This Privacy Policy explains how Zoner Health ("Zoner," "we," "us," "our") collects, uses, shares, and protects your personal information when you use our app, web app, and related services (together, the "Service").
Zoner may process health-related information (for example, prescriptions, medication schedules, reminders, and health documents). We treat health-related information as Sensitive Personal Data and apply stricter protections.
1) Information we collect
A) Information you provide
Account information: name, phone number, email (if provided), login identifiers.
Identity verification documents: copies or images of government-issued identification documents (and related details) you provide to verify your identity, where verification is required.
Health-related information (Sensitive Personal Data): prescriptions, medication schedules, reminders, allergies (if you add them), lab results, clinician notes, and any health documents you upload or store.
Support and communications: messages you send to support, feedback, and dispute-related evidence (if applicable).
B) Information collected automatically
Device and usage data: device identifiers, app events, pages/screens viewed, IP address, timestamps, crash logs.
Approximate location: derived from IP or device settings where enabled (for example, to show nearby pharmacies).
C) Information from partners
Pharmacy interaction metadata: when you choose to share a prescription or request availability from a pharmacy, we may log the request and response to deliver the Service and provide support.
Service providers: verification and infrastructure providers may provide delivery confirmations (for example, SMS status).
2) How we use your information
We use your information to:
- provide the Service (including reminders, document storage, and pharmacy features you request);
- secure the Service, prevent fraud, and protect users;
- provide customer support and resolve issues;
- improve the Service (performance, reliability, feature improvements);
- comply with legal obligations and respond to lawful requests.
3) Legal bases / reasons for processing
A) Processing necessary to provide the Service (Contract)
We process account and usage information to create and manage your account, deliver reminders you configure, and provide core functionality you request.
B) Explicit consent for health-related information (Sensitive Personal Data)
We process your health-related information only with your explicit consent. By uploading, storing, or entering health documents or medication information in the Service, and by tapping "I Agree" on the consent screen, you provide explicit consent for Zoner to process that health-related information for the purposes described in this Privacy Policy, including storing it, displaying it to you, and using it to power reminders and related features.
You can withdraw consent by requesting deletion of your health documents and account through in-app support. Withdrawal does not affect processing that occurred before withdrawal.
C) Legitimate interests
We may process limited information (such as device identifiers, logs, and abuse signals) for legitimate interests such as fraud prevention, security monitoring, and preventing misuse, where permitted by law.
D) Legal obligations
We may process information where required to meet legal, regulatory, tax, or compliance obligations.
4) How we share information
A) With pharmacies (only when you choose)
If you request a pharmacy-related action (for example, sharing a prescription image or asking about availability), we share the information needed to fulfill your request with the pharmacy you selected.
Important: Once you instruct us to share your information with a pharmacy, that pharmacy processes the information under its own policies and legal obligations. Zoner is not responsible for the pharmacy's internal privacy or security practices. We encourage you to share information only with pharmacies you trust.
B) With service providers (processors)
We use trusted providers for hosting, messaging/notification delivery, analytics, customer support tools, and security. They may process data only to provide services to us and under confidentiality and security obligations.
C) For legal and safety reasons
We may disclose information if reasonably necessary to comply with law, enforce our terms, protect rights and safety, prevent fraud, or respond to lawful requests.
D) Business changes
If Zoner is involved in a merger, acquisition, restructuring, or asset sale, your information may be transferred as part of that transaction, subject to appropriate safeguards.
5) Data retention
We retain personal information only as long as necessary for the purposes described above and as required by law. Unless law requires a longer period, we use these default timelines:
- Account data: retained while your account is active. After account deletion, we retain basic account and audit logs for up to 24 months for security, fraud prevention, dispute handling, and enforcement.
- Identity verification documents: retained only as long as needed to complete verification and meet legal requirements. Unless law requires a longer period, we aim to delete verification document images within 90 days after verification is completed (or after your account is deleted), while retaining minimal verification metadata (such as verification status and date) for up to 24 months for fraud prevention and audits.
- Health documents you upload (prescriptions, lab results): retained until you delete them or delete your account. After deletion, we aim to remove them from active systems within 30 days, and from backups within 90 days, unless retention is required by law or needed to address fraud, abuse, or legal claims.
- Support communications: retained for up to 24 months to improve support quality, resolve disputes, and enforce terms.
- Aggregated/anonymous analytics: may be retained longer because it does not identify you.
If we must retain certain information for legal reasons, we will limit access and retain it only for the required period.
6) Security
We use reasonable administrative, technical, and organizational measures designed to protect your information.
Where feasible and appropriate for risk, we apply:
- encryption in transit; and
- encryption at rest for stored health documents and related sensitive data.
No system is perfectly secure, but we work to reduce risk of unauthorized access, alteration, disclosure, or destruction.
7) No sale of health data
Zoner does not sell your health-related information to third-party advertisers, data brokers, or similar entities.
8) Automated processing and AI
If the Service uses automated processing (for example, to categorize a document type, detect medication names you enter, or power reminder workflows), we do so to deliver the Service.
Zoner does not make decisions that produce legal or similarly significant effects about you based solely on automated processing without appropriate safeguards. If we introduce new AI features that materially change how we process your health data, we will update this Privacy Policy and, where required, request additional consent.
9) Your rights and choices
Depending on applicable law, you may have rights to:
- access and receive a copy of your information;
- correct inaccurate information;
- request deletion (where legally permitted);
- object to or restrict certain processing; and
- withdraw consent where processing is based on consent.
You can make requests through in-app support or the contact channels published by Zoner.
10) International transfers
Depending on our infrastructure and service providers, your information may be processed in other countries.
When we transfer personal data across borders, we use appropriate safeguards where required by law, which may include:
- contractual protections with service providers and partners;
- technical safeguards (such as encryption); and
- compliance with applicable cross-border transfer mechanisms.
If local law requires data residency or specific transfer mechanisms, we take steps to comply with those requirements.
11) Children
The Service is not intended for children.
12) Updates to this policy
We may update this Privacy Policy. We will post the updated version with a revised "Last Updated" date. Continued use of the Service after changes take effect means you acknowledge the updated policy.
13) Contact
For privacy questions or requests, contact us through the Service support channels or the contact details published on our website.