Privacy Policy
1. Introduction
Zelus Software ("we," "our," or "us") operates the Zelus mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App, available on the Apple App Store and Google Play Store. It also covers the zeluschallenge.com links used in our adverts and the page that helps you install the App (see Section 2.6).
By downloading, accessing, or using the App, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information that you voluntarily provide to us:
- Name — Used for app functionality, analytics, developer communications, and account management.
- Email Address (optional) — Used for communication purposes, such as sending users updates about the App and related services.
- User IDs — Unique identifiers generated to support app functionality and manage your account.
2.2 Health and Fitness Information
We collect fitness information that you provide or that is generated through your use of the App. This may include activity data such as steps taken, distance covered, and challenge progress. This data is used for app functionality and analytics to improve your experience.
2.3 Device and Other Identifiers
We collect device identifiers and similar technical data to support app functionality, including ensuring the App works correctly on your device, maintaining security, and preventing fraud.
2.4 Automatically Collected Information
When you use the App, we may automatically collect certain information, including your device type, operating system version, and usage data such as how you interact with the App. This information helps us improve the App and diagnose technical issues.
If the App crashes or encounters an error, we collect crash logs and diagnostic information (for example the error, the screen involved and the App version) so we can find and fix the problem.
2.5 Purchase Information
When you make an in-app purchase, such as a subscription, Health Points or a streak restore, we receive a record of it from the Apple App Store or Google Play: the product, whether the purchase was confirmed, a store transaction reference, the date and, where the store provides them, the price and currency you paid. Apple and Google also tell us if a purchase is later refunded or revoked. We use this to deliver what you bought, to keep accurate financial records and, in summary form, for analytics, including how much the people who arrive from each of our adverts go on to spend. Payment details such as your card are handled entirely by Apple or Google; we never receive them.
2.6 Advertising and Install Measurement
We advertise Zelus, for example in ChatGPT. To learn which adverts bring people who go on to use the App, and how much we can sensibly spend on them, we measure installs as follows.
- Advert links: when you tap one of our adverts, the link passes through zeluschallenge.com, which records the campaign labels in the link, the time, a random click ID, and the click reference that the advertising platform adds to its own links (for ChatGPT adverts, OpenAI's "oppref"). We do not store your IP address or device details with this record. Our hosting providers process your IP address briefly to deliver the page, as happens with any website.
- Android: Google Play passes the click ID and campaign labels to the App the first time you open it (the "install referrer").
- iPhone: the App Store passes nothing to the App, and the App never reads your clipboard. When you tap one of our links on an iPhone, we send you straight to the App Store with a campaign label in the link. Apple then gives us download and sales totals for each campaign in App Store Connect, under Apple's own privacy rules. We cannot tell which advert an individual iPhone install came from.
- Install ID: the App creates a random install ID the first time it opens. It is not tied to your device hardware, and reinstalling creates a new one. We use it to connect an install to the advert it came from, to your account and to your purchases, and to note whether you started walking.
We use this only to measure our own advertising, mostly as totals for each campaign. We do not use it to show you adverts or to build a profile of you, and we share it only if you turn on ad measurement (Section 4.4). If you did not arrive from one of our adverts, the App simply records that it does not know how it was installed.
2.7 Our Website
Our website, zeluschallenge.com, uses Google Analytics to count page visits and clicks through to the app stores, with Google signals and advertising personalisation turned off. Google Analytics uses cookies to tell visits apart. The advert link and install page described in Section 2.6 do not use Google Analytics.
3. How We Use Your Information
We use the information we collect for the following purposes:
- App Functionality — To provide, operate, and maintain the App's features, including fitness challenges and progress tracking.
- Account Management — To create, maintain, and manage your user account.
- Analytics — To understand how users interact with the App and to improve performance, features, and user experience.
- Developer Communications — To send you updates, support messages, and important notices related to the App.
- Advertising Measurement: To understand which of our adverts bring people who use and pay for the App, so we can decide how much to spend on advertising.
- Security and Compliance — To detect, prevent, and address technical issues, fraud, or illegal activity.
4. How We Share Your Information
We do not sell your personal data. We may share your information in the following limited circumstances:
4.1 Service Providers
We use Supabase as our database and backend infrastructure provider. Supabase processes your data on our behalf and is contractually obligated to protect your information.
We use the following service providers, which process data on our behalf and only for the purposes below:
- PostHog (product analytics, hosted in the EU): records how the App is used, such as which screens are opened, when a challenge is started or completed, whether permissions are granted and the outcome of in-app purchases, so we can improve the App. It receives your App user ID, basic device information (device type, operating system and App version) and summary activity such as the number of steps added to a challenge. It also receives the install ID and how the install was attributed (Section 2.6) and, only if you turn on ad measurement, the advertising platform's click reference, which it forwards as described in Section 4.4. It does not receive your name, email address or location.
- Sentry (crash reporting): receives technical details when the App crashes or hits an error, so we can fix problems. It does not receive your name or email address.
- Vercel (website hosting): delivers zeluschallenge.com, including the advert link and install page, and processes your IP address briefly to do so.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
4.4 Advertising Platforms (Only If You Turn On Ad Measurement)
On Android, the App has a setting, Settings > Privacy > Ad measurement, which is off unless you turn it on. If you turn it on and you installed Zelus from one of our adverts, we tell the advertising platform that showed the advert (currently ChatGPT Ads, run by OpenAI) when you install the App, start walking or make a purchase. Each message includes the platform's own click reference, an event ID, the time and, for a purchase, the kind of product and the amount where we know it. It does not include your name, email address, location or step counts. OpenAI uses it to report on and improve the performance of our adverts, under its own privacy policy.
You can turn ad measurement off at any time. We then stop sending anything, although messages already sent cannot be recalled. On iPhone, Zelus does not share this information with advertising platforms. Apple may also give us anonymous totals of installs that came through our App Store campaign links.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will delete your data in accordance with our deletion procedures, unless we are required to retain it for legal or regulatory purposes.
Advert click records, install records and purchase records are kept for as long as we need them to measure our advertising and to keep financial records. When you delete your account, the links between your account and any install are deleted. Purchase records are kept for accounting but no longer lead to an account.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmitted between the App and our servers is encrypted in transit. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights and Choices
7.1 Account Deletion
You may request deletion of your account and associated data at any time by visiting: https://zeluschallenge.com/delete-account/
Upon receiving your request, we will delete your account and personal data within 30 days, except where retention is required by law.
7.2 Rights Under GDPR (European Economic Area Users)
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure (right to be forgotten)
- The right to restrict processing
- The right to data portability
- The right to object to processing
To exercise any of these rights, please contact us using the details provided in Section 12.
7.3 Rights Under CCPA (California Residents)
If you are a California resident, you have the following rights:
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information (we do not sell your data)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, please contact us using the details provided in Section 12.
7.4 Opt-Out of Communications
You may opt out of receiving non-essential communications from us by following the unsubscribe instructions in any email we send or by contacting us directly.
8. Children's Privacy
The App is available to users of all ages. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and equivalent international regulations.
We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If a parent or guardian becomes aware that their child has provided us with personal information without their consent, they should contact us immediately. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly.
For users in the European Economic Area, we comply with GDPR requirements regarding the processing of personal data of children under the age of 16, which may require parental consent depending on the member state.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable data protection laws, including the EU-U.S. Data Privacy Framework where applicable.
10. Third-Party Links and Services
The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App and updating the "Last Updated" date at the top of this page. For significant changes, we may also provide additional notice, such as an in-app notification or email. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Zelus Software
Email: max@zeluschallenge.com
Website: https://zeluschallenge.com
13. App Store Compliance
This Privacy Policy has been prepared to comply with the requirements of both the Google Play Store and Apple App Store. Our data safety disclosures in each store's listing accurately reflect the data collection and sharing practices described in this Privacy Policy. If there is any discrepancy between the store listing and this Privacy Policy, this Privacy Policy shall prevail.
Appendix: Data Collection Summary
| Data Type | Purpose | Required | Can Be Deleted |
|---|---|---|---|
| Name | App functionality, Analytics, Communications, Account management | Yes | Yes |
| Email Address | App functionality, Communication and updates | No | Yes |
| User IDs | App functionality | Yes | Yes |
| Fitness Info | App functionality, Analytics | Yes | Yes |
| Purchase History | App functionality, Analytics, Advertising measurement | Yes | Yes |
| App Interactions | Analytics | Yes | Yes |
| Device or Other IDs | App functionality, Analytics | Yes | Yes |
| Crash Logs and Diagnostics | Analytics | Yes | Yes |
| Advertising Data (advert click and campaign details, install ID) | Analytics, Advertising measurement | No | Yes |