Privacy Policy

Effective date: 2026-11-10

Zippy helps you spend less time in distracting apps. You pick the apps, your iPhone blocks them on a schedule, and you text Zippy when you need a break. This policy explains what we collect and what we do with it. Zippy is run by Franklin Zhu, an individual in the United States ("we", "us").

What we collect

If you join the waitlist

Your mobile phone number.
That you agreed to receive texts, and when.

Unless you opt out of advertising measurement, we collect the website-event, advertising-identifier, IP-address, and browser information described below.

If you use the app and texting service

Phone number. Your phone number is your account. We use it to sign you in with a one-time code and to text with you.
App nicknames. When you pick apps to block, you give each one a nickname, like "Insta". We store the nicknames you type.
Routines and schedules. The block times you set, like "weeknights 9 PM to 1 AM", and your phone's time zone when you apply them.
Unlock requests and status. When you ask for a break, how long, and whether your phone confirmed the block or unlock.
Messages. The texts you send Zippy and the replies Zippy sends.
Device session. A sign-in session that links your iPhone to your account.

What stays on your iPhone The apps you choose to block are picked with Apple's Screen Time tools. Apple gives Zippy only private tokens that stand for those apps. The tokens stay on your phone. Our server never receives them and cannot tell which apps you picked. We only learn an app's name if you type it yourself, as a nickname or in a text.

We do not collect your contacts, photos, precise location, or Screen Time usage history. An IP address can indicate an approximate location.

How we use it

To run Zippy: apply your routines, handle unlocks, and reply to your texts.
To sign you in and keep your account secure.
To send waitlist updates and your invite.
To find and fix problems, and to make Zippy's replies better.

We do not sell personal information for money. Unless you opt out of advertising measurement, we use the Meta Pixel and Conversions API to share website visits and waitlist-signup events, advertising cookie and click identifiers, your IP address, and browser information with Meta. This helps Meta match activity to its accounts, measure our ads, and improve ad delivery.

AI processing

Zippy uses an AI model from OpenAI to read your texts and write replies. Before any of your texts go to OpenAI, Zippy asks you, and nothing is sent until you reply OK. If you don't, Zippy answers with simple fixed replies instead.

When the AI is used, OpenAI receives the text you sent, recent messages in your conversation, and your saved setup (app nicknames, goals, and schedule). Under OpenAI's API terms, this data is not used to train their models, and OpenAI may keep it for a limited time to monitor for abuse up to 30 days.

We keep a record of each AI reply (steps taken, timing, errors) so we can fix problems. Phone numbers are removed from these records, and they are deleted after 30 days.

Service providers

The following companies help us run Zippy and receive information needed for their services. Separately, we share website information with Meta as described in the advertising section.

Supabase: database and sign-in.
Vercel: hosting for our website and server.
Linq: sending and receiving text messages, including sign-in codes.
OpenAI: AI replies, only after you say OK.
Apple: app distribution and Screen Time features on your phone.

Text messaging

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Reply STOP to stop Zippy texts. We may send one confirmation of your opt-out. You can still request a sign-in code yourself in the app. Your advertising choices are separate from your text-message subscription.

Sharing website information with advertising partners may qualify as selling or sharing personal information under state privacy laws. You can decline or withdraw advertising measurement by turning on Global Privacy Control in your browser or emailing hello@textzippy.com, without creating an account. We honor Global Privacy Control (GPC) as a request to disable this sharing. When advertising measurement is disabled, we stop sending website events to Meta and remove our advertising cookies. We apply your choice to this browser and any waitlist record we can associate with your request. If you clear browser storage or use another browser, turn on Global Privacy Control or email hello@textzippy.com again. You can still join the waitlist and receive texts. Contact hello@textzippy.com for help or to request deletion.

How long we keep it

Conversation history and AI memory: 30 days, then deleted. Your current app nicknames, goals, and schedule stay while your account is active.
AI reply records: 30 days.
Older versions of your schedule: deleted after 30 days. We keep your latest and currently applied schedule.
Waitlist numbers: until we launch, plus 90 days, unless you join.
Advertising cookies expire within 90 days unless deleted sooner. We delete queued advertising-event payloads after successful delivery or within 24 hours. These periods describe our storage, not Meta's retention.
Everything else: until you delete your account.

Deleting your data

You can delete your account at any time:

Text DELETE to Zippy, or
Use Delete account in the app, or
Email hello@textzippy.com.

Deletion erases your account, messages, nicknames, routines, and AI memory. To honor a STOP after deletion, we may keep a minimal record, such as a one-way scrambled form of your number, for up to 30 days. To leave the waitlist, reply STOP or email us.

Children

Zippy is not for children under 13, and we do not knowingly collect their information. If you think a child under 13 has given us information, email us and we will delete it.

Security

We use encrypted connections, access controls on our database, and one-time sign-in codes that are never stored in plain text or written to logs. No system is perfectly secure, but we work to protect your information and keep only what we need.

Changes

If we change this policy, we will update the date at the top. If a change is significant, we will tell you by text or in the app before it takes effect.

Contact

Questions? Email hello@textzippy.com or text HELP to Zippy.