Zero→1 Cookie & Tracking Policy

1. About This Policy

Zero→1 is operated by Founder Progress Ltd, trading as Zero→1 ("Zero→1", "we", "our", "us").

This Cookie & Tracking Policy explains how we use cookies and similar technologies when you use our websites, web application and mobile applications.

These technologies may include:

• cookies;
• browser storage;
• on-device application storage;
• software development kits;
• pixels;
• scripts;
• tags; and
• similar technologies that store information on, or access information from, your device.

We refer to these collectively in this Policy as tracking and storage technologies.

This Policy explains:

• which technologies we currently use;
• why we use them;
• which technologies require your permission;
• what information they may process;
• how long relevant information is retained;
• which providers are involved; and
• how you can change your choices.

This Policy should be read alongside our Privacy Notice, which explains more generally how Zero→1 processes personal information.

2. Who We Are

Founder Progress Ltd
trading as Zero→1

Company number: 17333996

Registered in England and Wales.

Email: support@zeroto1.co.uk

ICO registration reference: ZC213772

3. What Are Cookies and Similar Technologies?

Cookies are small files that websites can store on your device and access later.

Cookies are only one type of technology that can be used in this way.

Websites and applications may also use browser storage, application storage, software development kits, pixels, scripts and tags to provide functionality or understand how a service is being used.

For example, these technologies can be used to:

• keep a service functioning;
• remember preferences;
• maintain security;
• understand how people navigate a service;
• identify technical problems;
• understand whether features are useful;
• measure advertising performance; or
• understand whether an advertising campaign resulted in a visit or action.

Different technologies have different purposes and privacy implications.

We therefore distinguish between technologies that are necessary for the service and optional technologies used for purposes such as analytics or advertising.

4. Our Tracking Categories

Zero→1 uses or may use the following categories.

4.1 Necessary technologies

These are technologies necessary to operate, secure or provide functionality that you request.

They may be used for purposes such as:

• authentication;
• account security;
• maintaining a session;
• storing essential preferences;
• fraud prevention;
• providing requested functionality; and
• maintaining service reliability.

Where a technology is strictly necessary to provide a service you have requested, consent may not be required.

We limit necessary technologies to purposes that genuinely require them.

You cannot disable a technology through our consent controls where it is genuinely necessary to provide the requested service, although you may be able to control some technologies through your browser or device.

4.2 Analytics technologies

Analytics technologies help us understand how people use Zero→1 and how the service performs.

They may help us understand matters such as:

• page views;
• navigation;
• clicks;
• product events;
• feature usage;
• errors;
• technical performance; and
• aggregate patterns in how the service is used.

Our current optional analytics provider is PostHog.

Where we ask for your consent to optional analytics, those technologies do not operate unless you accept them.

4.3 Session replay

Session replay helps us understand how people interact with parts of the Zero→1 product so that we can identify usability problems and improve the founder experience.

We currently use PostHog session replay within the Zero→1 web, iOS and Android applications where the user has consented.

We do not currently use session replay on the public Zero→1 website.

Our session-replay implementation is configured to mask:

• form inputs;
• passwords;
• text;
• images; and
• Founder or AI content.

Session replay is designed to help us understand product interaction without recording the substance of your Founder Content or Founder Intelligence conversations.

4.4 Advertising and measurement technologies

We may use advertising or measurement technologies to:

• measure campaign performance;
• understand whether advertising resulted in visits or actions;
• attribute activity to campaigns;
• understand advertising audiences; and
• where enabled and lawfully permitted, support audience or remarketing functionality.

Potential technologies include Meta Pixel and relevant Google advertising or measurement technologies.

Where these technologies require consent, they will not be activated unless the relevant consent has been given.

Declining advertising technologies does not prevent you from using the core Zero→1 service.

5. Technologies We Currently Use

The following describes our current verified tracking implementation.

PostHog

Provider: PostHog

Status: Active

Purpose: Product analytics, service improvement and, within the authenticated applications where consent has been given, session replay.

Public website

PostHog is used for:

• page views;
• clicks; and
• heatmaps.

PostHog does not load on the public website before you accept analytics.

PostHog uses an analytics cookie and browser storage after acceptance.

Session replay is not used on the public website.

IP addresses are discarded at ingestion.

Browser-type information may be processed.

Analytics events are retained for up to 12 months.

Zero→1 web application

PostHog is used for:

• page views;
• product events;
• error information; and
• session replay where you have consented.

Optional PostHog analytics and session replay do not run before you accept them.

PostHog uses browser storage.

IP addresses are discarded at ingestion.

After sign-in, analytics may be associated with your Zero→1 user ID.

Session replay is configured to mask form inputs, passwords, text, images and Founder or AI content.

Analytics events are retained for up to 12 months.

Session replays are retained for up to 30 days.

Zero→1 iOS application

PostHog is used for:

• product events;
• error information; and
• session replay where you have consented.

Optional PostHog analytics and session replay do not run before you accept them.

PostHog uses on-device application storage.

IP addresses are discarded at ingestion.

Technical information may include device model.

We do not use advertising identifiers for PostHog analytics.

Session replay is configured to mask content, inputs, images and relevant device logs.

Analytics events are retained for up to 12 months.

Session replays are retained for up to 30 days.

Zero→1 Android application

The Android PostHog implementation follows the same model as the iOS application.

PostHog is used for:

• product events;
• error information; and
• session replay where you have consented.

Optional PostHog analytics and session replay do not run before you accept them.

PostHog uses on-device application storage.

IP addresses are discarded at ingestion.

Technical information may include device model.

We do not use advertising identifiers for PostHog analytics.

Session replay is configured to mask content, inputs, images and relevant device logs.

Analytics events are retained for up to 12 months.

Session replays are retained for up to 30 days.

Processing region

Our current PostHog analytics environment processes this data in the EU.

6. Anonymous Crash Reporting

A limited anonymous crash-reporting function may operate within our applications before you make an optional analytics choice.

Its purpose is to help us identify technical failures that affect the operation and reliability of Zero→1.

This crash reporting is not linked to your Zero→1 account.

We treat operational diagnostics separately from optional product analytics and session replay.

Where a storage or access technology is required for a necessary operational purpose, we assess whether an applicable legal exception permits its use without consent.

7. Google Analytics

Current status: Not currently active unless identified as active in the live technology information presented through our consent mechanism.

We may use Google Analytics in the future to understand website or product usage and measure performance.

Depending on its configuration, Google Analytics may process information relating to matters such as:

• pages viewed;
• interactions;
• events;
• browser and device information;
• approximate location information;
• referral information; and
• campaign information.

Before Google Analytics is activated, we will:

• determine its precise purpose and configuration;
• determine what information it will collect;
• configure appropriate privacy controls;
• establish an appropriate retention period;
• assess applicable international transfers;
• update the live technology register;
• update this Policy where required; and
• implement the required consent or objection mechanism.

Where we rely on consent, Google Analytics will not be activated contrary to the choice you have made.

8. Google Tag Manager

Current status: Not currently active unless identified as active in the live technology information presented through our consent mechanism.

We may use Google Tag Manager to manage scripts and tags used on Zero→1 websites.

Google Tag Manager is a tag-management system.

Its presence does not mean that every analytics or advertising technology capable of being deployed through it is active.

We will not treat the use of a tag manager as a way to bypass our privacy controls.

A new non-essential analytics, measurement or advertising tag must not be activated through Google Tag Manager unless:

• its purpose has been identified;
• the information involved has been assessed;
• the relevant provider has been identified;
• applicable privacy information has been updated;
• the appropriate consent category has been assigned; and
• the tag is technically prevented from operating before the required choice has been made.

Where Google Tag Manager is introduced, our consent configuration will determine which optional tags are permitted to operate.

9. Meta Pixel

Current status: Not currently active unless identified as active in the live technology information presented through our consent mechanism.

We may use Meta Pixel for purposes including:

• advertising measurement;
• campaign attribution;
• understanding whether advertising results in visits or actions; and
• where enabled and lawfully permitted, audience or remarketing functionality.

Depending on its configuration, Meta Pixel may process information about:

• pages or screens visited;
• interactions or events;
• browser or device information;
• referral or campaign information;
• purchases or conversion events; and
• identifiers used by Meta's advertising services.

Before Meta Pixel is activated, we will assess its precise configuration, data flows, purposes, retention and applicable international-transfer arrangements.

Where consent is required, Meta Pixel will not operate before Advertising consent has been given.

Declining Meta Pixel does not prevent you from using Zero→1.

10. Future Technologies

Zero→1 may change providers or introduce new technologies as the service develops.

We will not treat this Policy as blanket permission to introduce any tracking technology for any purpose.

Before introducing a materially new technology or purpose, we will consider:

• what the technology does;
• what information it stores or accesses;
• whether personal information is processed;
• why we need it;
• whether an applicable legal exception applies;
• whether consent is required;
• which third parties receive information;
• retention;
• international transfers;
• whether our privacy information needs updating; and
• whether existing consent covers the new use.

Where a new purpose is not covered by an existing consent, we will obtain a new choice where required before activating the technology for that purpose.

11. Your Choices

You have control over optional analytics and advertising technologies.

Public website

When you first visit the public Zero→1 website, we provide controls for optional tracking technologies.

You may:

• accept optional technologies;
• reject non-essential technologies; or
• manage your choices.

You can later change your choices using Cookie settings available from the website footer.

Zero→1 web application

Optional analytics and session replay are controlled through the consent choice presented within Zero→1.

You can change your choice through Settings.

iOS and Android

Optional analytics and session replay are controlled through the consent choice within the application.

You can change your choice through Settings.

Changing your choice applies to future optional collection.

Withdrawal does not affect processing that occurred lawfully before your choice was changed.

12. Our Consent Categories

Where appropriate, our consent controls distinguish between different purposes.

Necessary

Technologies required to provide, secure or operate functionality you request.

These are always active where genuinely necessary.

Analytics

Technologies used to understand use, performance and product interaction.

This currently includes optional PostHog analytics and, within the applications, PostHog session replay.

If Google Analytics is introduced for analytics purposes, it will be assigned to the appropriate analytics category.

Advertising

Technologies used for advertising measurement, attribution, audiences or remarketing.

If Meta Pixel or Google advertising technologies are introduced, they will be assigned to the appropriate advertising category.

We do not bundle optional advertising consent into acceptance of the Founder Terms or Privacy Notice.

13. Accepting and Rejecting Optional Technologies

Where consent is required, optional technologies must not be activated merely because you:

• visit our website;
• create an account;
• accept the Founder Terms;
• acknowledge our Privacy Notice; or
• continue browsing.

Consent is a separate choice.

Our consent mechanism is designed to provide a genuine choice between accepting and rejecting optional technologies.

Rejecting optional technologies does not prevent you from accessing the core Zero→1 service.

14. Changing or Withdrawing Your Choice

You can change your mind.

On the public website, use Cookie settings available from the footer.

Within the Zero→1 web, iOS and Android applications, use the relevant analytics controls in Settings.

Where consent is withdrawn, we stop future optional collection associated with that consent in accordance with the updated setting.

Withdrawal does not require deletion of information already processed lawfully before withdrawal.

Other rights relating to information already collected are explained in our Privacy Notice.

15. Consent Records

We may maintain records of your tracking choices so that:

• we can respect your preferences;
• we do not repeatedly ask the same question unnecessarily;
• we can evidence the choice made; and
• we can determine whether a new consent request is required following a material change.

These records may include information such as:

• consent category;
• consent status;
• consent wording or configuration version;
• date and time;
• relevant product surface; and
• subsequent changes or withdrawals.

We retain consent records only for as long as reasonably necessary for these purposes and applicable legal or evidential requirements.

16. Browser and Device Controls

Browsers and devices may provide additional controls that allow you to restrict or delete cookies, browser storage or other technologies.

Using these controls may affect how some features operate.

Browser or device controls do not necessarily replace the consent and privacy controls provided directly by Zero→1.

For the most reliable way to communicate your Zero→1 tracking choices to us, use our Cookie settings or application Settings where available.

17. Third-Party Services and Links

Zero→1 may contain links to websites or services operated by other organisations.

Those organisations may use their own cookies or similar technologies when you visit their services.

Their use of those technologies is governed by their own privacy and tracking practices.

A link from Zero→1 does not mean that we control the tracking technologies used on the destination service.

18. Children and Younger Founders

Zero→1 is intended for people aged 16 and over.

Because founders aged 16 and 17 may use Zero→1, we take their interests into account when designing tracking choices.

Optional tracking choices should be presented clearly and neutrally.

Declining optional analytics or advertising does not prevent a younger founder from using the core Zero→1 service.

We do not use acceptance of optional tracking as a condition of accessing the core service.

19. Changes to Our Tracking Technologies

Our use of technologies may change over time.

We may:

• add a technology;
• remove a technology;
• change provider;
• change a configuration;
• change a retention period; or
• use an existing technology for a new purpose.

We maintain a current record of the technologies deployed across our services.

Where a change materially affects the information previously provided to you or introduces a new purpose requiring consent, we will update the relevant information and obtain a new choice where required before using the technology for that purpose.

20. Changes to This Policy

We may update this Cookie & Tracking Policy when our technologies, services or legal obligations change.

The current version and effective date will be made available through Zero→1.

Material changes to our tracking practices will not be treated merely as administrative changes to this document.

Where required, we will update our consent mechanism and obtain a new choice before materially different tracking begins.

21. More Information

For more information about how Zero→1 uses personal information, including your data-protection rights, international transfers, retention and how to make a complaint, please read our Privacy Notice.

You can also contact:

Founder Progress Ltd
trading as Zero→1

Email: support@zeroto1.co.uk

ICO registration reference: ZC213772