Privacy Policy

When you create a Zacha account we collect:

• Your email address and password (used for login only)
• Your display name and city (set by you in your profile)
• Your account role (customer or partner)

When you use Zacha we also collect:

• Offer views — which offers you open, to help us improve discovery
• Redemption records — offers you redeem, including timestamps and savings amounts
• Saved offers — offers you bookmark for later
• Feedback and support reports — if you choose to submit them

We use your information to:

• Show you the correct account and personalised offers
• Track your savings and redemption history
• Help business partners understand how their offers are performing (in aggregate — we do not share unnecessary personal details)
• Respond to feedback and support requests
• Improve the Zacha app during our beta period

Every time you redeem an offer, a redemption record is created with your user ID, the offer ID, the business ID, and the amount saved. This record is used to power your savings history and the business analytics dashboard.

Business partners can see how many redemptions their offers have received and estimated savings figures. They cannot see your personal profile or contact details.

If you register as a Zacha partner, your business profile (name, category, address, contact details, images) is shown publicly on the Zacha marketplace once approved. This information is provided by you and can be edited from your partner dashboard at any time.

If you submit beta feedback or a support report, we store that message with your user ID so our team can follow up. We do not share this data with third parties.

If you choose to use features such as “Use my location” or nearby deals, your browser may ask for permission to share your approximate location. Zacha uses this location on your device to show businesses and offers near you.

We do not require location access to use Zacha. If you decline location permission, you can still browse all available businesses and offers normally.

For the current version, Zacha does not store your live browser location in your account. Location is used only to help display nearby results during your session and is not shared with third parties.

We may send transactional emails such as signup confirmations, onboarding messages, payment links, payment receipts, and important account or business updates. We use trusted email service providers to deliver these messages.

These emails are not marketing emails and are sent only to support your use of the service. They are not controlled by your marketing email preference.

If you choose to opt in, Zacha may send you emails about new local offers, launch updates, and local savings news. Marketing emails are entirely optional.

• You can opt out at any time through your profile settings or via the unsubscribe link in every marketing email.
• Marketing emails are separate from account, payment, support, security, and other transactional emails.
• Opting out of marketing emails does not affect transactional communications.
• We do not sell your email address to advertisers or share it with third parties for their marketing purposes.

Zacha does not currently use third-party advertising pixels such as Meta Pixel or TikTok Pixel, and does not currently use non-essential analytics cookies.

If we introduce analytics or advertising cookies in the future, we will update this policy and request consent where required before those tools are activated.

Zacha uses Supabase for secure data storage with row-level security policies. Your password is hashed and never stored in plain text. We use HTTPS for all data in transit.

Customers can delete their Zacha account from Account Settings. When a customer account is deleted, the login account is removed and personal profile data is removed or anonymised. Saved stores and notifications are deleted.

Some records, such as anonymised redemptions, hidden or anonymised reviews, payment records, audit records or records needed for legal, accounting, fraud prevention, dispute handling or business reporting purposes, may be retained where necessary.

If you cannot access your account, contact us to request deletion. For full details see our account deletion page.

If you have questions about this policy or how we handle your data, please email us at hello@zacha.co.uk.

This policy may be updated as Zacha grows. We will notify users of significant changes. Continued use of the app after any update means you accept the revised policy.