Legal
Privacy Policy
What we collect, why, how we keep it safe, and the choices you have. For our role processing school and student data, see the Data Processing Agreement.
1. Who we are and how to reach us
Zion is operated by Sipho Yawe. Privacy questions: support@zionapp.co.
2. The data we handle
We split data into two categories, because our role is different for each:
- Account data (we are the controller). Name, email, WhatsApp number, school name, country, role, marketing-source information (UTM and affiliate code where present), survey responses, and support correspondence.
- School data (we are the processor, the school is the controller). Student records, PACE assignments, daily goals and scores, attendance, test scores and moderation records, supervisor and monitor profiles, and generated reports. Zion processes this on the school's instruction; see our DPA.
3. Why we use it
We process account data to provide the service, communicate with you about your account, deliver requested resources such as the free Goal Check Time-Audit, prevent abuse, and improve the product. We do not sell personal information and we do not show third-party advertising inside Zion.
4. Children's data
ACE students are usually under 18. Student records exist in Zion only because the school places them there to operate. We process the minimum needed, keep it inside the school's tenant, and never use it to advertise or profile children.
5. Sub-processors
We use the vendors below to run the service. We will give reasonable notice before adding or replacing one. Each vendor only receives the personal information needed for its role.
| Vendor | Purpose | Region |
|---|---|---|
| Supabase, Inc. | Database and file storage | Configurable region |
| Clerk, Inc. | Authentication, user accounts, organisations | Global |
| Resend, Inc. | Transactional email | Global |
| Vercel, Inc. | Application hosting | Global |
| Functional Software, Inc. (Sentry) | Error monitoring and performance diagnostics (includes IP address and request metadata) | EU (Frankfurt) |
| Tally | Public validation survey form | EU/Global |
| Stripe, Inc. | Card payments (Phase 5, when enabled) | Global |
| Flutterwave | East-African mobile-money payments (Phase 6, when enabled) | Africa |
| Rewardful (via Stripe) | Affiliate attribution and commissions (Phase 7, when enabled) | Global |
| Google LLC (GA4) | Anonymous web analytics (Phase 3, when enabled) | Global |
| Meta Platforms (Pixel + Conversions API) | Ad measurement, with consent (Phase 3, when enabled) | Global |
6. International transfers
Some sub-processors store data outside your country. Where required by local law, we rely on appropriate safeguards (such as the Standard Contractual Clauses) and configure regions to keep school data close to you where possible.
7. How long we keep it
We keep account data for as long as you have an account, and a reasonable period after for billing and audit. School data is kept on your instruction and deleted within a reasonable period after your subscription ends. You can export your data at any time.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete or export your personal information, and to object to or restrict certain processing. To exercise them, email support@zionapp.co. You can also complain to your local data protection authority.
9. Marketing, cookies and ad pixels
The Zion marketing site (zionapp.co) uses essential cookies, and, with your consent, analytics (Google Analytics) and ad measurement (Meta Pixel and Conversions API). You can accept or decline non-essential cookies from the consent banner, and change your choice at any time. We do not run third-party advertising inside the product.
10. Security
We protect data with multi-tenant row-level security, encryption in transit, role-based access, and reasonable organisational controls. No system is perfectly secure; we will notify affected customers without undue delay if a breach materially affects their data.
11. Changes
We will update this policy as the product evolves and post a new "last updated" date at the top. Material changes will be notified by email or in-app.