Privacy Policy

Who we are

Zuro is provided by Zuro Ltd ("Zuro", "we", "us", "our"), a company registered in England and Wales.

• Company number: [to be confirmed — Companies House]
• Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
• Website: getzuro.co.uk
• Privacy contact: privacy@getzuro.co.uk

Zuro Ltd is the data controller for the personal data described here, which means we're responsible for how and why your data is used.

What "personal data" means

Personal data is any information that relates to you and could identify you — like your name, email address, or details about your spending.

The information we collect, and why

Account and identity — your name, email, and password (stored encrypted, so we can't see it). We use this to create your account, log you in securely, and contact you about the service.

Your date of birth — to check you're old enough to use Zuro (16+) and to apply the extra protections we give people under 18.

Open Banking information — if you connect a bank account, we receive read-only account information through our Open Banking provider: account details, balances, and transaction history. This access is read-only — we cannot make payments or change anything in your account, and you can disconnect any time.

App usage and insights — how you use Zuro and the summaries and budgets we generate from your data, so the app works and improves.

Things you ask our AI assistant (via OpenAI) — your questions to Zuro's AI features and the context needed to answer them, so we can give you AI-powered guidance about your money.

Payment information (via Stripe) — if you subscribe to a paid plan, our payment provider Stripe processes your card details. We do not store your full card number. We keep your subscription status and basic billing information.

Device and technical information — your device type, app version, general (city-level) location, and basic logs, to keep the app secure and working.

Messages you send us — so we can give you support and keep a record of what we discussed.

Our legal reasons for using your data

• To provide the service you signed up for — running your account and the features you use.
• Because you've given us permission — connecting your bank happens only with your explicit consent, which you can withdraw any time.
• Because we have a legitimate interest — keeping Zuro secure, preventing fraud, and improving the product, where your rights don't override that.
• Because the law requires it — where we have to keep or share certain information to comply with the law.

Open Banking, explained

Open Banking is a secure, regulated system that lets you share your bank account information with apps you trust. We use a regulated Open Banking provider, authorised and regulated by the Financial Conduct Authority, to make the connection. You approve exactly which accounts to share, directly with your bank. The access is read-only, and you can disconnect any time — in Zuro, through our provider, or with your bank.

Where your data is stored

Your data is stored in a secure database provided by Supabase. It's protected using encryption in transit and at rest, and access is restricted to systems and people that genuinely need it.

Who else handles your data

We work with a small number of trusted providers who handle data on our behalf, under contract and under our instructions. We don't sell your data, and we don't share it for anyone's advertising.

Some of these providers may process data outside the UK. Where that happens, we make sure appropriate safeguards (such as UK-approved standard contractual clauses) are in place.

How long we keep your data

• While your account is active — we keep your data so the service works.
• After you close your account — we delete or anonymise your personal data within 30 days, unless we're legally required to keep some of it longer.
• Open Banking data — we stop accessing your bank information as soon as you disconnect, and delete the associated data within 30 days.
• Payment and billing records — kept for up to 6 years to meet tax and accounting laws.
• Support messages — kept for 2 years so we can help with follow-up questions.

If you're under 18 (16 or 17)

We take extra care with younger users and follow the ICO's Age Appropriate Design Code:

• We involve a parent or guardian when you sign up, particularly before you connect a bank account.
• High privacy by default — your settings start on the most protective option.
• We collect less — only what's genuinely needed, and we don't profile you.
• No surprises — we explain things clearly and won't nudge you into sharing more than you need.
• Your best interests come first — we design features with your wellbeing in mind.

Your rights over your data

You have the right to see your data, correct it, delete it, get a copy to take elsewhere, restrict or object to certain uses, and withdraw consent where we rely on it. To use any of these, email privacy@getzuro.co.uk. We'll respond within one month, it's free, and we'll just confirm your identity first.

How to complain

If you're unhappy with how we've handled your data, please tell us first at privacy@getzuro.co.uk — we'll work to put things right. If you're still not happy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Cookies

Our website and app use cookies. We explain which ones, and how to control them, in our Cookie Policy.

Keeping your data secure

We use encryption, access controls, and secure infrastructure to protect your data. No system is ever 100% secure, but we take this seriously and we'll tell you, and the ICO where required, without undue delay if there's ever a breach that affects you.

Changes to this policy

We keep this policy under review and may update it as the product develops — we'll always show the latest version here with the date it was last updated, and we'll let you know before any significant change takes effect.

Contact us

Zuro Ltd · privacy@getzuro.co.uk