Zaro Privacy Policy

Publisher postal line, mailbox, and when this notice takes effect

Neijiang Huaizhao E-commerce Co., Ltd. is the controller for personal data connected with Zaro. Correspondence about this notice may be sent to No.14 Rong'an Lane, Dongxing District, Neijiang City (104), or to hello@huaizhaoglobal.com. This Privacy Policy takes effect on 2026-09-08.

Zaro is distributed on Google Play for Android only. It is a private picnic lookbook kept on the handset: fruit boards, blanket layouts, and seaside gatherings stay with the holder. Zaro is not a shared board. The lookbook does not run a public feed, likes, messaging, or posts to other people. This notice describes how the controller treats the few records that actually reach it, and how local files are handled on the device. Collection, sharing, and purpose are described in the chapters that follow, including whether a practice is required or left to the holder.

Zaro is offered only to persons who are 18 (eighteen) years of age or older. Minors must not use Zaro.

What the picnic lookbook stores on this handset

Zaro keeps picnic references, layout notes, and related working files in on-device storage. You may type captions for a fruit board or a blanket arrangement, attach an optional still already on the phone through Android’s Photo Picker, or add a spoken remark after granting Microphone. Those materials remain under your control on the handset. Uninstalling Zaro, or clearing Zaro’s storage in Android Settings, removes local lookbook files from that copy.

A seaside still is stored without a sign-in, and Zaro keeps no hosted identity for the holder. There is therefore no remote member profile to close and no account-deletion pathway to publish.

Camera and Microphone remain idle until you tap

Camera and Microphone stay idle until you choose them for a concrete step. Camera is not in the background. Microphone is not in the background. Photo files are not in the background. Location is not in the background.

Camera opens only after an explicit tap when you want a new picnic still for a board you are editing. The capture stays on the device. Refusing Camera, or later revoking it in Android Settings, stops that capture path; typed layout notes and boards already saved continue to work. Android’s Photo Picker can attach a picture that is already on the phone; that picker path is separate from the Camera permission and does not itself grant Camera access.

Microphone opens only after an explicit tap when you want a spoken remark beside a layout. The audio stays on the device. Refusing Microphone, or revoking it in Android Settings, stops spoken capture; other local text features remain available.

Zaro does not use video capture and does not request location.

Stills, spoken remarks, and working caches kept on-device

The controller does not collect Photos / Videos, and those files are not sent off the device. Stills you take or attach remain on the handset for your lookbook. The controller does not collect Microphone audio, and that audio is not sent off the device; spoken remarks stay local. The controller does not collect App activity, and those caches are not sent off the device; working caches that keep screens responsive remain on the handset until you clear storage or uninstall.

The controller does not upload lookbook stills, spoken remarks, or those working caches to its own servers. A still never leaves the handset through Zaro’s picnic features. The only network path described elsewhere in this notice is the fetch of hosted legal pages.

Where the General Data Protection Regulation (GDPR) applies—including for data subjects in the European Economic Area—the controller relies on the following legal bases for the limited processing that occurs outside the handset.

Performance of a contract covers answering mailbox letters about Zaro and returning a legal text the holder asked to read. Legitimate interests cover reading a privacy complaint in order to identify the handset and finish the reply. A statute that obliges the controller to retain a letter supplies the legal-obligation basis for that hold. Sending a letter to the mailbox is how the holder gives consent. A later letter to hello@huaizhaoglobal.com ends consent for any further use of the first letter. On-device fruit-board stills stay outside these legal bases.

A data subject may lodge a complaint. The supervisory authority may be wherever that person lives, works, or met the difficulty.

Contact path for Data Protection Officer matters

There is no separately named Data Protection Officer. Privacy and data-protection questions, including those that would otherwise go to a Data Protection Officer, should be sent to hello@huaizhaoglobal.com. The controller aims to respond within 15 business days after receiving a complete request.

Personal information is not sent abroad for picnic features. The only overseas movement that may occur is the HTTPS request your device makes when a hosted legal page is opened, as described in the next chapter.

Opening a hosted legal page and what the host records

The hosting provider keeps HTTPS server logs when Zaro opens a legal page. The host can return this privacy policy after that fetch. The host can return the terms of use after a separate fetch. The host can return the children's notice after a separate fetch. Those logs may include technical connection details such as IP address, time of the request, and the page path needed to deliver the file. Lookbook stills, spoken remarks, and App activity are not placed in those logs.

No other recipient category is used for routine operation. If a competent authority issues a lawful demand covering records the controller actually holds, disclosure may occur only to the extent required.

How long mailbox letters and those logs are kept

Retention is compact and tied to the record that exists.

Local picnic files, including stills, spoken remarks, and working caches, remain on the handset until you delete them inside Zaro, clear Zaro's storage, or uninstall the application. The controller holds no copy of those files, so no remote timer applies to them.

Mailbox letters sent to hello@huaizhaoglobal.com are kept only for as long as needed to verify and answer the request, and then cleared unless a legal obligation requires a longer hold. The host keeps those logs for the period its own schedule allows, and then drops them.

If you ask the controller to erase personal information it actually received, write to hello@huaizhaoglobal.com. Local lookbook material is cleared by you on the device as described above.

Safeguards around records the controller actually holds

The controller applies brief, practical safeguards to mailbox correspondence and to the limited records that arrive through the legal-page path: access limited to staff who need the message to reply, encrypted transport for HTTPS connections, and retention aligned with the schedule above. No security measure is absolute. If you believe a letter you sent was mishandled, contact hello@huaizhaoglobal.com so the matter can be reviewed.

On-device lookbook files are protected by the Android storage controls on your handset. Revoking Camera or Microphone in Android Settings ends further capture from that sensor.

California residents under the CCPA and CPRA

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may give you additional rights regarding personal information.

Zaro does not sell personal information. Zaro does not share personal information for cross-context behavioural advertising. Because picnic stills and spoken remarks stay on the handset, the categories of personal information the controller may hold are limited to mailbox contents you choose to send and technical details in those logs when a legal page is opened. A California resident may email hello@huaizhaoglobal.com to confirm whether personal information was sold or shared, and to ask what categories were collected. That resident may also use the mailbox to opt out of selling. The controller aims to respond within 15 business days.

Virginia residents, with erasure, a portable copy, rectification, and access

If you are a Virginia resident, the Virginia Consumer Data Protection Act may apply. Zaro does not engage in targeted advertising and does not profile consumers in furtherance of decisions that produce legal or similarly significant effects. A Virginia reader can write to hello@huaizhaoglobal.com and refuse a sale.

For personal information the controller actually holds, write to hello@huaizhaoglobal.com. The rights below are handled in this order.

Erasure: you may ask that mailbox records received by the controller be erased, subject to legal retention duties. Local picnic files are erased by clearing storage or uninstalling Zaro on the handset.

Portability: a portable copy of what the controller holds may be requested in a usable electronic form where that is feasible.

Rectification: you may request correction of a record that is inaccurate or incomplete. The record must be personal information the controller holds. State what should be corrected and, where helpful, supply the accurate value.

Access: you may ask whether the controller holds personal information about you and request a summary of what was received.

Identity may be verified before sensitive records are released. The controller aims to respond within 15 business days. Because Zaro keeps no hosted identity, these rights concern mailbox letters and those logs, not a remote picnic profile.

Adults, children, advertising identifiers, and later editions

Zaro is for adults who are 18 or eighteen years of age or older. Minors must not use Zaro. Zaro was not designed for children. Store copy is not marketed toward children. In-app screens are not aimed at children. Zaro offers no child-focused features. The controller does not knowingly collect personal information from anyone under eighteen. Children's sensitive identifiers stay outside Zaro's collection. Biometric data of a child stays outside that collection too. A parent or guardian who learns that a child opened Zaro may email hello@huaizhaoglobal.com to access that mail, to erase it, and to stop processing of what reached the mailbox.

Zaro does not read, collect, or use an advertising identifier (including AAID) on the handset.

A fruit-board still on this listing carries no in-app price.

Neijiang Huaizhao E-commerce Co., Ltd. does not sell personal information. It also does not sell personal data. A reader may email hello@huaizhaoglobal.com with an opt-out of selling, or with a separate do-not-sell instruction.

When this notice is updated, the revised text is published with a new effective date. Continued use of Zaro after the updated notice is posted means the current edition applies. Questions about any edition may be sent to hello@huaizhaoglobal.com.