Zero→1 Privacy Notice

1. About This Privacy Notice

Zero→1 is operated by Founder Progress Ltd, trading as Zero→1 ("Zero→1", "we", "our", "us").

This Privacy Notice explains how we collect, use, store and share personal information when you interact with Zero→1.

It applies when you:

• visit our websites;
• create or use a Zero→1 account;
• use the Zero→1 Founder Operating System;
• participate in a Founder Journey;
• interact with Founder Intelligence;
• use Founder Memory;
• submit Founder Content;
• purchase access to Zero→1;
• access Zero→1 through a programme, partner or sponsor;
• use our mobile applications;
• contact us for support or other purposes; or
• otherwise interact with our services.

This Privacy Notice should be read alongside our Founder Terms, Cookie & Tracking Policy and AI & Founder Guidance Transparency Statement where applicable.

2. Who We Are

Founder Progress Ltd is the controller of personal information covered by this Privacy Notice where we determine why and how that information is processed.

Founder Progress Ltd
trading as Zero→1

Company number: 17333996

Registered in England and Wales.

Email: support@zeroto1.co.uk

Founder Progress Ltd is registered with the Information Commissioner's Office under registration reference ZC213772.

In some programme, partner or sponsored-access arrangements, another organisation may also process personal information about you for its own purposes.

Where relevant, we will explain how information is handled between Zero→1 and that organisation.

3. The Information We Collect

The personal information we collect depends on how you use Zero→1.

3.1 Account information

When you create or use an account, we may collect information such as:

• your name;
• email address;
• account identifier;
• login and authentication information;
• account settings;
• account status;
• legal acceptance records;
• programme or access-code information; and
• information associated with account security.

3.2 Founder Content

When you use the Founder Operating System, you may choose to provide information including:

• Mission responses;
• business ideas;
• customer and market information;
• business plans;
• commercial assumptions;
• decisions and reflections;
• evidence;
• documents;
• images;
• audio;
• video;
• text;
• notes; and
• other information you submit, create or upload.

We refer to this collectively as Founder Content.

Founder Content may contain personal information about you or other people.

You should only provide personal information about another person where you have an appropriate reason and right to do so.

3.3 Founder Intelligence interactions

When you interact with Founder Intelligence, we may process:

• your prompts and responses;
• information you provide during conversations;
• relevant Founder Content;
• contextual information used to provide guidance;
• AI-generated responses;
• feedback;
• evidence and Mission activity; and
• technical information relating to those interactions.

3.4 Founder Memory

Zero→1 may use Founder Memory to maintain relevant context about your founder journey over time.

Founder Memory may contain or be derived from:

• your responses;
• decisions;
• reflections;
• business information;
• Mission activity;
• evidence;
• Founder Intelligence interactions;
• progress;
• commitments; and
• other information you provide through Zero→1.

Founder Memory is designed to make the Founder Operating System cumulative and context-aware rather than treating each interaction as isolated.

Founder Memory may be supplemented and versioned as your thinking, evidence and decisions develop.

3.5 Programme, partner and sponsored-access information

If you access Zero→1 through a programme, institution, partner or sponsor, we may receive information such as:

• your name;
• email address;
• invitation details;
• access code;
• programme or cohort membership;
• organisation;
• eligibility or entitlement information; and
• other information required to establish or manage your access.

This information may come directly from you or from the organisation arranging your access.

Programme or sponsored access does not automatically give the organisation unrestricted access to your private Founder Content.

Where information about your participation, activity or progress is made available to an organisation, we will provide appropriate information about that visibility.

3.6 Purchase and transaction information

When you purchase Zero→1, we may process information including:

• the product or Founder Journey purchased;
• price;
• applicable taxes;
• currency;
• payment status;
• transaction reference;
• date and time;
• purchase channel;
• refund or dispute information; and
• records of purchase-specific contractual acknowledgements.

Payment-card information is generally processed directly by payment providers such as Stripe, Apple or Google rather than stored by Zero→1.

3.7 Technical and device information

When you use our websites, applications or services, we may process technical information including:

• IP address where technically received;
• device type or model;
• operating system;
• browser type;
• app version;
• device or application identifiers;
• security information;
• log information;
• dates and times of access;
• crash and diagnostic information; and
• information necessary to operate, secure and troubleshoot the service.

Where a provider receives an IP address as part of normal internet communication but we configure the service to discard it at ingestion, we do not use that IP address for PostHog analytics profiling.

3.8 Analytics and session-replay information

We currently use PostHog to help us understand how Zero→1 is used, identify problems and improve the founder experience.

On our public website, PostHog may collect information about page views, clicks and heatmaps.

PostHog does not load on the public website unless you accept analytics.

We do not use PostHog session replay on the public website.

Within the Zero→1 web application, PostHog may collect:

• page views;
• product events;
• error information; and
• if you have consented, session-replay information.

Within our iOS and Android applications, PostHog may collect:

• product events;
• error information; and
• if you have consented, session-replay information.

Session replay is configured to mask form inputs, passwords, text, images and Founder or AI content. It is designed to help us understand product behaviour and diagnose usability issues without recording the substance of your Founder Content or Founder Intelligence conversations.

IP addresses are discarded at ingestion for our PostHog implementation.

On the public website we may process browser-type information.

Within the authenticated web application, analytics may be associated with your Zero→1 user ID after sign-in.

Within our mobile applications, technical analytics information may include device model. We do not use advertising identifiers for PostHog analytics.

Our PostHog analytics data is processed in the EU.

Analytics events are retained for up to 12 months.

Session replays are retained for up to 30 days.

Optional PostHog analytics and session replay do not run unless you have accepted them.

3.9 Analytics, measurement and advertising technologies

We may introduce additional analytics, measurement and advertising technologies to understand how Zero→1 is used, measure the effectiveness of our communications and campaigns, improve our services and, where enabled, support advertising or remarketing.

These technologies may include:

• Google Analytics, for website or product analytics and measurement;
• Google Tag Manager, to manage and control analytics, measurement and advertising technologies deployed through our websites; and
• Meta Pixel, for advertising measurement, attribution and, where enabled, audience or remarketing functionality.

Not all of these technologies are necessarily active at any particular time or on every Zero→1 service.

Where applicable law requires consent before an analytics, advertising, pixel, tag or similar technology is activated or information is stored on or accessed from your device, we will ask for that consent first.

Our Cookie & Tracking Policy identifies the technologies currently in use, their purposes and the choices available to you.

3.10 Communications and support

If you contact us, we may process:

• your name;
• email address;
• correspondence;
• support requests;
• attachments;
• complaint information; and
• records of our response.

4. Where We Obtain Personal Information

We obtain personal information:

• directly from you;
• automatically when you use our services;
• from organisations providing programme, partner or sponsored access;
• from payment providers;
• from authentication and technical service providers;
• from app stores where relevant; and
• from other sources where you have authorised the transfer or where obtaining the information is otherwise lawful.

Where we receive personal information about you from another source, we provide privacy information as required by applicable data-protection law.

5. How and Why We Use Personal Information

We use personal information only where we have an appropriate legal basis.

5.1 Providing Zero→1

We process account information, Founder Content, Founder Intelligence interactions, Founder Memory, access information and related technical information to:

• create and operate your account;
• provide the Founder Operating System;
• provide Founder Journeys and Missions;
• maintain your progress;
• provide Founder Intelligence;
• maintain Founder Memory;
• provide requested functionality;
• manage programme or funded access;
• provide purchased services; and
• provide customer support.

Primary lawful basis: performance of our contract with you.

Some related processing may also be necessary for our legitimate interests in operating and supporting Zero→1.

5.2 Processing purchases

We process transaction and purchase information to:

• process and record purchases;
• provide paid access;
• calculate and administer payments and taxes;
• manage refunds or payment disputes;
• maintain accounting records; and
• evidence the contract and purchase.

Lawful bases: performance of our contract with you and compliance with legal obligations.

5.3 Founder Intelligence

We process relevant Founder Content, Founder Memory and interaction data to provide AI-assisted guidance and functionality requested through Zero→1.

Primary lawful basis: performance of our contract with you.

Where we process information for a separate service-improvement or research purpose, we will identify an appropriate lawful basis for that separate processing and provide any additional information or choices required by law.

Founder Intelligence recommends. Founders decide.

Founder Intelligence does not make business decisions on your behalf.

5.4 Analytics and product improvement

Where we ask for your permission before enabling optional analytics or session replay, we rely on your consent for processing that depends on that choice.

We may separately process limited technical and diagnostic information where necessary to:

• maintain service reliability;
• identify technical failures;
• protect the service;
• diagnose errors; and
• maintain security.

Where appropriate, we rely on our legitimate interests in maintaining a secure, reliable and effective service, subject to your rights and applicable law.

A limited anonymous crash-reporting function may operate before you make an optional analytics choice. It is not linked to your Zero→1 account.

5.5 Advertising and campaign measurement

If we introduce advertising or campaign-measurement technologies such as Meta Pixel or relevant Google technologies, we may use information to:

• understand whether advertising results in visits or actions;
• measure campaign performance;
• attribute interactions to marketing activity;
• understand audiences; and
• where enabled and lawfully permitted, support remarketing or audience functionality.

Where consent is required for these technologies, we will rely on your consent and will not activate them contrary to the choice you have made.

Declining optional advertising technologies will not prevent you from using the core Zero→1 service.

5.6 Security, fraud prevention and platform integrity

We process relevant account, technical and activity information to:

• protect accounts;
• detect and prevent fraud;
• investigate security incidents;
• prevent misuse;
• enforce platform rules;
• maintain system integrity; and
• protect Zero→1, founders and other people.

Lawful basis: our legitimate interests in operating a secure service and, where relevant, compliance with legal obligations.

5.7 Legal and regulatory obligations

We may process information where necessary to:

• comply with law;
• maintain legally required records;
• respond to lawful requests;
• establish, exercise or defend legal claims;
• comply with tax and accounting requirements; and
• cooperate with regulators or authorities where legally required.

Lawful basis: compliance with legal obligations and, where appropriate, our legitimate interests in protecting our legal rights.

5.8 Communications

We may use your contact details to send:

• service messages;
• security notifications;
• account information;
• purchase confirmations;
• changes to services or contractual terms;
• responses to support requests; and
• other communications necessary to operate your relationship with Zero→1.

Lawful bases: performance of our contract with you, compliance with legal obligations or our legitimate interests, depending on the communication.

Where we send optional direct marketing, we will comply with applicable marketing and privacy law and provide appropriate choices.

6. Artificial Intelligence

Zero→1 uses artificial intelligence as part of Founder Intelligence.

Relevant information may be processed using AI systems to provide functionality such as:

• structured founder guidance;
• Mission support;
• idea exploration;
• feedback;
• summarisation;
• identification of themes and patterns;
• business planning support;
• evidence review; and
• preparation of plans or documentation.

We may use more than one AI technology provider, and the providers and models used may change over time.

Where third-party AI providers process personal information on our behalf, we seek to put appropriate contractual, organisational and technical protections in place.

Founder Intelligence is intended to assist founder judgement rather than replace it.

AI systems may produce inaccurate or incomplete outputs.

Our AI & Founder Guidance Transparency Statement explains the role of AI within Zero→1 in more detail.

7. Automated Decision-Making

Founder Intelligence may analyse information, identify patterns and make recommendations.

However, Zero→1's operating principle is:

Founder Intelligence recommends. Founders decide.

We do not currently use Founder Intelligence to make solely automated decisions about founders that produce legal effects or similarly significant effects on them.

If this changes, we will update this Privacy Notice and provide any additional information and safeguards required by law before introducing that processing.

8. Who We Share Personal Information With

We may provide personal information to organisations that help us operate Zero→1.

8.1 Technology and infrastructure providers

Providers that support hosting, databases, cloud infrastructure, authentication, security, communications, monitoring and other technical functions.

8.2 AI technology providers

Providers that process information to enable Founder Intelligence and related AI functionality.

We may use more than one provider and may change providers or models as the service develops.

8.3 Payment providers

Providers such as Stripe, Apple and Google where required to process purchases, payments and related transactions.

8.4 Analytics, measurement and advertising providers

We currently use PostHog for optional analytics and session-replay functionality as described in this Privacy Notice.

PostHog analytics data used by Zero→1 is processed in the EU.

We may also use providers including Google and Meta for analytics, tag management, advertising measurement or related functionality where those technologies are activated.

Our Cookie & Tracking Policy identifies which technologies are currently active.

8.5 Programme and partner organisations

Where you access Zero→1 through an organisation, we may share limited information necessary to administer that relationship or provide agreed programme functionality.

We do not give programme organisations unrestricted access to private Founder Content merely because they funded, sponsored or arranged your access.

The information visible to an organisation depends on the applicable programme arrangement and product functionality.

8.6 Professional advisers

We may provide information to professional advisers such as lawyers, accountants, auditors and insurers where reasonably necessary.

8.7 Authorities and legal recipients

We may disclose information where required by law, court order or a lawful request from a regulator or public authority, or where reasonably necessary to establish, exercise or defend legal rights.

8.8 Business transactions

If Founder Progress Ltd is involved in a merger, acquisition, investment, reorganisation, financing or sale of all or part of the business, relevant information may be disclosed to appropriate parties subject to suitable confidentiality and data-protection safeguards.

We do not sell your personal information.

9. International Transfers

Zero→1 uses technology providers and operates services that may involve processing personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps required by applicable data-protection law.

Depending on the destination and circumstances, these may include:

• relying on applicable UK adequacy regulations;
• using recognised contractual safeguards;
• using the UK International Data Transfer Agreement or applicable UK Addendum where appropriate;
• carrying out required transfer-risk assessments; or
• using another lawful transfer mechanism.

Where required, we also consider whether supplementary contractual, organisational or technical measures are appropriate.

The fact that our current PostHog analytics environment is hosted in the EU does not mean that all providers used by Zero→1 process information exclusively within the UK or EU.

You can contact us at support@zeroto1.co.uk if you would like further information about safeguards applicable to a particular international transfer.

10. How Long We Keep Personal Information

We do not keep all personal information for the same period.

We retain information for as long as reasonably necessary for the purpose for which it was collected, taking account of:

• the nature of the information;
• the reason we process it;
• your continuing use of Zero→1;
• Founder Memory and the cumulative nature of your founder journey;
• contractual obligations;
• security and fraud-prevention needs;
• legal limitation periods;
• accounting and tax requirements;
• disputes or legal claims; and
• applicable legal obligations.

Founder Content and Founder Memory may be retained while your account remains active so that Zero→1 can maintain continuity across your founder journey.

For our current PostHog implementation:

• analytics events are retained for up to 12 months; and
• session replays are retained for up to 30 days.

Retention periods applying to any future Google Analytics, Meta Pixel or other analytics or advertising technology will be identified and governed before that technology is activated and reflected in our Cookie & Tracking Policy where appropriate.

If you delete your account, we will initiate our account-deletion process.

Account deletion does not necessarily result in immediate deletion of every record.

We may retain limited information where we have a lawful reason or legal obligation to do so, including appropriate:

• transaction records;
• tax and accounting records;
• contractual acceptance records;
• fraud and security records;
• records required to establish or defend legal claims; and
• information that must otherwise be retained by law.

Information that no longer needs to be retained will be deleted or anonymised in accordance with our retention processes.

11. Account Deletion

You can delete your Zero→1 account using the self-service Delete Account function in Settings.

Deleting your account begins the account-deletion process.

Where applicable, you may also contact us at support@zeroto1.co.uk about deletion of personal information.

Deletion is subject to the retention requirements explained in Section 10.

Deleting your account does not remove records that we are legally required or otherwise lawfully entitled to retain.

12. Your Data Protection Rights

Depending on the law that applies to you and the circumstances of the processing, you may have rights including:

Access: to request a copy of personal information we hold about you.

Rectification: to ask us to correct inaccurate or incomplete information.

Erasure: to ask us to delete personal information in certain circumstances.

Restriction: to ask us to restrict processing in certain circumstances.

Objection: to object to certain processing, including processing based on legitimate interests in appropriate circumstances.

Data portability: to receive certain information in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another organisation.

Withdrawal of consent: where processing is based on consent, to withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Rights relating to automated decision-making: where applicable, rights concerning solely automated decisions that produce legal or similarly significant effects.

These rights are not absolute and may depend on the circumstances and applicable law.

Your right to object

Where we process your personal information on the basis of our legitimate interests, you may have the right to object to that processing.

You also have the right to object at any time to the use of your personal information for direct marketing.

To exercise a privacy right, contact: support@zeroto1.co.uk

We may need to verify your identity before acting on a request.

13. Analytics, Measurement and Advertising Choices

We ask for your permission before enabling optional PostHog analytics and session replay.

You can decline without losing access to the core Zero→1 service.

On the public website, PostHog does not load unless you accept analytics.

You can change your choice using Cookie settings available from the website footer.

Within the Zero→1 web, iOS and Android applications, optional PostHog analytics and session replay do not run unless you accept them.

You can change your choice at any time through Settings.

Withdrawing consent does not affect processing that occurred lawfully before withdrawal. Your updated choice applies to future optional collection.

A limited anonymous crash-reporting function may operate before you make an analytics choice so that we can identify technical failures affecting the service. This information is not linked to your Zero→1 account.

If we introduce additional optional technologies such as Google Analytics or Meta Pixel, we will apply appropriate consent controls before activating them where required.

Where different technologies have materially different purposes, such as product analytics and advertising, we may provide separate choices for those purposes.

Declining optional advertising or analytics technologies will not prevent you from using the core Zero→1 service.

14. Children and Younger Founders

Zero→1 is intended for people aged 16 and over.

We do not intend Zero→1 for children under 16.

Founders aged 16 or 17 may create an account, use Zero→1 and purchase a Founder Journey, subject to applicable law.

We recognise that people aged 16 and 17 are still children for the purposes of relevant UK data-protection standards.

We therefore aim to explain privacy choices clearly and neutrally and to take the interests of younger founders into account when designing privacy-related features.

If you are 16 or 17 and have concerns about how your information is used, you can contact us at support@zeroto1.co.uk or discuss the issue with a parent, guardian or another trusted adult.

We separately assess the age-appropriate privacy and design safeguards applicable to Zero→1.

15. Security

We use organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include appropriate access controls, authentication, infrastructure safeguards, monitoring and controls designed to limit unnecessary collection or exposure of information.

For example, our current session-replay configuration is designed to mask form inputs, passwords, text, images and Founder or AI content.

No online service can guarantee absolute security.

You are responsible for keeping your account credentials secure and should contact us if you believe your account or information may have been compromised.

16. Cookies, Analytics, Pixels, Tags and Similar Technologies

Our websites and applications may use technologies including:

• cookies;
• browser storage;
• on-device application storage;
• software development kits;
• pixels;
• scripts;
• tags; and
• similar storage or access technologies.

Some technologies are necessary to operate, secure or maintain the service.

Others may be used, subject to appropriate controls, for:

• analytics;
• product improvement;
• measurement;
• attribution;
• advertising; and
• remarketing.

We currently use PostHog as described in this Privacy Notice.

We may also use technologies including Google Analytics, Google Tag Manager and Meta Pixel.

Google Tag Manager is a tag-management technology that may be used to control deployment of other analytics, measurement or advertising technologies. Its presence does not mean that every technology capable of being deployed through it is active.

Where applicable law requires consent before a non-essential technology is used, we will obtain that consent and provide appropriate controls for withdrawing or changing it.

Our Cookie & Tracking Policy identifies the technologies currently active, their purposes, applicable retention information and the choices available to you.

17. Marketing

We may send you marketing communications about Zero→1 where permitted by law.

Where consent is required, we will ask for it.

Where applicable law permits us to send certain communications without prior consent, we will provide an appropriate opportunity to opt out.

You can unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of marketing does not prevent us from sending necessary service communications such as:

• security messages;
• purchase confirmations;
• account notifications;
• important product notices; or
• contractual or legal information.

Advertising technologies and marketing communications are separate choices. Unsubscribing from email marketing does not by itself necessarily change your cookie or advertising-technology preferences, and changing advertising preferences does not necessarily unsubscribe you from email communications.

18. Providing Personal Information

Some information is necessary for us to enter into or perform our contract with you.

For example, we need sufficient account information to create and operate your account and sufficient transaction information to provide a paid Founder Journey.

If you do not provide information that is necessary for the service you request, we may not be able to create the account, provide the relevant functionality or complete the transaction.

Other information is optional.

Where information is optional, we aim to make that clear at the point it is requested.

Declining optional analytics or advertising technologies does not prevent you from using the core Zero→1 service.

19. Changes to This Privacy Notice

We may update this Privacy Notice as Zero→1 develops, our processing changes, providers change or legal requirements change.

The current version and effective date will be published through Zero→1.

Where a change materially affects how we use personal information, we will bring it to your attention where appropriate or required by law before the new processing begins.

We will maintain appropriate records of previous versions.

Introducing a new material use of personal information will not be treated merely as an administrative update to this Privacy Notice. We will assess the applicable legal basis, transparency and consent requirements before that processing begins.

20. How to Contact Us

For privacy questions, requests or concerns, contact:

Founder Progress Ltd
trading as Zero→1

Email: support@zeroto1.co.uk

ICO registration reference: ZC213772

21. Complaints

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to investigate.

You also have the right to complain to the Information Commissioner's Office.

Telephone: 0303 123 1113

Further information is available from the Information Commissioner's Office.

If you live outside the United Kingdom, you may also have the right to complain to the data-protection or privacy regulator responsible for your country or region.