Zuruf Privacy Policy

Effective October 19, 2026

Zuruf is for small groups who want to use their Apple Watches like walkie-talkies. This policy covers the Zuruf app published by Excelano LLC and the Zuruf server it operates at zuruf.excelano.com. Zuruf is invite-only: nobody can use it without an invitation from the person who runs the server.

What the server stores

When you join with an invite, the server stores the display name you choose and creates an account for your watch. It keeps a token that identifies your watch to the server, stored only as a one-way hash, and the push notification token Apple assigns your watch, so it can tell your watch when a message arrives.

When you send a message, the server stores the recording, who sent it, who it is for, its length and when it was sent. It also records when each recipient plays it, so the sender can see who has heard it. Recordings and their records are deleted seven days after they are sent.

The server does not collect your location, your contacts, your health data, advertising identifiers or anything else from your watch, and it contains no analytics, advertising or tracking code.

Who can see your messages

A recording is served only to the people it was sent to: one person, or the members of a group. Everyone on the server can see the display names of everyone else on it, so that they can choose who to talk to.

Recordings travel between your watch and the server over an encrypted connection and are stored on the server unencrypted. The server's operator can therefore technically access them. Zuruf does not offer end-to-end encryption.

Apple and the hosting provider

To tell your watch about a new message, the server sends a notification through Apple's push notification service. The notification carries the sender's display name, the group name if there is one, and an identifier for the message. The recording itself never passes through Apple; your watch downloads it from the server.

The server runs on shared web hosting. Like any website, the hosting provider's web server keeps access logs, which include the IP address of each request.

Nothing is sold or shared with anyone else.

Deleting your data

Recordings delete themselves after seven days. To delete your account, choose Delete account in the app's Settings. That removes your account, your watch's registration and every message sent by or to you from the server, and erases what the app stored on the watch. You can also ask the person who invited you, or write to the address below.

Children

Zuruf is a general-audience app for small groups of people who know each other. It is not directed to children.

Changes and contact

If this policy changes, the new version will be posted here with a new effective date. Questions go to david.anderson@excelano.com.