Privacy

Who is responsible

Zefxi is run by one person, not a company. Nikos Sioulas decides what the app does with your data and answers for it.

Email [email protected].

Information you provide

Your email address and a password, so you can sign in, unless you sign in with Google or Apple instead. Your name, pronouns, a short bio and your date of birth. The date itself stays with us to check you are 18; other members see your age in years and can filter by it.

Photos and a voice note, if you add them. Your interests, profile answers and any favourite artists you type in.

If you set up a venue, we keep its name, kind and premises address, and the type and reference number of the document you name for it, so someone Zefxi appoints can check it. Once the venue is verified, members see its name, kind and place; the document details are seen only by you and whoever reviews it.

Where you are

Your phone shares a location only when you allow it. We save that location as an approximate 750-metre square. Other members see an approximate distance, not your exact location. If you pick your area by name, we keep that name too. Only you see it. If you turn on travel, we also keep the city you picked and when.

If you use Find my group, the centre you pick on its map is kept exactly where you put it, with the distance and area name you set.

What the app records

Plans you host, co-host or join, your answer to a host's question when you join, and whether you were checked in at the door. Messages you send or hold, hellos, connections, saves, blocks and safety reports. The hosts and venues you follow, and your answers to a venue's polls. We use this information to sign you in, show you people and plans near you with shared interests, let you talk, and review reports.

On a plan, we keep the costs you add or share: what each was for, the amount, who paid and who shares it, the payments you record, a reminder you send, and the Monzo, PayPal or Revolut link you add so people can pay you back. Zefxi moves no money. We also keep what you put on the plan's Bring list, your place on a tournament team or on a volunteering crew, shift or visit, and the results, pledges and reports you give there.

If you add a route to a plan from a GPX file, we keep its name, its line on the map with any heights, and each change you make to it. The file itself is read on your phone and not uploaded.

You get a referral code to share. If you join with someone's code, we record who referred you; if people join with yours, we record whom you referred and what you earn from what they pay.

If you use Plan by message, we keep the Telegram account, WhatsApp phone number or Messenger account you connect, the drafts it writes for you, the photos you send it and a note of each message it has handled.

If you connect Google Calendar, we keep the access Google gives us, locked so only our server can use it, and which plans we put on your calendar.

Who can see it

Other members can see the profile details you share. Answers you hide are not sent for profile display. Answers you allow for matching can help order suggestions; sensitive answers are used for matching only when both people consent. Your saved square is not shown to anyone.

Messages in plans and groups are visible to their members. Photos, profile pictures and voice notes are stored on open web addresses, so anyone handed one of those links can open the file without an account. Nikos Sioulas can reach everything in the database directly. Reports are reviewed by someone Zefxi appoints, who sees the report and what it is about and can find out who made it.

A plan's costs and Bring list are seen by the people on it, and its tournament teams and volunteering crews by the people going. Someone who leaves still sees the costs they paid or share. A payment is seen only by the two people it is between, and your pay link only by people sharing a cost you paid. A route is seen by whoever can see its plan, and by no one else.

An online plan's link and the host's directions for getting in are shown only to the people on the plan. A meeting place typed with no street line or pin, such as a home, is shown only to them and to anyone you ask to meet there. Your answer to a host's question is read only by the host.

Private answers

Stress, outlook, politics, faith, drinking, smoking and gender are not shown to other members.

Outlook, politics, faith, drinking, smoking and gender are weighed in matching only when you and the other person have both turned that on. You can leave them blank.

Your stress answer and any older combined substance answer are kept privately and do not affect matching.

Other services

Supabase holds the app database and files. If you allow push notifications, Expo and your phone's notification service receive a device token and limited notice content. A reply notice carries the sender's name, never chat text; a plan notice can carry its title and change. We keep that token and which kind of phone it is for, with your notification settings and your phone's offset from UTC, so quiet hours follow your clock.

If you use Plan by message, the messaging service you connect handles your messages, voice notes, photos and the bot's replies. Telegram is supported; WhatsApp and Messenger (both Meta) are shown only where they are available. For Plan by message, Zefxi sends the plan text, photos or voice notes you submit, your time zone, the reference time and relevant draft context to Google Gemini to prepare a private draft. You review and publish it in the app.

When you search for your own area, a place for a plan or an area in Find my group, our server sends the words you type and a point to search near to Geoapify, a place search service. When you move your area on the map, our server sends that point to Geoapify to find the name of the place there. Geoapify is not told who you are.

Maps in the app load their tiles straight from Geoapify's or OpenStreetMap's map servers, which see your phone's internet address and the part of the map shown, not who you are. That happens on a plan's place, a venue's page and the Find my group map.

Before a profile picture, a profile photo or a plan photo is published, including a photo you sent Plan by message, our server sends the photo to Google Cloud Vision to check it for adult, violent or very racy content. A photo it flags is not published.

Before a message, a hello or the words on a profile or plan are saved, our server checks them against a list of slurs. Words on the list are refused, and we keep no copy or count of them. Voice notes are not checked.

Usage analytics is off unless you allow it. The app asks once, when you first open it, and Share usage data in Settings changes your answer at any time. When it is on, PostHog receives app-use events, their times and the app's version, with a random identifier generated on your device after you allow it. A plan-join event also records whether you chose going or maybe, and a Find my group reply records whether you confirmed your place or declined. These events do not include your name, email, messages, location or member ID. Turn Share usage data off again and nothing more is sent.

If you buy an Android subscription, Google Play handles checkout. Zefxi sends the purchase token to Google Play for verification and uses an account reference to associate the purchase with your account. If you subscribe on an iPhone, the App Store handles checkout. The purchase carries a random account reference, and Zefxi asks Apple about the subscription to confirm it. Your card and payment details stay with Google or Apple and never reach us.

We keep which subscription you bought, when it started and when it ends or renews, its status, and for each paid period the store's order reference, the price and when it was paid. The store tells our server when a subscription starts, renews, is cancelled, is refunded or ends, and our server asks the store to confirm it. We use these records to give you what you paid for, to take back a referral share on a refund, and to keep the accounts the law asks for. Whether you have had a free week is for the store to say. The reminder before a free week ends is kept on your phone.

If you pay for a plan, Stripe handles checkout and your card details, which never reach us. Stripe is told the plan's name, the price and your member ID. To be paid as a host or for referrals, you set up payouts with Stripe, which asks for what it needs to pay you; we tell it your member ID and the country you pick. A venue's subscription goes through Stripe on the web, and through Google Play or the App Store in the app, with a reference to the venue on the purchase.

Signing in, signing up and password resets pass a Cloudflare check that reads your connection and device to keep bots out.

Account emails, such as confirming your address or resetting your password, are sent through Resend, which receives your email address and the email.

If you sign in with Google or Apple, it confirms your email address to us with an ID for your account there. Google's answer also carries the name and picture on your Google account, which we keep but do not show. For Apple, we keep a token from Apple so that deleting your Zefxi account can end the link.

If the app crashes or hits an error, Google's Firebase Crashlytics receives what went wrong in the code, your phone's model and system version, and a random identifier for this install. It is not told who you are.

If you connect Google Calendar, Zefxi makes one calendar called Zefxi in your Google account and puts the title, time and place of each plan you join on it. It cannot read anything else in your calendar. Disconnect deletes that calendar and ends our access. Zefxi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long it is kept

We keep account data while your account is open. Ask to delete it in Settings and you have at least 30 days to change your mind; you can stop it before it runs. Upcoming paid plans, payments or refunds may delay deletion, which then runs on its own.

Firebase keeps crash reports for 90 days and PostHog keeps usage events for a year.

What deleting removes

Your profile, answers, photos, profile picture, voice note, saved area and travel choices; your Find my group requests; your one-to-one chats, hellos, connections, saves, follows, poll answers and blocks; plans you joined, with your places on their teams, crews and shifts and your pledges; your routes, your pay link, the costs you paid, your shares and payments; what Plan by message kept for you; and a venue you set up. The uploaded media links are removed too. Deleting your Zefxi account does not delete your accounts or copies held by the messaging services you used. Asking to delete also disconnects Google Calendar at once: the Zefxi calendar is deleted and our access ends, even if you then stop the deletion.

What we retain after deletion

Messages you sent in plans and groups remain in those conversations without your name. Plans you hosted and places you added also stay without your name. So do costs you added for someone else, things you put on a Bring list for the group, and the results and reports you gave in a tournament or volunteering.

Some records outlast deletion. Reports about you and the deletion record keep the id your account had rather than your name. Reports you made keep what you wrote but not your id. If you went to a Find my group table at a venue that pays Zefxi for each guest, the billing record for your visit keeps that id too. A safety report may still contain what its author wrote. Payment and referral earnings records can remain where relevant. These records are kept with no set end date.

If you bought a subscription, the Google Play purchase token or the App Store transaction, and the subscription records, remain with their link to your Zefxi account removed. Deleting your Zefxi account will not cancel a Google Play subscription. To stop future renewal, cancel it separately in Google Play. An App Store subscription is cancelled in the App Store the same way.

Your data choices

You can change most profile information in Edit profile. To request deletion, use Settings, then Delete account, or see Delete your Zefxi account. For a copy of what we hold, a correction or another privacy question, email [email protected]. You can complain to the data protection authority where you live.

Changes

We will say so here if this notice changes. This version takes effect on 3 November 2026.