MyZeekr Privacy Policy

This Privacy Policy explains what data the MyZeekr iOS app and its backend service (collectively, "MyZeekr", "we", "our") collect when you use the app, why we collect it, and the choices you have.

We are an independent third-party app and are not affiliated with, endorsed by, or sponsored by Zeekr Intelligent Technology Holding Limited or any of its affiliates. MyZeekr connects to Zeekr's cloud services on your behalf using credentials you provide.

1. What we collect

• Account information — the email address and password you use to register a MyZeekr account. Passwords are stored using bcrypt with a per-record salt; we never store them in plain text.
• Region preference — the country / region code you select at sign-up, used to talk to the correct Zeekr cloud gateway.
• Linked Zeekr credentials— the email and password of the Zeekr account you choose to link. Passwords are encrypted at rest with a symmetric key held only by our backend; they are never sent to any third party other than Zeekr's cloud, on your behalf.
• Vehicle telemetry— when we call Zeekr's API to read your car's state (battery, locks, climate, etc.), the response is cached for a few seconds to keep us under Zeekr's rate limits. We do not retain a long-term history of your car's state.
• Push notification tokens — the Apple Push Notification Service device token your app registers, so we can deliver alerts (charge complete, door unlock, etc.) to your phone.
• Sign-in fingerprint — a one-way SHA-256 hash of your IP address and User-Agent for each successful sign-in. We use this to recognize repeat sign-ins and to email you when a new device or network signs into your account.
• Diagnostic logs — application logs may temporarily contain IP addresses, request paths, and error traces. We do not log passwords or vehicle GPS history.

2. Why we collect it

• To authenticate you and let you use the app.
• To make Zeekr cloud calls on your behalf.
• To deliver push notifications you've opted into.
• To detect and notify you about suspicious account activity.
• To diagnose and fix bugs.

3. Third-party services we use

• Google Cloud Platform (GCP) — hosts the MyZeekr backend.
• Apple Push Notification Service (APNs) — delivers push notifications.
• Resend — sends transactional email (password reset, email verification, sign-in alerts, account deletion confirmations).
• Zeekr Intelligent Technology cloud services— receives the relayed Zeekr cloud calls. We have no control over Zeekr's privacy practices; please review Zeekr's own privacy policy at zeekr.com.

4. What we do not do

• We do not sell, rent, or share your personal data with advertisers or data brokers.
• We do not include third-party analytics or advertising SDKs in the iOS app.
• We do not record long-term GPS history of your vehicle.

5. Data retention

We keep your account and linked-credentials data until you delete your account. When you tap Account → Delete account in the app, we immediately remove your user record, your encrypted Zeekr credentials, your push device tokens, and your sign-in fingerprints. Diagnostic logs rotate out within 30 days.

6. Your choices

• You can unlink your Zeekr account at any time from Account → Zeekr connection.
• You can delete your MyZeekr account at any time from Account → Delete account or from the initial profile screen.
• You can disable push notifications in iOS Settings.

7. Security

Communications between the iOS app and the MyZeekr backend occur over HTTPS. The Fernet key used to encrypt your stored Zeekr password lives only on the backend server.

8. Children

MyZeekr is not intended for children under 13. We do not knowingly collect data from anyone under 13.

9. Changes

If we change this policy in a material way, we will email registered accounts and post the update at this URL with a new "Last updated" date.

10. Contact

For privacy questions or data-deletion requests, email support+myzeekr@appventureai.com.