Privacy policy
Last updated 15 October 2026
This policy covers Zoopace's website (zoopace.com), web app and API (api.zoopace.com). In short: we keep only what's needed to run your account, we don't sell it, and we don't show ads. Analytics runs only if you allow it.
What we collect
- From your sign-in provider (Google or Facebook), when you sign in: your name, email address, profile picture and the provider's account ID. We never see or store your Google or Facebook password.
- What you add: sites, animals, photos, and the people you invite (their email address and role).
- Sessions: a sign-in cookie that keeps you signed in. For each session we also keep the browser or app, the IP address it was last used from, its approximate city (looked up in a database on our own servers, so your address isn't sent to anyone else) and when it was last used, so you can see where you're signed in and sign out of any session in your profile. Sessions, and all of this, end after 30 days without use or when you sign out.
How we use it
- To sign you in, show your name and picture, and let you switch between your accounts.
- To show your sites and animals to you and to the people you share them with.
- To send emails you trigger, such as invitations to a site.
We don't sell your data or show ads.
Who else handles it
- Amazon Web Services hosts the app, the database, photos and email sending, in the EU (Ireland).
- Amazon Bedrock (Anthropic's Claude models), run by Amazon Web Services in EU regions: the assistant, summaries and descriptions of voice and video notes, and species search send it what they need to answer. Amazon doesn't use it to train models.
- Google and Facebook, only if you choose to sign in with them. Your profile picture is loaded from their servers.
- Google Analytics (Google Ireland), only if you allow analytics: see Analytics.
- GBIF (Global Biodiversity Information Facility): what you type in the species field is sent to GBIF's public API to suggest species names.
Analytics
If you allow it, we use Google Analytics 4 to see how the website and the web app are used, so we can make them better. On the website you allow it by accepting the cookie banner; in the app, by saying yes when it asks. Until then nothing is loaded.
- What it records: the pages and screens you open, what you do there (for example adding an animal or a task, never what you write), how you arrived, and your device, browser, language and approximate location (country and city). Google Analytics doesn't store IP addresses.
- In the app, it's linked to your account by a code made from it, so we can see how accounts use the app over time; never by your name or email. Screens are recorded without the ids in their addresses.
- Google Ireland processes it for us; it may transfer data to Google in the US, under the EU–US Data Privacy Framework. It isn't used for advertising, and it's kept for up to 14 months.
- Changing your mind: "Cookie settings" at the bottom of the website, or Profile › General › Usage analytics in the app. Saying no stops it and removes its cookies.
The legal basis is your consent, which you can withdraw at any time.
How long we keep it
Your account data stays while your account exists. When you ask us to delete your account, we delete it as described on Delete your data.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to privacy@zoopace.com. If you're in the EU or UK, you can also complain to your data protection authority.
Changes
If we change this policy, we'll update the date above. For important changes, we'll let signed-in users know.