and vital signs) is sensitive personal data, protected by Article 11 of the LGPD and Article 9 of the GDPR. We process it only so that the family can coordinate care, based on the consent of the person who enters it. By entering health data about another person, you confirm that you have their permission or that of their legal guardian. You may withdraw consent at any time by deleting the data or requesting deletion through the contact email.

How we use data

Exclusively to operate the service: authenticating you (Amazon Cognito), storing family data (Amazon DynamoDB and Amazon S3, in the European Union region, Ireland) and sending transactional emails such as family invites (Mailtrap) and alerts by push notification. On the website and in the app, we measure page views and feature usage with PostHog (servers in the European Union). These events carry only internal identifiers and counts, never typed text, names, amounts or health data, and there is no session recording or automatic capture of clicks. They are kept in PostHog for up to 12 months and are not tied to a profile of you. We do not sell data, show ads, or use your data for model training or marketing.

Sharing

Data is shared only with the infrastructure providers required to run the service (Amazon Web Services, Mailtrap, PostHog, RevenueCat and Expo, which relays push notifications to Apple and Google services), under those providers’ data protection agreements. Push notifications carry the alert title and text, which may include the name of a task, the specialty of an appointment, or the name and dose of a medication. There is no sharing with third parties for commercial purposes. When you share a monthly report with a doctor or caregiver, we create a public link that is valid for 7 days and can be revoked at any time; anyone with the link sees only that month’s PDF.

Subscription payments

The Zelo Family subscription is processed by RevenueCat, which relays the charge to the App Store and Google Play in the apps and to Stripe on the website. RevenueCat receives the random identifier of your family, the internal identifier of the person who pays, and the subscription state (plan, period and renewal). It does not receive health data or the content of the family. Card details are given directly to the store or to Stripe, and Zelo neither receives nor stores them.

About your card: Zelo only sees whether the subscription is active, never the card number.

Your rights (GDPR/LGPD)

You may request access, correction or deletion of your data at any time via the contact email below. When you delete your account or family, the associated data is removed from our systems.

Security

All traffic is encrypted (TLS). Data access is restricted by authentication and by family roles (admin, caregiver, observer). Files are stored in a private bucket with temporary access URLs.