Privacy policy

Last updated 15 September 2026. Draft for store submission — legal review before production.

Zuna (“we”) is the controller of personal data in the Zuna Move app. Contact us via in-app Support (Profile → Messages).

We process data of people in Norway (and later the EEA) under the GDPR. The service is for people aged 16 and over.

What we collect

• Phone number (sign-in)
• Optional email (SMS onboarding; from Vipps when you use Vipps Login)
• Name, gender, birth date, home city / coordinates
• Vipps sub and claim sources — not a national identity number, and not a street address
• Profile photo, activity and group data, chat, feed comments, and activity photos
• Friendships, connections, blocks, XP
• Invite phone numbers for people not yet on Zuna (only to deliver the invite and match on signup)
• Expo push token if notifications are on

Processors

• Vipps MobilePay AS — login. We receive name, phone, email, birth date, gender, and city. We do not store street address or national identity number.
• Twilio — SMS one-time codes and invite SMS
• Convex — database, files, authentication, and hosting (EU, Ireland)
• Mapbox — map tiles. We do not send personal data to Mapbox.
• Google Places — place search through our server, not directly from the phone
• Expo Push — push notifications
• Resend — email verification

Why we process data

To perform the contract (account, activities, chat, groups), for legitimate interests (safety, visibility, and abuse prevention), and consent where you turn on optional features (email, push).

Your rights

You can view and correct your profile in Settings. Ask Support for access, export, or deletion. We handle deletion requests within 30 days. Upcoming activities you organise are cancelled. Photos are deleted. Chat may be anonymised where others still need the thread. See also the terms.

Retention

We keep data while the account is active, then only as long as needed to finish your request or meet the law. Invite numbers are kept only to deliver and match the invite.

GPS and paused features

The first store release is social — not route recording. Background location is not a marketed feature. Any internal recording-prototype test data is hidden from the product.

Complaints

You can complain to the Norwegian Data Protection Authority (Datatilsynet).