Privacy Policy | Zufaa Inc

In short

We collect as little as we can. We do not sell your information and we never have. You can ask us to delete your data at any time and we will.

This policy covers the website at zufaa.com and the two apps we make: Zufaa Go and Zufaa Store.

Who we are

Zufaa Inc is the company responsible for your information under this policy.

What Zufaa Go collects

Zufaa Go is the NYC subway and bus tracker. It does not use accounts, so we do not know who you are.

Your location. We only ask for it when you tap “near me”, and only to work out which stops are closest to you and what the weather is where you are. Your location is used at that moment and is not saved on our servers. You can refuse, and the rest of the app still works.
Your favorites. The stops you save are stored on your own device, in your browser. We cannot see them. Clearing your browser data removes them.
Searches. When you search for a stop, that search is sent to our server so we can answer it. We do not attach it to you or build a profile from it.
Basic technical records. Like almost every website, our hosting keeps a short server log of requests, which includes an IP address, the time, and the page or data requested. We use these only to keep the service running and to find problems.

Zufaa Go has no advertising and no third-party tracking.

What Zufaa Store collects

Zufaa Store is store management software. A business signs up, and the business enters information about its own work. That information includes:

User accounts. A name, an email address, a password (stored scrambled, never in plain text) and the role the person has in the business.
Employee records. Employee names, pay rates, clock-in and clock-out times, hours worked, and payroll figures. This information is entered by the business owner or manager, not by us.
Business records. Sales, receipts, products, stock counts, suppliers, expenses and reports.
Basic technical records. Server logs as described above, plus a record of significant actions in the account, such as a price change or a corrected time record, so a business can see its own history.

We use this information only to run the app for that business. We do not use it to advertise to anyone, and we do not use it to train anything.

If you are an employee of a business using Zufaa Store

Your employer decides what goes into the app and how long it is kept. In privacy law terms, your employer controls that information and we process it for them. If you want your record changed or removed, please ask your employer first. You can also write to us at privacy@zufaa.com and we will pass your request on and help where we can.

What this website collects

If you send the contact form, we receive your name, email address, phone number if you give one, the subject, and your message. We use it only to answer you.
Our hosting keeps the short server logs described above.
We do not use advertising cookies or analytics trackers on this website.

How your information is stored and kept safe

Everything travels over an encrypted connection (HTTPS).
Passwords are stored as a one-way hash. Nobody at our company can read your password.
Data is stored on servers in the United States, run by our hosting provider.
Access is limited to the people who need it to run and support the service.
We keep regular backups so a business does not lose its records.

No system is perfectly secure, but we take this seriously and we fix problems quickly.

How long we keep it

Zufaa Go: nothing personal is kept. Server logs are kept for a short period and then removed.
Zufaa Store: we keep a business's data for as long as the account is open. After an account is deleted, data is removed within 30 days, and backups containing it are overwritten within 90 days.
Contact messages: kept while we deal with your question and for a reasonable period afterwards in case you write again.
We keep records we are legally required to keep, such as tax and payment records, for as long as the law requires.

We do not sell your data

We have never sold personal information, and we do not share it for cross-context behavioural advertising. We do not rent, trade or give lists of users to anyone.

Who else is involved

We use a small number of outside services to make the apps work. They only get what they need to do their job.

Metropolitan Transportation Authority (MTA). We request public subway and bus arrival data from the MTA. We do not send them anything about you.
Weather services. To show the weather, we send approximate coordinates to a public weather service, such as the United States National Weather Service. No name, account or device identifier is sent with it.
Our hosting provider. Our website, apps and databases run on servers rented from a hosting company, which stores the data on our behalf.
Email. Messages you send us arrive in our company mailboxes, handled by our email provider.

We may also share information if the law requires it, for example a valid legal order, or if it is needed to protect someone's safety or to deal with fraud or abuse. If our company is ever sold or merged, your information may transfer to the new owner, who would have to keep to this policy.

Children

Our apps are not made for children under 13 and we do not knowingly collect information from them. If you believe a child has given us information, write to privacy@zufaa.com and we will delete it.

Your rights

Wherever you live, you can ask us to:

See what information we hold about you.
Correct anything that is wrong.
Delete your account and your information.
Get a copy of your data in a file you can take elsewhere.
Say no to a particular use, or withdraw a permission you gave before, such as location access.
Complain to us, or to your local data protection authority, if you think we got it wrong.

Residents of California, Colorado, Connecticut, Virginia and other states with privacy laws have these rights by law, and we give the same rights to everyone. We will not treat you differently or charge you more for using them.

To make a request, email privacy@zufaa.com. We will reply within 30 days. We may need to check who you are before we act, so that nobody else can make a request about your data.

How to delete your data

You can delete your account from inside Zufaa Store, or email us and we will do it. The full steps and timings are on our Support page.

Changes to this policy

If we change this policy, we will update the effective date at the top of this page. If a change is important, we will say so clearly on this website and, where we can, by email.

Contact us about privacy

Write to privacy@zufaa.com, call (646) 441-7566, or post to Zufaa Inc, 344 Eldert LN 1, Brooklyn, NY 11208.