ZeroPilot Labs Inc. · Last updated July 31, 2026
Who we are. Pros We Know is operated by ZeroPilot Labs Inc. ("we"). This policy explains what we collect and how we use it.
What we collect. (1) Account data: your name, your email address (sign-in is a one-time code sent to it — there is no password), and optionally your phone number. (2) Content you create: providers you save, experiences, notes, and photos. (3) Usage analytics: in-app events (e.g. saves, searches, invites) used to improve the product.
Contacts. If you allow contact scanning, matching runs on your device; only the name, company, and business email domain fields of contacts you have shared with the app are sent to our server transiently for classification and are not stored. A contact becomes stored data only when you explicitly save it as a provider.
Finding people you know. Your phone turns each contact's number and email into a scrambled code before anything leaves your device. We never see the numbers, addresses or names themselves — only the codes. If a code matches a member, we note privately that you both ran this check. The other person is told nothing at this point: no request, no notification. You are connected only when they run the same check and match you back, so you each already had the other in your phone. One person having your details never connects you on its own.
Codes that don't match anyone yet. People join at different times. If a code matches nobody today, we keep it, because the person it belongs to may join next month — without that, whoever joined first could never be connected to whoever joined second. The codes we keep are scrambled a second time using a key we store separately, so they can't be turned back into a phone number or email. They can never connect you to someone on their own: the other person still has to have you in their phone too. We delete a code as soon as it finds its match, and after 120 days if it doesn't. Delete your account and we erase both the codes you contributed and any code others hold for your number or email.
Calendar. If you turn on the optional calendar scan, it runs on your device to spot trade appointments; only the details of events you confirm are sent to our server, and only when you save them as a provider. We never read or store your calendar wholesale.
Location. We do not track your location. "Nearby" search results are biased using the approximate centre of the pros you have already saved (or a coarse coordinate if you opt in to sharing location); a single approximate coordinate may be sent to our map provider to order results. The device location permission is used only to place a map on a provider you open.
Notifications. Warranty and service reminders are scheduled as local notifications on your device from your own notes. Nothing about them is sent to our server, and we do not use push notifications.
What other members see. Providers you save are private by default. If you share your pros with a connection, they see the providers you chose to share, attributed to you. Separately, a search result may show an unattributed count — for example "3 people keep them in their own pros" — aggregated across all members. That count never names anyone, is only ever shown once at least two people independently qualify, and you can exclude any provider from it by marking it private.
Pro Card (for pros). If you are a service professional and choose to publish a Pro Card, the business details you enter (name, trade, phone, email, website, service area) become publicly viewable to anyone with your card link or QR code, and the licence badge is verified against public registries. This is the only feature that makes any of your information public, it is entirely optional, and you can revoke the card at any time in Settings.
Sharing model. Everything is private by default. Providers you explicitly share are visible only to connections you approve (or, in anonymized form, to their connections). Your notes, prices, and photos are never shared at any level. Disconnecting removes access in both directions immediately.
Third-party services. Sign-in is a code we email you; no third-party identity provider is involved. Business search and map data are provided by Apple Maps. Contact classification uses Google's Gemini API (transient processing). Business logos are fetched from Google's public favicon service, which receives only the business's website domain — never your identity or any of your data. Licence badges are matched against public government registries (e.g. the Electrical Safety Authority, the Technical Standards & Safety Authority, provincial health colleges, and municipal business-licence data).
Selling data. We do not sell your data. Your trusted network is never sold, and trust rankings cannot be bought.
Deletion. Delete your account in Settings at any time; your data (including anything you shared) is removed immediately. You can export your data from Settings first.
If you live in the United States. These rights apply wherever you are, and several US states — California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others — give you a legal right to them. You can know what personal information we hold about you and where it came from; get a copy, exported from Settings; correct it; and delete it, which you can do yourself in Settings and which removes it immediately rather than on a schedule. You may appeal any decision we make on such a request by replying to our response. We will never treat you differently for exercising any of this — no reduced service, no different pricing.
We do not sell or share your personal information, as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding twelve months. We do not use it for cross-context behavioural advertising and we do not disclose it to data brokers. There is no “Do Not Sell or Share My Personal Information” link on this page because there is nothing to opt out of. We also do not knowingly collect personal information from anyone under 16.
Sensitive information. We do not collect or use sensitive personal information as California defines it — no precise geolocation beyond the coarse area you choose to search in, no government identifiers, and no health, biometric, racial, religious, sexual-orientation or union data. We do not read the contents of your messages or calls.
Making a request. Email support@prosweknow.ca from the address on your account, or delete your account in Settings and it is done at once. We respond within 45 days and will say so if we need longer. An authorised agent may act for you with written permission we can verify. We ask only for enough information to confirm the request is genuinely yours — and we do not create a new record of you in order to answer it.
Where your data is processed. Servers in Canada and the United States. If you are in the EU or UK, transfers rely on Standard Contractual Clauses; the same rights of access, correction, deletion, portability and objection apply, and you may complain to your local supervisory authority.
Changes. We will update this page as the product evolves; material changes will be noted in the app.
Contact. Questions or requests: support@prosweknow.ca
Pros We Know — the people you trust, for the things that matter.