Privacy Policy

How your data is stored

Zaba has no accounts, no analytics, no cookies, no tracking, no servers of mine. Your wishlist, your reflections, literally anything lives on your device and nowhere else, unless you choose to back them up to your own iCloud. I couldn't peek even if I were nosy. Which I'm not :)

A few things that follow from this:

• "Delete All Data" in settings really means it — everything is erased from your iPhone and from your iCloud backup. No copy left behind, because there never was one.
• Photos you attach to items stay inside the app. Zaba only touches photos you pick yourself — it never goes browsing through your library.
• Fair warning: delete the app without a backup, and your data is gone for good. I can't recover what I never had. If your data matters to you, just turn iCloud Backup on.

iCloud backup

iCloud backup is optional and off by default. Turn it on and your data gets backed up to your own private iCloud, through Apple's CloudKit, using the Apple Account already on your iPhone. Apple's encryption protects it. It's there so a lost or new device doesn't mean starting over. I can't access, read, or recover anything in your iCloud. Turn it off anytime, and "Delete All Data" wipes the iCloud copy too.

Purchases

Premium is a one-time purchase, handled entirely by Apple. Apple takes the payment and knows what you bought — I never see your name, email, or card. That part of the story is covered by Apple's privacy policy, not mine :)

Exchange rates

If you change your home currency, Zaba converts your existing entries using current exchange rates. For that, it makes a single request to Frankfurter — a free, open-source exchange-rate service that publishes the European Central Bank's daily reference rates. What that request looks like, in full: two ISO currency codes (like from PLN to EUR) and that's everything. No amounts, no item data, no identifiers — Frankfurter doesn't even use API keys or accounts, so there's nothing to identify you with. Like any internet request, the service can technically see your IP while answering; nothing else is sent, and nothing is stored. This only happens when you change currencies. Zaba doesn't call it on launch, in the background, or any other time.

The website

zabapp.io is a simple website that tells you about the app. No cookies, no analytics, no sign-up forms, no tracking. Like every website on earth, the hosting provider briefly sees standard connection data (your IP) to deliver the page — I don't collect it, see it, or use it.

Your rights

I'm based in Cyprus, in the EU, so GDPR applies. You have the right to access, correct, and delete your personal data — and since I don't hold any, those rights are already in your hands. Your data sits on your iPhone; deleting it there deletes it everywhere. If you ever believe I somehow do hold data about you, email me and I'll sort it out within 30 days.

Changes

If Zaba ever handles data differently (say, a future version adds cross-device sync), I'll update this page and the date at the top. Any new data feature will be opt-in, clearly explained, and off by default. iCloud Backup already plays by that rule, and everything after it will too.

Contact

Questions about privacy? Just email me at hello.zabapp@gmail.com.