Privacy Policy
Version dated October 21, 2026
This edition is for households whose billing address is in Canada. If your billing address is in the United States, see the United States edition.
This policy explains what personal information Zorivio collects, why, who it is shared with, how long it is kept and how to exercise your rights. It applies to the Zorivio app and to this website.
Who is responsible
Zorivio inc., also known in Quebec as Les Technologies Zorivio, is responsible for your information. Our founder acts as the person in charge of the protection of personal information. Contact: privacy@zorivioapp.com.
What we collect and why
| Information | Use |
|---|---|
| Account: email address, display name, language, sign-in data | Create your account, sign you in, secure access, write to you about the service |
| Household: members and serving sizes, children’s age or date of birth, time zone, preferred stores, budget | Adjust servings, apply age-specific protections, plan your week |
| Food: allergies, intolerances, restrictions and preferences | Exclude incompatible recipes and explain choices |
| Content: plans, recipes you add, grocery lists, inventory, meal feedback | Provide the features you use |
| Subscription: plan, status, billing history, opaque payment provider identifiers, country, province or state and postal code | Bill you, apply taxes, manage the introduction, founder seats, referrals and refunds |
| Technical: IP address, requests, error logs | Run and secure the service, fix problems |
| Communications: messages you send us, your email choices | Answer you and respect your preferences |
We never collect your full card number: payment details are entered directly with the payment provider.
Sensitive information
Your allergies, restrictions and eating habits may reveal information about health or beliefs. We treat them as sensitive: they are used only to provide the service to your household and are never used for analytics, advertising, billing or support, and never sold.
What is optional
- Analytics: off by default. If offered, it will only run with your consent, using a pseudonymous identifier, without your name, email or food information. You will be able to withdraw your consent at any time.
- News and offers emails: sent only if you opted in, with an unsubscribe link in every message. Account, billing, security and legal emails are always sent.
- Profiling: off by default. Preferences Zorivio infers from your plans and feedback are used only to plan your meals; you can reset them in the settings.
You manage these choices in the app settings.
Who we share your information with
We do not sell your information and do not run targeted advertising. We share it only with the service providers that help us run the service, only as far as their task requires, and under contracts that require them to protect it and not use it for their own purposes:
- hosting, database and authentication;
- payment: Stripe and PayPal;
- future revenue analytics — ChartMogul (not connected): if activated later after the required contractual and privacy checks, Zorivio may send it a pseudonymous customer identifier, plan and edition, subscription lifecycle status and dates, invoice, payment and refund amounts, currency, and country, province or state to calculate monthly recurring revenue (MRR), churn, customer lifetime value (LTV) and cohorts by edition. ChartMogul’s public documents state that its core hosting is in Ireland and list subprocessors in several countries; no ChartMogul DPA, account, region setting or subprocessor is currently applicable to Zorivio. No data is sent today. This flow will never include names, email addresses, full card details, allergies or restrictions, children’s profiles, any other household or profile information, recipes, meals or grocery lists, or support messages;
- sending account and subscription emails;
- error and security monitoring;
- generating meal suggestions, without your name or email;
- analytics, only with your consent;
- sending news and offers emails, only with your consent;
- sending marketing and product emails through Loops, only to users who gave a separate consent for them, with an unsubscribe link in every message;
- email to answer your requests.
We may also disclose information where the law requires it, or as part of a business transaction involving the company, under the conditions set by law.
Information processed outside Quebec
Some of these providers process your information outside Quebec, in Canada, the United States or the European Union. Before entrusting them with information, we assess the protection they offer, their contracts and their subprocessors. The laws of those places may allow authorities to access the information.
Retention
| Information | Period |
|---|---|
| Account and household data | While the account is active; deleted within 30 days of account deletion |
| Abandoned sign-up drafts | 30 days |
| Encrypted backups | 30 days |
| Technical logs | 90 days, unless needed to investigate an incident or required by law |
| Analytics events (product and website), only if you consent | 12 months |
| Billing, tax, contract and terms-acceptance records, refund notes, and hashed fingerprints used to check introduction eligibility | 7 years, even after account deletion, without your food information |
| Privacy incident register | 5 years |
Your rights
You can ask to access your information, have it corrected, get a copy in a structured format, withdraw a consent, have it deleted, and learn how an automated decision about you was made. The app lets you export your data and delete your account yourself. For any other request, email privacy@zorivioapp.com. We verify your identity proportionately and answer within 30 days.
If you are not satisfied with our answer, you can contact the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada or the authority in your province or state. US residents can exercise the rights their state law gives them by writing to the same address.
Children
Children do not have accounts: they only appear as profiles managed by the adult household owner. We collect only what meal planning and age-specific protections require. No child profile is used for advertising, analytics or profiling. In the United States, we obtain verifiable parental consent before processing information about a child under 13.
Cookies
The app uses only the cookies needed for sign-in, security and remembering your language. By default, this website uses no cookies, no scripts and no analytics tool. If site analytics is turned on, it only runs with your agreement. Any other non-essential cookie added later will only run with your agreement.
Fast display on your device
To open faster, Zorivio may keep on your device an encrypted copy of the screens you viewed last: the meal titles of your week, your grocery list and what you checked, your recipe cards and the names of your inventory items. Apart from what you type yourself in an item or recipe name, this copy never contains your allergies, dietary restrictions, your children’s or other household members’ data, health or payment data, your email or your address. It stays on your device and is sent to no one. It is erased when you sign out. It is also erased the next time you open the app on that device when your session has ended, when you switch accounts or households, or when your account has been deleted. After 7 days it is no longer shown and is deleted the next time you open the app. This copy is not designed to protect against someone who has access to the files on your device.
Security
Each household’s data is isolated from other households. Connections are encrypted, internal access is limited and logged, and secrets are kept server-side. If an incident presents a risk of serious harm, we promptly notify the Commission d’accès à l’information and the people concerned.
This website
This website creates no account and has no form. If you email us, we receive your address and the content of your message in order to reply. The host processes the IP addresses and requests needed to run and secure the site.
Site analytics: off by default. If we turn it on, a banner first asks for your agreement, with “Accept” and “Refuse” shown the same way; only the banner loads, and no measurement is loaded or sent before you choose. Only with your agreement, we count page views and clicks to the waitlist, invitation and checkout, with the site edition you visit, to learn which pages help visitors. We use a random pseudonymous identifier kept in your browser, with no cookie, no name, email or message content, no session recording and no advertising. The analytics provider hosts this data in the European Union, under contract, and is configured not to keep your IP address; we keep this data for 12 months. Your choice is kept in your browser for 12 months. A Global Privacy Control or Do Not Track signal is treated as a refusal. You can withdraw your agreement at any time with the “Cookie preferences” link at the bottom of the pages: measurement stops and the identifier is deleted from your browser.
Changes
We may update this policy. For a material change, we notify you by email and in the app at least 30 days before it takes effect. The version in force is dated at the top of this page.
Contact us
Personal information: privacy@zorivioapp.com. Other questions: support@zorivioapp.com. See also the Terms of Service and the Commercial Terms.
Beta participation terms (French) — Canada and the United States, rolled out gradually; open only in Quebec for now.