Privacy Policy
Last updated: 28 July 2026
The short version.
Your schedule is stored in your own iCloud account, not on our servers. We cannot read it, we do not copy it, and we have no way to sell it. We do not use analytics, advertising, or tracking of any kind. The only outside company involved is the one that processes your subscription.
1. Who we are
CoZoo is made by Matthysen Holding B.V. ("we", "us"), a company registered in the Netherlands. We are the data controller for the limited personal data described in this policy.
Matthysen Holding B.V.
Amsterdam, the Netherlands
Email: help@cozoo.app
2. Where your schedule lives
Everything you create in CoZoo, including ZooAnimal names, ZooKeeper names and colours, the days you assign, handover times, notes and your chosen calendar skins, is stored in your own iCloud account using Apple's CloudKit service. It is written to your private CloudKit database on your device and synced by Apple between your devices.
We do not operate a server that holds your schedule. We have no account system, no login of our own, and no copy of your data. We cannot read your schedule, and neither we nor anyone else can retrieve it from us, because we never receive it.
Apple processes this data on your behalf under Apple's own terms. See Apple's Privacy Policy and Apple's description of iCloud security.
Sharing a schedule
When you invite someone to a ZooAnimal, CoZoo creates an Apple CloudKit share. The invitation link is generated by Apple, and the people you invite are given access to that part of your iCloud data by Apple, at your instruction. You control who is invited, what level of access they have, and you can remove their access at any time from the ZooAnimal's settings.
Once someone joins, they can see the ZooKeeper names, colours, days, handover times and notes on that schedule. Anyone you invite becomes able to see that information, so only invite people you intend to share the schedule with.
Names of children and other people
CoZoo asks for first names only, and only so the schedule is readable. If you enter the name of a child, a pet, an elderly relative or anyone else, that name is stored in your iCloud in exactly the same way as everything else, and we never see it. You are responsible for what you choose to enter and for having the right to enter it. You can change or delete any name at any time in the app.
CoZoo is intended for use by adults. It is not directed at children and children do not create accounts or use the app themselves.
3. Data stored only on your device
Some settings never leave the device at all: the order you have dragged your ZooKeepers into, which notes you have already read, and your 12 or 24 hour clock preference. These are held in the app's local storage and are removed when you delete the app.
Your onboarding progress and the start date of your free trial are stored in Apple's iCloud key-value storage so that they follow you between your own devices. They contain no personal information beyond a date and a small number of flags.
4. Subscriptions
Purchases are made through Apple's App Store. We never see your payment details, card number or Apple Account credentials. Apple tells us only whether a subscription is active.
To manage subscriptions across devices we use RevenueCat, Inc., a service provider based in the United States, acting as our processor. When you open the app, the RevenueCat SDK sends a randomly generated, anonymous identifier along with your purchase receipt, the app version, the device model and operating system version, and the IP address of the request. This lets us confirm your subscription is valid and restore it if you reinstall the app.
RevenueCat receives no schedule data of any kind. It does not receive names, days, handover times or notes. Transfers to the United States are made under the European Commission's Standard Contractual Clauses. See RevenueCat's Privacy Policy.
5. The CoZoo website
The pages at cozoo.app are served as static files. We set no cookies of our own and run no analytics.
If you sign in on the web to view or edit your schedule, that sign-in is handled entirely by Apple through Sign in with Apple and CloudKit JS. Apple sets its own cookies to keep you signed in, and your schedule is read directly from your iCloud by your browser. It does not pass through us. Standard server logs kept by our hosting provider may briefly record IP addresses for security and reliability purposes.
6. What we do not do
- We do not use analytics or crash-reporting services.
- We do not use advertising, ad networks or tracking pixels.
- We do not build profiles or use automated decision-making.
- We do not sell, rent or share personal data with anyone for their own purposes.
7. Legal basis and retention
Where we process personal data, we rely on the performance of our contract with you (providing the app and managing your subscription) and on our legitimate interest in keeping the service secure and working correctly.
Subscription records are kept by RevenueCat for as long as your subscription is active and for a limited period afterwards so that it can be restored. Your schedule is kept in your iCloud for as long as you keep it, and is deleted when you delete it.
8. Deleting your data
Because your schedule lives in your own iCloud, you control it directly:
- Delete a ZooAnimal in the app to remove that schedule and everything on it.
- Delete the app and remove CoZoo from iCloud in your device's iCloud settings to remove all of it.
- If someone has invited you to their schedule, disconnecting from it in the app removes your access. The schedule itself belongs to the person who created it.
To have your subscription record removed, email help@cozoo.app.
9. Your rights
Under the GDPR you have the right to access, correct, delete, restrict and object to the processing of your personal data, and the right to data portability. For your schedule these rights are exercised directly in the app, because we hold no copy of it. For the subscription data described in section 4, write to help@cozoo.app and we will respond within one month.
If you believe we have handled your data improperly, you may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own country.
10. Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how your data is handled, we will say so in the app before it takes effect.
11. Contact
Questions about this policy, or about your data, go to help@cozoo.app. A person reads that address.