Privacy Policy

The data controller is Vladimir Castañeda, an individual developer based in Colombia who operates Zekee under the Vdymir Labs brand. Vdymir Labs is not a separate legal entity. For questions, rights requests, or complaints, email support@vdymirlabs.com.

This policy applies to the Zekee app and zekee.app. Your information is handled under applicable law, including Colombia’s Law 1581 of 2012 and its regulations where applicable.

We use information needed to authenticate you, let you create events, and show event albums to their members. Depending on how you use Zekee, this may include:

• Account and sign-in: email address, name, profile photo, account identifiers, information received from Apple or Google, and selected language.
• Events: event name and dates, invitation code, host, members, and join dates.
• Photos: original files, covers, and previews; file type, size/dimensions, available capture date, and technical storage data.
• Device and security: notification tokens, device identifier, platform, session records and, when provided by the authentication system, IP address and user agent.
• Purchases: transaction and RevenueCat identifiers, product, store, environment, status, and purchase or refund dates; RevenueCat webhooks are also stored as technical records.
• Website: Vercel Analytics is used in production to measure general landing-page usage.

Photos are stored in Cloudflare R2. Only members of an event can access its photos in Zekee. We do not publish albums on the website. Members can view and download photos, so we cannot control copies they save or share outside the app.

Zekee does not request or send GPS coordinates as a separate field when registering a photo. However, the original file you select may contain EXIF metadata, such as date, time, or location, if the phone or camera included it. That data may remain in the stored original file; review or remove metadata before uploading if you do not want to share it with event members.

We process information to create and secure accounts, manage events and invitations, store and show photos to members, deliver notifications, enable and verify purchases, provide support, prevent fraud and abuse, maintain security, and comply with legal obligations.

Depending on the situation, processing is based on your request to use Zekee and our service agreement, your consent, our legitimate interests in security and operation, or a legal obligation. We do not sell personal data.

We share only the information needed with service providers that help operate Zekee: Cloudflare R2 to store photos; RevenueCat and Apple to process or verify purchases; Apple or Google for sign-in; Expo and Apple/Google notification services to deliver alerts; Vercel Analytics to measure website usage; and the API’s hosting and database providers.

These providers may process data from countries other than Colombia, depending on their role and infrastructure. Apple manages App Store checkout; Zekee does not receive your full payment-card details. We may also disclose information when necessary to comply with law, protect rights, or respond to valid authority requests.

We keep account data and content while the account or event is active, unless you delete it sooner or we must retain something for security or legal reasons. You can delete photos you uploaded in the app.

When you delete your account, Zekee removes your uploaded photos from storage and deletes your profile and sign-in data. If you managed an event with other members, it is transferred to the member who joined first; your photos are removed, but other members’ photos remain. If no other member remains, the event and its photos are deleted. The transferred event’s cover is removed. If a storage operation fails, technical cleanup is retried.

Important exception: purchase records and technical events received from RevenueCat have no automatic expiration in the current system and are not deleted when you delete your account. We retain them to maintain transaction history, handle refunds, prevent fraud, and meet obligations. Account deletion removes the internal purchaser link, but transaction/provider identifiers and the technical webhook payload may remain.

You must be at least 18 to use Zekee. In-app purchases are one-time payments, not subscriptions: capacity above 5 participants and unlimited photos apply to one event. Purchases are currently processed on iOS through the App Store. Apple and RevenueCat receive the technical information needed to verify a transaction; full payment details remain with Apple.

You may ask to know, access, update, or correct your data; request proof of consent where applicable; ask how information is used; and request deletion or withdraw consent, subject to applicable legal or contractual exceptions.

Email support@vdymirlabs.com from the address linked to your account and describe your request. We will respond within the time limits required by law. If you are in Colombia and disagree with the response, you may contact the Superintendence of Industry and Commerce after first submitting a claim to the controller, where required by law.

We use reasonable technical and organizational safeguards to protect information. No digital transmission or storage can be guaranteed to be completely secure.

We may update this policy and will post the current version here with its date. If a material change requires notice or renewed consent, we will communicate it as required by law.