Last updated: October 15, 2026
Welcome to Zupia, a product of Haputa LLC ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your house members, especially children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our house reward system application, including optional Premium features such as Zupini, our AI household assistant.
When you create an account, we collect:
To provide our services, we collect:
We may collect information about how you use our application, including:
Zupini is an optional AI assistant available only when a Premium household guardian enables it. Zupini is off by default and does not run for Free-tier households. When enabled, we may collect and process the following only as needed for features you use:
Guardians may optionally upload a PDF schedule (for example, a school, sports, or activity schedule) so Zupini can suggest draft activities. Schedule import is never required to use Zupia.
Uploaded PDFs are processed to generate draft activity suggestions, then deleted from Zupia after a successful import. Failed uploads may be kept for up to seven days so you can retry. We do not sell schedule data or use it for advertising.
Guardians may optionally connect their household with another household through an in-person QR or short-code exchange and mutual guardian approval. Trusted connections are in-person verified, not proof that a household is safe.
A trusted connection does not expose children, contact information, household rosters, quests, schedules, currency balances, or Energy usage from either household. Either household may revoke a connection; a block is private to the blocking household.
Guardians may optionally schedule playdates with connected households. Each participating guardian selects their own children and confirms a display name for the playdate roster. All households must accept the same frozen roster before the playdate is confirmed.
Children see only confirmed, child-safe playdate details (no exact address, instructions, or RSVP status). Playdate data is retained for 90 days after the event ends, then purged. Playdates are not included in AI weekly briefings.
Confirmed playdates may include a temporary shared message board for participating guardians and guardian-enabled children. The board is shared with all current participants; it is not a private conversation.
Post content is encrypted and retained for 30 days after the board closes (24 hours after the playdate ends, or immediately on cancellation). Pending or rejected post bodies are retained for 7 days after a decision or expiry.
A guardian may optionally link the Zupia Alexa skill to their Zupia household. When the skill is used, we process the information needed to provide the requested voice feature, including the linked account identifier, Alexa device identifier, request identifier, the requested command, and the date and time of the request. We do not use Alexa voice recordings; Amazon handles voice recognition and sends Zupia the resulting request.
Guardians may assign a shared Echo device to one child in their household. That assignment, the linked-account status, and security and audit records are stored so that Zupia can provide the correct household response, protect the service, and let guardians manage or revoke access. A child’s name, quests, reward requests, and balance information may be included in responses from an Echo assigned to that child.
We use the information we collect to:
Zupia is designed for families with children. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA). We do not:
All accounts must be created and managed by a parent or legal guardian. Children's accounts are linked to guardian accounts, and guardians have full control over their children's data.
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We implement appropriate technical and organizational measures to protect your personal information, including:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
You have the right to:
To exercise these rights, please contact us at the email address provided below.
We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.
When you remove a schedule import or disable Zupini, we stop using associated files and cease generating new draft suggestions from that import. Previously generated draft suggestions may remain until you delete them, remove the import, or delete your account, after which we delete or anonymize them according to this policy.
When you disconnect the Alexa skill, we revoke the active account-linking credentials. Voice-command audit records and resulting pending quest-completion or reward-redemption requests are retained with the related household records for security, support, and approval history, then deleted or anonymized according to this policy and applicable law.
For trusted household connections: consumed or expired connection codes are deleted within 24 hours; revoked connection metadata is retained up to one year; directional blocks remain until removed or the blocking account is deleted. Deleting your account revokes active connections and removes guardian references from connection records while preserving content-free history where required.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your information receives adequate protection.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy or our data practices, please contact us: