MyZeekr Privacy Policy

This Privacy Policy explains what data the MyZeekr iOS app and its backend service (collectively, "MyZeekr", "we", "our") collect when you use the app, why we collect it, and the choices you have.

We are an independent third-party app and are not affiliated with, endorsed by, or sponsored by Zeekr Intelligent Technology Holding Limited or any of its affiliates. MyZeekr connects to Zeekr's cloud services on your behalf using credentials you provide.

1. What we collect

• Account information — the email address and password you use to register a MyZeekr account. Passwords are stored using bcrypt with a per-record salt; we never store them in plain text.
• Region preference — the country / region code you select at sign-up, used to talk to the correct Zeekr cloud gateway.
• Linked Zeekr credentials— the email and password of the Zeekr account you choose to link. Passwords are encrypted at rest with a symmetric key held only by our backend; they are never sent to any third party other than Zeekr's cloud, on your behalf.
• Vehicle telemetry— when we call Zeekr's API to read your car's state (battery, locks, climate, etc.), the response is cached for a few seconds to keep us under Zeekr's rate limits. We do not retain a long-term history of your car's state.
• Push notification tokens — the Apple Push Notification Service device token your app registers, so we can deliver alerts (charge complete, door unlock, etc.) to your phone.
• Live Camera video (hosted app only)— when you open Live Camera, a companion app on your car's screen streams your car's 360° surround-camera images to your phone through our relay. These images pass through the relay's memory only, are never written to disk, and are not retained after they reach your phone. A per-user access token scopes each stream to your own car. Live Camera is a feature of the hosted MyZeekr app and is not part of MyZeekr Self-Host.
• Diagnostic reports (only when you send one)— if you tap "Report a display problem" in Settings, we receive a screenshot of the app's 3D car view plus your device model, iOS version, and power/thermal state, so we can fix display bugs. It contains no personal data and is sent only when you choose to.
• Sign-in fingerprint — a one-way SHA-256 hash of your IP address and User-Agent for each successful sign-in. We use this to recognize repeat sign-ins and to email you when a new device or network signs into your account.
• Diagnostic logs — application logs may temporarily contain IP addresses, request paths, and error traces. We do not log passwords or vehicle GPS history.

In-car display content (only when you send it)

When you use features like Stargate Studio, the text or pattern you choose is sent to our servers to relay it to your vehicle's exterior lights. It is stored only briefly to deliver it: each new message replaces the previous one and stays until you change it or your vehicle clears it.

Lock sounds you add (only when you add them)

When you add a sound, the audio file is uploaded to our servers, converted to the format your vehicle requires, and stored so your car can collect it. We keep it until you delete it. Sounds you choose from the community catalogue are fetched by us from the site that hosts them, not from your phone.

Your car’s companion app tells us the names of the MyZeekr sounds currently on your drive, so the app can show you what is really there. We do not read, list, or upload anything else on that drive.

2. Why we collect it

• To authenticate you and let you use the app.
• To make Zeekr cloud calls on your behalf.
• To deliver push notifications you've opted into.
• To detect and notify you about suspicious account activity.
• To diagnose and fix bugs.

3. Third-party services we use

• Google Cloud Platform (GCP) — hosts the MyZeekr backend.
• Apple Push Notification Service (APNs) — delivers push notifications.
• Resend — sends transactional email (password reset, email verification, sign-in alerts, account deletion confirmations).
• Zeekr Intelligent Technology cloud services— receives the relayed Zeekr cloud calls. We have no control over Zeekr's privacy practices; please review Zeekr's own privacy policy at zeekr.com.

4. What we do not do

• We do not sell, rent, or share your personal data with advertisers or data brokers.
• We do not include third-party analytics or advertising SDKs in the iOS app.
• We do not record long-term GPS history of your vehicle.
• We do not store, record, or retain your Live Camera video — the images only pass through our relay in memory and are never saved on our servers.

5. Data retention

We keep your account and linked-credentials data until you delete your account. When you tap Account → Delete account in the app, we immediately remove your user record, your encrypted Zeekr credentials, your push device tokens, and your sign-in fingerprints. Diagnostic logs rotate out within 30 days.

In-car display content (such as a Stargate Studio message) is transient: we keep only the latest message you sent, and only until you replace or clear it.

Lock sounds - kept until you delete them, or until your account is deleted.

6. Your choices

• You can unlink your Zeekr account at any time from Account → Zeekr connection.
• You can delete your MyZeekr account at any time from Account → Delete account or from the initial profile screen.
• You can disable push notifications in iOS Settings.

7. Security

Communications between the iOS app and the MyZeekr backend occur over HTTPS. The Fernet key used to encrypt your stored Zeekr password lives only on the backend server.

8. MyZeekr Self-Host

MyZeekr Self-Host is a separate version of the app for owners who run the MyZeekr backend on a server they control. If you use it, the privacy picture is simpler than everything above: your Zeekr credentials and all vehicle data (status, location, trips, charging history) are sent only to your own server and stored there, encrypted. They never reach our servers, in transit or at rest.

The only things that touch our infrastructure are:

• Licence checks— the app periodically confirms your licence or free trial with our licence server. These requests carry your licence key (if you have one), an anonymous device identifier, and trial dates. They never include vehicle data, your Zeekr credentials, or your server's address.
• Payment — subscriptions are processed by Stripe, which shares your email address with us so we can deliver your licence key and manage your subscription.
• Server-code downloads — standard web-server access logs (IP address and time) when you download the self-host server code.

We keep licence records (key, email, Stripe references, device identifier) while your subscription exists and afterwards for our financial records. Free trials are tracked by device identifier only — we hold no personal information about trial users. Your server, its database, and everything on it are yours: ending your subscription locks the app but never touches your data.

9. Children

MyZeekr is not intended for children under 13. We do not knowingly collect data from anyone under 13.

10. Changes

If we change this policy in a material way, we will email registered accounts and post the update at this URL with a new "Last updated" date.

11. Contact

For privacy questions or data-deletion requests, email support+myzeekr@appventureai.com.