Privacy Policy

Zuzli is a travel app operated by Nati Tal, an independent developer based in Israel. Registration is open to the public, and accounts should be created and managed by adults.

The service is currently free of charge. There are no subscriptions, purchases, payment obligations or financial commitments, and Zuzli does not process payments or store payment-card information. Features may change, and there is no service-level commitment or guarantee of continued availability. If paid options are introduced in the future, users will be informed before any charge applies.

For any privacy question or request, contact support@zuzli.app or use the support page.

Zuzli connects trip planning done in ChatGPT with a visual travel app. An itinerary that you plan in a chat can be created and updated in Zuzli, where you can see it on a map, day by day and stop by stop, while you travel.

You need an account to use the app. Sign-in is handled by our managed authentication service, using Google, Apple, or an email address and password. We store your user identifier, email address, and an optional display name, phone number, and avatar supplied by you or your sign-in provider. Passwords are handled by the authentication service and are never stored by the app itself.

A new account can use Zuzli as soon as sign-in succeeds. We store your account status, role, trip allowance, and the time you were last active. An account that is misused may be suspended.

We store the trip content you or your AI assistant create, which can include:

• Trip title, subtitle, city, country, dates, time zone and language
• Days, stops, addresses, coordinates, descriptions, notes and travel legs
• Cover images and links you add to a trip
• Your progress: which stops you mark as completed, skipped or currently active. These updates are saved as part of your trip; they do not verify your physical presence at a destination.

The app, sign-in, and trip data travel over encrypted HTTPS connections. Zuzli's servers use HTTPS when they contact Google Maps, Firebase Cloud Messaging, and the ChatGPT connection.

Application data is stored in a managed PostgreSQL database provided through Lovable Cloud (built on Supabase), and the app is served from Lovable's hosting infrastructure. Access to your rows is restricted at the database level so that, in normal use, only you, users you have shared a trip with, and the operator can read your trip data.

Zuzli exposes an MCP (Model Context Protocol) endpoint that ChatGPT and other compatible AI clients can connect to. The connection is authenticated: you must sign in and explicitly authorise the client before it can act on your behalf. ChatGPT accesses Zuzli data only after you have authenticated and requested an action.

When a user authorizes ChatGPT to perform a Zuzli action, the information required to complete that specific request may be exchanged between ChatGPT and Zuzli through the MCP integration. Information processed by OpenAI is governed by OpenAI's own terms and privacy policy. Zuzli does not receive your ChatGPT conversation history, and it does not automatically send your trips to OpenAI outside of the actions you request. You can revoke the connection from your AI client at any time.

We log AI tool activity — which tool was used, whether it succeeded, how long it took, any error message, and the trip involved — so that account limits can be enforced and problems diagnosed.

Zuzli uses Google Maps Platform to display maps and to look up place details, addresses, coordinates, photos, ratings, opening hours and travel routes between stops. Map tiles and related assets are loaded directly from Google in your browser, which means Google receives your IP address and technical request information. Place and route lookups are performed by our server using the place names and coordinates in your itinerary. Resolved place details are cached in our database so trips load quickly.

Some trips display images and text sourced from Wikipedia when a cover image is generated from a destination name.

On a live trip day, Zuzli asks your browser or, in the iOS and Android apps, your operating system for access to your device location while that screen is open. Your location is used only on your device to show your position and, when you enable follow mode, centre the map. Your device location is not transmitted to Zuzli's servers or third-party services, stored in databases or logs, or collected in the background. Zuzli does not maintain a history of your movements or use your device location for advertising.

Opening the iOS or Android app starts Google Firebase, which may register a device messaging identifier with Google before you allow notifications. That registration does not by itself send you notifications. We store the Firebase Cloud Messaging (FCM) push token, together with the device platform and language, and we deliver trip-related messages, only after you allow notifications. On iPhone, Firebase forwards messages through Apple Push Notification service. We do not collect advertising IDs. You can turn notifications off in the app settings or in your phone settings; signing out or deleting your account removes the token we stored.

In the mobile apps, stop photos may be cached on your device for up to 30 days so they load faster and work offline. This cache stays on your device and is not uploaded to us.

You can share a trip with another Zuzli user by entering their email address. If an account with that email exists, that user is granted access to the trip and can view it and update shared progress. Sharing reveals the trip content to that user; it does not give them access to your other trips or to your account. Trip owners can see who a trip is shared with and can remove access.

Zuzli does not use advertising or third-party tracking cookies. The app stores your sign-in session in your browser's local storage so you stay logged in. Third-party services such as Google Maps may set their own cookies when their content loads.

We do not run a third-party product analytics or advertising suite. Our hosting and database providers keep standard technical logs, such as request and error logs, which may include IP addresses. Within the app, administrative actions are recorded in an audit log, together with the AI tool activity described above.

Administrative access to user or trip data occurs only when reasonably necessary for support, security, abuse prevention, troubleshooting, service maintenance, or legal compliance. Zuzli is operated by a single developer, so support is handled by the operator.

When you write to support@zuzli.app, we store the name, email address, subject and message you submit so we can read and reply to your request. Please do not include passwords, access tokens, or other sensitive credentials in a support message.

• Account and trip data is retained while the account remains active, until a trip is deleted, or until a verified deletion request is completed.
• Shared-trip and progress data is retained while the relevant trip and permissions remain active.
• Support submissions and operational logs may be retained for a reasonable period for support, security, troubleshooting, abuse prevention and service maintenance.
• Limited information may be retained where legally or operationally necessary.

Deleting a trip in the app removes the trip and its related progress and sharing records.

You can delete your account at any time from your profile in the app (Delete account) or on the account deletion page. Deletion is immediate and removes your profile, trips you created, progress, shares, push tokens and your ChatGPT connection. Security, email-delivery and support logs may be kept for up to 90 days. If you cannot sign in, email support@zuzli.app and we will delete the account within 30 days.

Zuzli is not intended for children. Accounts should be created and managed by adults, who may of course plan family trips that include children.

This policy may be updated as the product changes. The date at the top of this page always reflects the most recent update.

For any privacy question or request, write to support@zuzli.app or use the support page.