#privacy
Personal data, GDPR, PECR and DPIAs.
2026
Sign-in without passwords, SMS or an auth vendor
Decision recordOn 16 October we wrote one sign-in standard for every app we run: an emailed code plus Apple, Google and Microsoft, our own revocable sessions, and no passwords, SMS codes or auth vendors. Here is why, and the linking rule that matters most.
Three things ZooLog refuses to do, with the numbers
Decision recordWe built photo recognition and left it switched off. Voice can write a keeper's note but never a drug dose. And there is no keeper leaderboard. Three refusals in a welfare app, and the numbers behind each one.