Privacy Policy

Last updated: 23 July 2026

This page is maintained by A3 Partners Pte Ltd to answer common privacy questions about Zoop. It is app-owned editable content and not an independent legal certification.

1. Who we are

Zoop is operated by A3 Partners Pte Ltd, registered in Singapore. Contact us at Hello@atriverse.com for any privacy request.

2. Data we collect

Account — email, name, avatar, sign-in provider (Google, Atriverse SSO, email magic link).
Preferences — dietary settings, allergies, travel interests, saved places, collections, ratings, notes.
Location — only when you grant permission (used to sort nearby places and estimate travel time).
Content you upload — receipt scans, dish photos, trip notes.
Usage — pages viewed, features used, AI prompts sent, error diagnostics.
Device — browser type, operating system, IP address, approximate region.
Billing — Stripe holds card details; we store only a customer ID, plan, invoice history, and quotas.

3. How we use it

To operate the Service, personalise recommendations, generate AI itineraries and dish previews, process payments and referral rewards, prevent fraud and abuse, comply with law, and (with your consent) send product updates.

4. Legal bases

Singapore (PDPA) — consent, or a legitimate business purpose that a reasonable person would consider appropriate.
EU / UK (GDPR) — contract (delivering the Service you asked for), consent (marketing, non-essential cookies), and legitimate interests (security, product improvement).
California (CCPA/CPRA) — we do not "sell" personal information as defined by the CCPA. You still have the rights described in section 8.

5. Subprocessors

We share the minimum data needed with these processors:

Supabase (on AWS) — database, auth, storage.
Cloudflare — edge hosting, CDN, DDoS protection.
Stripe — payments, subscriptions, gift purchases, referral payouts.
Google Maps Platform — maps, places, photos.
YouTube Data API — city video discovery.
Perplexity — live web search for restaurants and events.
Google Gemini / Lovable AI Gateway — AI text and dish-image generation.
Resend — transactional email.
Atriverse — single sign-on across the Atriverse network.

6. Retention

We keep your account data while your account is active. Diagnostic logs are kept up to 90 days. AI response caches are typically kept for around 90 days to save cost and speed up repeat queries. When you delete your account we remove your personal data within 30 days, except where we must retain it (e.g. tax and payment records) or where it has been anonymised.

7. International transfers

Zoop is a global service; your data may be processed in Singapore, the EU, the UK, and the US. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

8. Your rights

You can request access, correction, deletion, portability, restriction, or objection at any time. Email Hello@atriverse.com from the address on your account and we will respond within 30 days. You can also lodge a complaint with your local data-protection authority (Singapore PDPC, your EU/UK supervisory authority, or the California Attorney General).

9. Children

Zoop is not intended for children under 13. If you believe a child has provided personal data, email us and we will delete it.

10. Security

We use TLS in transit, encryption at rest via our cloud providers, row-level security in our database, least-privilege access controls, and third-party OAuth for sign-in. No system is perfectly secure; we will notify affected users of a material incident as required by law.

11. Cookies

See our Cookie Policy for the list of cookies and local-storage keys we use and how to change your choices.

12. Changes

We may update this Policy. For material changes we will notify you in-app or by email. The "last updated" date at the top shows the latest revision.

13. Contact

Privacy questions or requests: Hello@atriverse.com.