Privacy notice
What Zovora stores, why it stores it, and how to get it removed. In plain English, because you should not need a lawyer to work out what happens to your money data.
Last updated 4 September 2026
Who is responsible
Zovora ("we") is the data controller for the personal data described in this notice, which means we decide what is collected and why. You can reach us at hello@getzovora.com about anything on this page, including a request to delete your data.
The short version
- Zovora has no bank connection and never asks for banking credentials.
- Zovora cannot make payments, move money or access any account you hold.
- Every figure in the app is one you typed in. Nothing is bought in or estimated.
- We do not sell your data, and we do not use it for advertising.
- You can ask us to delete everything, and we will.
What we collect
Your email address, if you join the early-access list or create an account. For the list it is used only to tell you when a beta place is ready and to send occasional launch updates.
Account details, if you sign up: your email address and a password, which is stored as a hash by our authentication provider and is never visible to us in readable form.
The financial information you enter: income and payday, bills and subscriptions, credit cards, loans and finance plans, pay-later orders, savings pots and investment values, and any spending you log. This is the data the app does its arithmetic on. You choose all of it, and you can leave anything out.
Basic technical data needed to serve the site and keep it working, such as your browser type and approximate region, handled by our hosting provider.
What we do not collect
We do not collect bank logins, card numbers, account numbers or sort codes. Zovora does not use open banking and is not connected to any bank, so there is no feed to read and no credential to lose.
Why we hold it
To run your account and work out what is safe to spend. That is the whole purpose. Where we send you launch updates, we do it because you asked us to by joining the list, and every email has an unsubscribe link.
Our lawful basis for each of these
- To run your account: performing the contract you enter into when you sign up.
- To email you about the beta and launch: your consent, given when you join the list, which you can withdraw at any time using the unsubscribe link in any email.
- To keep the service secure and working: our legitimate interests in operating and protecting the service, balanced against your rights.
Where it is held
Your account data is held in a hosted database run by Supabase, and the site is served by Vercel. Both are third-party processors acting on our instructions. Some information is also kept in your own browser's storage so the app works quickly and can show your data without a round trip; clearing your browser data removes that local copy.
Who else sees it
Nobody, other than the providers above who host it on our behalf, and anyone we are legally required to disclose it to. We do not sell it, rent it, share it with advertisers or use it to build profiles for anyone else.
How long we keep it
For as long as you have an account, or until you ask us to delete it. If you joined the early-access list and never sign up, tell us and we will remove your email address from the list.
Your rights
Under UK data protection law you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we are using it. Email hello@getzovora.com and we will action it. If you are not happy with how we have handled a request, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We do not run advertising or third-party tracking cookies. The storage the site does use is what it needs to keep you signed in and remember settings such as your theme.
Changes
If this notice changes in a way that matters, we will update the date at the top and, for anything significant, tell account holders by email.