Legal
Privacy Policy
This policy describes the information Zellwork handles when you use the Zellwork app and the public pages on zellwork.app. It is written for the product as it works today.
Introduction
Zellwork lets you create a Personal Card and a Provider Card and share them with a public link. A saved Personal Card is available at zellwork.app/username. A saved Provider Card is available at zellwork.app/provider/username. People who have the link can open the card in a browser. The app is where you sign in, edit cards, share a link or QR code, and delete your account.
Zellwork does not sell personal information. Zellwork does not run an advertising network, and it does not operate a separate analytics product that tracks you across other websites. Some information is public because you put it on a card. Some information is used only to run the account, deliver the site, and review safety reports.
This Privacy Policy is effective October 1, 2026 and is version 1.0. It applies to the Zellwork mobile app and to the Zellwork website. It does not describe products Zellwork has not built.
Scope
This policy covers information associated with a Zellwork account, information published on a Personal Card or Provider Card, information submitted in a report, and information processed to deliver, secure, and moderate the service.
A card can include links to other websites, social profiles, phone numbers, email addresses, and maps. If you follow a link, call a number, or open a map, that other service has its own practices. Zellwork does not control those services.
Zellwork Plus is an access flag reserved for a later subscription. It does not control Home listing in the current product. Home listing is included for a saved Provider Card until subscriptions are available. Zellwork does not process card payments, and there is no checkout, recurring bill, Stripe payment, or Apple in-app purchase. A public card link does not require Plus.
Information you provide
You provide information when you create an account, choose a username, edit a card, upload an image, share a card, submit a report, or email Zellwork.
Account
Sign-in uses an email address and a one-time code sent to that email. There is no password, and the app does not offer Google, Apple, or other social sign-in. Zellwork stores the email on your account so it can sign you in and show the address in Settings. The email is not part of the public card.
You also provide a display name and a username. The username is the public handle in both card links. You can change the display name in the app. Username changes are limited by the app so a handle is not swapped constantly.
Personal Card
A Personal Card can include the name you display, a short bio, a profile image, a hero or banner image, social profile links, website and contact links, link titles, link images, and the visual settings for the card, such as colors, fonts, corners, and button styles. You choose what to put on the card. If a link or image is on the saved card, it is part of the card that the public page can show.
Provider Card
A Provider Card can include a display name, profession or category, slogan, years of experience, a starting price, a title and description, services and products with their own titles, descriptions, prices, durations, images, and external links, a gallery, contact and social links, languages, availability text, and location details you enter. Visual settings for the Provider Card are stored with the card as well.
The public Provider page shows the fields the public card is built to display. It does not publish every value that may exist in an older saved draft. In particular, a duplicate private “about” note is not shown on the public Provider Card. Email addresses used for sign-in are not shown on either public card.
Images and other files
You can upload images for a Personal Card or a Provider Card, including profile photos, cover or hero images, link images, service images, product images, and gallery images. Uploads are limited to image files. The storage used for card images accepts JPEG, PNG, WebP, GIF, HEIC, and HEIF, and rejects a file larger than 5 megabytes.
Card images are stored so the public page can load them. Anyone who has the image address can request that image. Zellwork does not claim that uploads are scanned for malware, re-encoded, or stripped of camera metadata such as EXIF. If a photo contains location or device details in its file, that metadata may remain in the file you uploaded.
You should upload only images you have the right to use. Do not upload a photo of someone else, or a photo that reveals a private address, if you do not want that image to be available with the card.
Location
Zellwork does not track your location in the background, and it does not build a location history. Location is used only when you choose to describe where a Provider Card offers work.
If you allow location while using the app, the app can read your current position to help fill a service area or address. The permission text in the app says location is used for service area. You can deny that permission and type a place instead. Denying it does not block the rest of the app.
When you search for a place, the app sends the search text, and in some cases a coordinate, to OpenStreetMap Nominatim to look up an address or area. That lookup is a request to a service Zellwork does not operate. The place you then save on the Provider Card can include a city, service area, street address, a location type, and latitude and longitude.
If that location is on the saved Provider Card, the public page can show it, including a map. Do not save a home address, a client address, or any other location you do not want on a public page. The app map on iOS uses Apple Maps to draw the place. The map provider receives the coordinates needed to show the map.
Information processed to run the service
When the app talks to Zellwork’s account system, standard connection data is processed so the request can be completed. That includes the network address of the request, the time of the request, and basic client information needed to keep a session. Zellwork uses this to sign you in, save cards, and reject requests that are not allowed.
When someone opens a public card or another page on the website, the site host receives ordinary request data, such as IP address, the page requested, and the browser type. That data is used to deliver the page and to limit abuse, including a short-term cap on how many reports one network can submit. Zellwork does not add an advertising pixel, and it does not install a separate analytics package on the public site.
The public site loads fonts from Google, including the typeface used on Zellwork pages and icon fonts, and it can load additional font families that a card owner selected. Your browser requests those fonts from Google. Google receives the technical data that comes with that request, such as IP address. Card images are loaded from Zellwork’s storage, which is hosted with the same infrastructure provider that holds accounts and card records.
A report stores the browser user-agent string sent with the report, up to a limited length. The report form does not ask for the reporter’s name or email. The rate limit uses the client IP for a short window and does not add that IP to the report record itself.
Reports and support messages
Anyone can report a public card from the card’s report action or from the Reporting & Safety page. A report includes the card username, the public link, a reason, and any details the reporter chooses to add. Reasons in the product are spam or scam, harassment or abuse, impersonation, illegal or unsafe content, and other.
Zellwork staff can read reports, mark them reviewed or resolved, hide a Personal Card or a Provider Card, and disable an account. A hidden card stays stored, but the public link stops returning it. A disabled account stops both public card links from returning a card. Those actions are for safety and operation. They are not a public ranking or a verification of the person.
If you email support@zellwork.com, privacy@zellwork.com, or legal@zellwork.com, Zellwork receives whatever you put in that message, including your email address and any attachments. Use those addresses for support, privacy requests, and legal notices. Do not send account passwords. There is no password to send.
How Zellwork uses information
Zellwork uses information to:
- Create and sign in to your account with an email code.
- Store and show the Personal Card and Provider Card you save.
- Publish those cards at their public links, and build the link preview that messaging apps request for a shared link.
- Show a QR code and a share sheet for a public card.
- List a saved Provider Card on Home. Home listing is included until subscriptions are available.
- Review reports and enforce the Terms of Service and Community Guidelines.
- Hide a card or disable an account when needed for safety, legal, or operational reasons.
- Delete account data when you delete the account, as described below.
- Answer support and privacy requests.
- Keep the service available and limit abuse, including repeated report submissions.
- Comply with law and respond to lawful requests.
Zellwork does not use card content to train a Zellwork artificial-intelligence model. The current product has no AI feature that reads your card for that purpose. Zellwork does not use your information for cross-site advertising.
What is public
Saving a card publishes it. There is no separate private mode that you can switch on for a saved card. If the Personal Card is saved, and Zellwork has not hidden that card or disabled the account, anyone with zellwork.app/username can view what the public page is built to show. The same is true for a saved Provider Card at zellwork.app/provider/username. Plus is not required for either link.
Home is a list inside the app of Provider Cards that are listed for Home. Listing is included until subscriptions are available. A card can be public by link and still be absent from Home if you remove it, or if Zellwork has hidden the card or disabled the account.
Sharing sends the public link. The app can show a QR code for that link and can use the system share sheet. Messaging apps and social apps often request a preview image and a short title from the public page. That preview is generated from the card photo you saved, such as the hero or cover image when the card uses that layout, or the profile image when it does not. The preview can be cached by the other app. Zellwork does not control how long Apple, Google, or another app keeps a preview.
You control what the public sees by editing or removing the content before you save, and by deleting the account if you want the cards removed. You cannot hide a saved card from its public link by yourself. Only Zellwork can hide a card or disable an account, and it does that for moderation, legal, or operational reasons. While a card is hidden or an account is disabled, the public link does not return the card. The account data remains stored until you delete the account or Zellwork deletes it under the Terms.
Unsaved edits that exist only as a draft on your device are not the public page. Once a save succeeds, the saved card is what the public link serves.
Service providers
The current product relies on these providers:
- Supabase provides the account system, the database that stores profiles and cards, file storage for card images, and the email delivery of sign-in codes. Sign-in codes are sent by that system to the email address you enter.
- The Zellwork website is hosted so public cards, legal pages, and reports can be served. The host processes ordinary web request data to deliver those pages.
- Google Fonts serves typefaces and icon fonts to the website.
- OpenStreetMap Nominatim answers place-search requests from the app.
- Apple Maps may render a location when you view it in the iOS app.
Zellwork does not use Stripe, Apple in-app purchase, or another payment processor in the current product, because it does not charge for Plus or for cards. If a payment product is added later, this policy will describe it before it collects payment information.
Authorized Zellwork personnel can access account and card information when needed to operate the service, answer a support request, review a report, hide or restore a card, disable or restore an account, or meet a legal duty. That access is not a public feature, and the app does not let one user read another user’s email or private account record.
Retention and account deletion
Zellwork keeps account and card information while the account exists. Drafts on a device stay on that device until the app clears them or you delete the app.
You can delete the account from Settings in the app. Deletion is meant to happen when you confirm it. There is no waiting period in the product. The deletion process:
- Deletes image files stored for that account in the Personal Card and Provider Card media storage.
- Deletes the Personal Card, the Provider Card, and the saved profile link rows for that account.
- Deletes the profile record, including the email, display name, and username stored there.
- Deletes the sign-in account, so the email code no longer signs in to that user.
- Clears the app’s saved Zellwork data on the device that completed deletion.
The public links stop working because the cards and the username record are gone. The username can be claimed later by a different account. It is not reserved for you after deletion.
Reports are not deleted outright. Zellwork keeps the report so it can still see that a link was reported, but it detaches the username, clears the free-text details, and clears the stored user-agent. The stored handle is replaced with a deleted-account marker that is not the public username. This is so a later account that takes the same username does not inherit the old report, and so the report no longer carries the optional description.
Deletion does not pull back copies that other people already saved, screenshots, or link previews cached by another app. It also does not delete mail you sent to Zellwork’s support or legal addresses. Those messages may be kept as ordinary correspondence. Server or host logs that are kept for security may retain an IP address or request record for the host’s ordinary log period. Zellwork does not promise that every log line disappears at the same moment as the account.
Deletion cannot be undone from the app. If the deletion fails, the account remains, and Settings shows an error so you can try again or email support.
A fuller description of the steps is on the Account Deletion page.
Security
Zellwork uses account authentication, access rules that limit each signed-in user to their own account records, and storage rules that limit card-image uploads and deletions to that user’s folder. Public pages are served through defined card responses rather than by opening the whole database to the browser. Privileged actions, including Plus, hiding a card, and disabling an account, are not available as self-service switches in the app.
These controls reduce risk. They do not make the service immune to misuse, interception, or a mistake in what you publish. A public card is visible to anyone with the link. Do not put information on a card if you need it to stay private.
If you believe an account or a card has been compromised, email support@zellwork.com. If you believe you have found a security weakness, email support@zellwork.com with enough detail to reproduce it, and avoid including live passwords or keys you do not need to send. There is no password on a Zellwork account.
Children
Zellwork is not directed to children under 13, and it does not knowingly collect personal information from children under 13. The product does not include a children’s mode, and it does not ask for a birth date.
If you are a parent and you believe a child under 13 has created an account or appears on a card, email privacy@zellwork.com. Zellwork will delete the account when it can confirm the request, and it will remove content that sexually exploits a minor.
The Community Guidelines prohibit sexual content involving minors and prohibit using a card to exploit a minor. Those reports are handled as safety matters.
Access, correction, and deletion
You can see and change your display name, username (within the app’s change limits), and card content in the app. You can delete the account in Settings. Those are the ordinary ways to access, correct, and delete information.
You can also email privacy@zellwork.com to ask what account information Zellwork holds, to correct an email or name you cannot change in the app, or to ask for deletion if you cannot open the app. Zellwork may need the account email to find the account. Zellwork will not ask you to send a password.
Depending on where you live in the United States, state law may give you rights to know, delete, or correct personal information, and to appeal a denial. Zellwork will honor a request that the applicable law requires. This policy is not a statement that every state law applies to every visitor, and it is not a certification of compliance with any named statute.
Public card content is information you chose to publish. A request to delete that content is handled by editing the card or deleting the account. Zellwork may decline a request that asks it to erase another person’s public card, a safety report that was scrubbed of the username, or a record it must keep for a legal duty. If a request is denied, Zellwork will say why when the law requires that explanation.
Zellwork does not offer a financial incentive tied to personal information, and it does not sell personal information as that idea is used in U.S. state privacy laws that ban sales. Zellwork also does not share personal information for cross-context behavioral advertising.
Where information is processed
Zellwork is offered from the United States. Account records, card records, and card images are processed on infrastructure used to run the service, which can include processing in the United States. Place search and font requests go to the providers named above, which operate their own networks.
If you use Zellwork from outside the United States, your information will be processed in the United States and in the places those providers operate. Zellwork does not claim a particular international transfer certification.
Who at Zellwork can see an account
Another Zellwork user cannot open your email, your sign-in code, or an unsaved draft. The public can see a saved card. Authorized Zellwork staff can see the account and the cards when they need to run the service, answer a support email, review a report, hide or restore a card, disable or restore an account, or respond to a legal request.
That access is limited to operating Zellwork. It is not a public profile of staff notes, and the product does not publish an internal comment thread about your account. This policy does not describe the internal tools, because those details are not needed to understand what happens to your information.
Link previews
When a public link is pasted into a messaging or social app, that app usually requests a preview from zellwork.app. The preview is an image and a short title built from the saved card. If the card uses a full-bleed photo, the preview uses that photo. If it does not, the preview uses the profile image. The preview is not a private copy. It is another view of the public card.
The other app may store the preview on its own systems. Deleting your account removes the card from Zellwork. It does not reach into Messages, Mail, or another product and delete the thumbnail they already fetched. Saving the card again gives those apps a new preview the next time they ask.
Changes to this policy
If Zellwork changes this policy, it will post the new version on this page with a new effective date, a last-updated date, and a version number. The previous version number is listed in the changes note at the bottom when a material edit is made.
If a change materially expands what a non-public field is used for, or starts a practice this policy currently says Zellwork does not do, such as selling personal information or adding a payment product, Zellwork will post the update before the new practice applies and, where the law requires a specific notice, provide that notice. Continuing to use Zellwork after the effective date means the updated policy applies to new use of the service.
Contact
Privacy requests: privacy@zellwork.com
Support: support@zellwork.com
Legal notices, including copyright notices: legal@zellwork.com
Website: zellwork.app
Zellwork has not published a street address on this page. Do not send identity documents unless a reply from one of the addresses above asks for a specific document.
Version history
Version 1.0, effective October 1, 2026. This is the first version written against the current Personal Card, Provider Card, Plus, reporting, and account-deletion behavior. It replaces the shorter placeholder page that previously used this address.