Last updated: 13 May 2026
This Privacy Policy explains how Alex O'Mahoney ("we", "us", "our") collects, uses, and protects your personal data when you use the Zora mobile application. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Zora is operated by Alex O'Mahoney, a sole trader based in the United Kingdom.
For any privacy-related queries or requests, please contact us at the email above.
We collect the following categories of personal data:
| Data | Purpose | Basis |
|---|---|---|
| Email address | Account creation and authentication | Contract |
| Display name | Profile identification within the app | Contract |
| Profile picture | Personalise your profile (optional) | Consent |
| Phone number | Find Friends feature (optional) | Consent |
| Data | Purpose | Basis |
|---|---|---|
| Daily check-in data (mood, feelings, sober status) | Track your sobriety journey and provide AI responses | Contract |
| Habit tracking logs | Monitor and display your daily habits | Contract |
| Community posts, comments, reactions | Power the community feed features | Contract |
| Push notification token | Deliver push notifications to your device | Consent |
| App activity and usage patterns | Improve app performance and features | Legitimate interests |
We use your personal data to:
We use the following third-party services to operate the app. Each has its own privacy policy governing how they handle data.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database, authentication, and file storage. Your data is stored on Supabase servers within the EU. | supabase.com/privacy |
| Anthropic (Claude API) | Generates personalised AI responses to your daily check-in entries. Check-in content is sent to Anthropic for processing. | anthropic.com/privacy |
| Expo Push Notifications | Delivers push notifications to your device via Firebase Cloud Messaging (Android). | expo.dev/privacy |
| Google OAuth / Firebase | Allows you to sign in using your Google account. | policies.google.com/privacy |
| Stripe | Processes premium subscription payments. Payment card data is handled entirely by Stripe and never stored by us. | stripe.com/gb/privacy |
| Google Play Billing | Manages in-app subscription purchases on Android. | policies.google.com/privacy |
Your data is stored securely on Supabase infrastructure. We implement the following security measures:
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
We retain your personal data for as long as your account is active. If you delete your account:
As a UK resident, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at alexomuk@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
You can delete your account at any time from within the app:
Alternatively, you can request account deletion by emailing alexomuk@gmail.com with the subject line "Account Deletion Request" and your registered email address. We will process your request within 30 days.
Account deletion is permanent and cannot be undone. All your data, including check-ins, posts, and profile information, will be permanently removed.
We use push notifications to send you reminders and community activity updates. You can control push notifications:
If you disable notifications, your push token remains stored but will not be used to send notifications until you re-enable them.
Zora is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us immediately at alexomuk@gmail.com and we will delete the account promptly.
The Zora mobile app does not use cookies. We do not track your activity across other apps or websites. We may collect anonymised usage analytics to help us understand how the app is used and to improve it. This data cannot be used to identify you individually.
Some of our third-party service providers (including Supabase and Anthropic) may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or adequacy decisions.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you within the app. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data:
We aim to respond to all privacy-related requests within 30 days.