Privacy Policy

Effective date: March 2025

Zine Digital (“Zine”, “we”, “us”, or “our”) operates Familiar. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service.

1. Information We Collect

1.1 Information You Provide

  • Account data — name, email address, display name, and password when you register.
  • Family data — family name, member relationships, and invitation details.
  • Content — notes, shopping lists, chores, and other content you create within Familiar.
  • Payment data — billing details processed through our payment provider (Bachs). We do not store full card numbers.
  • Integration data — connection names, permissions you grant, credential metadata, and an audit history of actions performed by connected assistants or platforms. Secret access keys are stored only in hashed form and are shown once when created.
  • Files and communications — attachments, comments, reminders, invitations, and notification preferences you choose to use.

1.4 Geographic Information

We may collect and process information about your location based on your IP address or other location data to comply with legal obligations, provide service availability, and enforce geographic restrictions. By usingFamiliar, you consent to the collection and processing of your location data for these purposes.

1.2 Information Collected Automatically

  • Usage data — pages visited, features used, and actions performed within the app.
  • Device data — browser type, operating system, and IP address for security and analytics.
  • Session data — a short-lived, HttpOnly session cookie keeps you signed in; a separate signed anti-forgery cookie protects account changes.
  • Offline application data — selected app data, pending changes, preferences, and static resources stored on your device to make the interface fast and usable on unreliable connections.
  • Security and integration logs — request identifiers, permission checks, last-used times, delivery status, and related diagnostic data used to prevent abuse and investigate failures.

1.3 Information from Third Parties

If you sign in with Google OAuth, we receive your name, email address, and profile picture from Google in accordance with the permissions you grant.

2. How We Use Your Information

  • To create and manage your account and family.
  • To provide, maintain, and improve the Familiar service.
  • To process payments and manage subscriptions.
  • To send transactional emails (account confirmation, password reset, subscription receipts).
  • To deliver in-app, email, browser, or device notifications you enable.
  • To provide offline sync, conflict handling, scoped integrations, exports, and audit history.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations.

We do not sell your personal data to third parties.

3. Data Sharing

We may share your data with:

  • Family members — content you create is shared with members of your family within Familiar as intended by the product.
  • Service providers — Supabase (database), Cloudinary (file storage), Bachs (payments), and email delivery services, each under data processing agreements.
  • Connected assistants and platforms — only when you create an integration credential and only within the scopes you select. Those third parties process data under their own terms and privacy practices. You can revoke a credential at any time.
  • Law enforcement — when required by applicable law or valid legal process.

4. Household Sharing and Your Choices

A family workspace is collaborative. Members may see, change, export, or act on content according to their role and the feature involved. Family administrators should invite only people they trust, review membership and connected integrations regularly, and avoid adding sensitive information that is not needed for household coordination.

5. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your personal data is scheduled for deletion within 30 days, unless retention is required by law. Aggregate, anonymised analytics data may be retained indefinitely.

6. Security

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and row-level security on our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access a copy of your personal data.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Data portability.

To exercise these rights, contact us at legal@zine.ng. We will respond within 30 days.

8. Children's Privacy

Familiar is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. International Transfers

Your data may be stored and processed in servers located outside Nigeria (including within the EU/US where our infrastructure providers operate). We ensure appropriate safeguards are in place for such transfers.

9.1 Cross-Border Data Transfers

By using Familiar, you acknowledge and consent to the transfer of your personal data to countries other than your own, including countries that may have different data protection laws. We take reasonable steps to ensure your data is protected in accordance with this Privacy Policy, but we cannot guarantee that third parties in other jurisdictions will provide the same level of protection as required by your local laws.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or in-app notice. Continued use after the effective date constitutes acceptance.

10.1 International Users

If you access Familiar from outside Nigeria, you do so at your own risk and are responsible for compliance with local data protection laws. We make no representation that our data practices comply with all international regulations. Users in the European Union, United Kingdom, and other jurisdictions with specific data protection requirements should note that our services are primarily designed to comply withNigeria law and may not offer all rights and protections required by local law.

11. Contact

For privacy-related queries, contact us at legal@zine.ng.