Privacy Policy

ZigBuddy is a scheduling and route optimization app built for home health workers. This policy explains what data we collect, why we collect it, and how we protect it. We've written it to be clear and readable — not just to satisfy a legal checkbox.

Questions? Contact us any time.

What we collect

Information you give us

• Account details — your name, email address, and password (or single sign-on credentials if you use Apple or Google sign-in)
• Scheduling and patient data — names, addresses, phone numbers, and appointment information you enter while using ZigBuddy
• Payment information — processed and stored by our payment processors. We do not store your full card or payment credentials. See your payment processor's privacy policy for how they handle payment data
• Communications — anything you send us via email or support requests

Information we collect automatically

• Device and usage data — IP address, device type, operating system, browser, and how you interact with the app
• Location data — with your device-level permission, we access your location to support route optimization. You can revoke this at any time in your device settings
• Cookies and similar technologies — used for authentication, analytics, and performance monitoring

Voice input

If you use our voice-to-text feature, your voice is processed by your device's native speech-to-text service (Apple or Google depending on your device). ZigBuddy does not record or store your audio. The transcribed text is handled the same as anything else you type into the app.

How we use your data

We process your information where necessary to provide our services, fulfill our contractual obligations, comply with legal obligations, and pursue our legitimate business interests.

• To provide and improve ZigBuddy's scheduling and route optimization features
• To power AI features — when you use natural language input or AI-assisted scheduling, your input is processed by third-party AI services as described below
• To authenticate your account and keep it secure
• To process payments
• To send you product updates, feature announcements, and support responses
• To comply with legal obligations and enforce our Terms of Use

We never use anything you enter into the ZigBuddy app to serve you ads. Your schedule, your patients, your visit notes, your location, and your earnings data are never sent to an advertising platform, and we do not sell personal information for money.

We do advertise our own product, and to do that we share limited browsing information from our public marketing website with ad platforms — which state privacy laws classify as "sharing for cross-context behavioral advertising." This is described in full under Advertising and retargeting below, and you can turn it off at any time on our Do Not Sell or Share page.

AI features and data processing

ZigBuddy uses AI to help you enter patient information faster, interpret natural language scheduling requests, and suggest optimized routes. When you use these features, the text you submit — including patient names, addresses, and appointment details — may be sent to third-party AI service providers. See our AI Transparency page for current providers. We may change providers over time and will update that page to reflect any material changes.

A few important things to know:

• We do not permit our AI service providers to use your data to train their general models, except as permitted under our contractual agreements with those providers and their applicable policies
• We do not sell your scheduling or patient data to AI providers for their own purposes
• We maintain appropriate agreements with our AI providers, including Business Associate Agreements where required by HIPAA
• AI-generated results are suggestions only — you are responsible for reviewing them before acting on them

ZigBuddy is a logistics platform. Our AI features do not provide clinical advice, medical recommendations, or care assessments of any kind.

Health information and HIPAA

ZigBuddy is built for home health workers and we take health data seriously. We maintain administrative, physical, and technical safeguards designed to align with HIPAA requirements for any Protected Health Information (PHI) submitted through our services.

If your organization is a Covered Entity or Business Associate under HIPAA, you need a signed Business Associate Agreement (BAA) with ZigBuddy before submitting PHI through the app. Contact us to get one in place.

We maintain BAAs with our own downstream vendors — including AI service providers — where required by law. We use PHI primarily to deliver our scheduling and logistics services and for related operational, security, and compliance purposes.

Who we share data with

We share data only as needed to operate our services, advertise our own product, or comply with the law. We never sell your data for money. With the single exception of the advertising platforms listed below — which see only your browsing on our public marketing website, never app data — these service providers process data on our behalf and are contractually restricted from using it for their own independent purposes.

• Payment processors — when you subscribe
• Map and location services — for routing and addresses
• AI service providers — for AI-assisted features (see AI Transparency)
• Hosting and infrastructure providers — for secure app operation
• Advertising platforms — Google, Meta, and Reddit, limited to visits to zigbuddy.com (see Advertising and retargeting)
• Law enforcement or courts — when required by applicable law

In the event of a merger, acquisition, or sale of ZigBuddy, your data may be transferred as part of that transaction. We will notify you as required by applicable law.

Advertising and retargeting

We advertise ZigBuddy on Google (including YouTube and display), Meta (Facebook and Instagram), and Reddit. When you visit our public marketing website at zigbuddy.com, those platforms may place a cookie or similar identifier in your browser so we can show ads to people who have already looked at us. This is commonly called retargeting.

Where the line is. This applies only to zigbuddy.com — the marketing pages you are reading right now. It does not apply to the ZigBuddy app at app.zigbuddy.com or on your phone. There are no advertising tags in the product. No schedule, patient record, address, visit note, location, or earnings figure has ever been or will ever be shared with an advertising platform. Protected Health Information is never used for advertising, under any circumstance.

What the ad platforms receive from our marketing site:

• Which marketing pages you viewed, grouped into broad interest categories (for example, someone reading our Home Health 101 articles versus someone on our pricing page)
• Whether you clicked through to the App Store, Google Play, or the web app
• Standard technical data the platforms collect themselves — IP address, browser, device type, and their own advertising identifiers

We deliberately exclude some pages from this entirely. Our Privacy Policy, Terms, AI Transparency, account-deletion, and opt-out pages carry no advertising tags and never contribute to an audience — you should be able to read about your privacy rights, or exercise them, without that reading being used to target you.

How to turn it off. Three ways, all equally effective:

• Use our Do Not Sell or Share My Personal Information page — one click, no account needed
• Enable Global Privacy Control in your browser — we honor it automatically on every device where it is on
• Email privacy@zigbuddy.com and we will handle it for you

When you opt out, our advertising tags are never loaded — we do not fetch them and then ask them to behave. We will not treat you any differently for opting out.

Google Maps

Our app uses the Google Maps API for location display and route optimization. By using location features in ZigBuddy, you also agree to be bound by Google's Terms of Service and Privacy Policy, available at policies.google.com/privacy.

Google and Apple sign-in

You can create and access your ZigBuddy account using Google or Apple login. When you do, we receive basic profile information — typically your name and email address — from those providers. We use this only to create and manage your account.

Google's and Apple's own privacy policies govern how they handle your data on their end.

Data retention

We keep your data for as long as your account is active or as needed to provide our services. When you close your account, we delete or anonymize your personal information within a commercially reasonable period, except where we're required to keep it longer for legal, tax, or fraud-prevention purposes. Certain health-related data may be retained as required by applicable healthcare or legal recordkeeping obligations.

Backup copies may persist for a limited time in secure storage before being purged.

Security

We use industry-standard technical and organizational safeguards to protect your data, including encryption in transit and at rest, access controls, and HIPAA-aligned security practices for health-related information.

While we implement industry-standard safeguards, no system can be guaranteed to be completely secure. If you believe your account has been compromised, contact us immediately. In the event of a data breach affecting your information, we will notify you as required by applicable law.

Children

ZigBuddy is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18, and we comply with applicable laws relating to children's data, including COPPA. If we become aware that we have collected data from someone under 18, we will delete it promptly.

Your privacy rights

Regardless of where you live, you can always:

• Access or update your account information in your account settings
• Request deletion of your account and data by contacting us
• Opt out of marketing emails using the unsubscribe link in any email we send

We respond to all requests within applicable legal timeframes, typically 30–45 days depending on your location.

California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA as amended by the CPRA:

• Right to know what personal information we collect, use, and share
• Right to delete your personal information, subject to certain exceptions
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing of personal information — we do not sell personal information for money, and you can stop the sharing described under Advertising and retargeting on our Do Not Sell or Share page
• Right to limit use of sensitive personal information, including health-related data
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us. We may verify your identity before processing your request and will respond within 45 days.

Do Not Track and Global Privacy Control

We do not respond to the legacy Do Not Track (DNT) header, as no uniform standard for it was ever established.

We do honor Global Privacy Control (GPC), its successor. If your browser or extension sends the GPC signal, we treat it as a valid opt-out request and our advertising tags never load — no visit to the opt-out page required.

Updates to this policy

We may update this policy from time to time. When we make material changes, we'll notify you by email or through a notice in the app. The date at the top always reflects the current version.

Contact

ZigBuddy, Inc.
Contact us