privacy.html

<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="description" content="Privacy Policy for Zero State LLC websites, apps, and related services.">
<meta name="theme-color" content="#F4F0E8">
<title>Privacy Policy — Zero State</title>
<link rel="canonical" href="https://zer0state.com/privacy.html">
<link rel="icon" href="assets/zero-state-mark.svg" type="image/svg+xml">
<link rel="stylesheet" href="styles-light.css">
</head>
<body>
<a class="skip-link" href="#main">Skip to content</a>

<header class="site-header" data-header>
  <div class="shell nav-wrap">
    <a class="brand" href="index.html" aria-label="Zero State home">
      <img src="assets/zero-state-mark.svg" alt="" width="34" height="34">
      <span>ZERØ STATE</span>
    </a>
    <button class="menu-button" type="button" aria-expanded="false" aria-controls="site-nav" data-menu-button>
      <span class="sr-only">Toggle navigation</span><span></span><span></span>
    </button>
    <nav id="site-nav" class="site-nav" aria-label="Primary" data-nav>
      <a class="nav-cta" href="contact.html">Begin here</a>
      <a href="work.html">Work</a>
      <a href="marketing.html">Products</a>
      <a href="about.html">About</a>
    </nav>
  </div>
</header>

<main id="main">
  <section class="page-hero shell">
    <p class="eyebrow">Legal</p>
    <h1>Privacy Policy</h1>
    <p class="hero-lede">How Zero State LLC handles personal information across our website, apps, and related services.</p>
  </section>

  <section class="section shell longform">
    <p><strong>Effective date:</strong> August 7, 2026</p>
    <p><strong>Last updated:</strong> August 11, 2026</p>
    <p>This Privacy Policy describes how <strong>Zero State LLC</strong> (“Zero State,” “we,” “us,” or “our”), a company organized in the United States, collects, uses, shares, and protects information when you use our websites, mobile applications, and related services (collectively, the “Services”).</p>
    <p>If you have questions or want to exercise privacy rights, contact us at <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a>.</p>

    <h2>1. Scope</h2>
    <p>This policy covers:</p>
    <ul>
      <li>Our public websites (including this site and product marketing pages)</li>
      <li>Mobile apps we publish under Zero State LLC (for example consumer games and tools listed on our product pages)</li>
      <li>Communications you send us (email and other direct contact)</li>
    </ul>
    <p>It does not cover third-party websites, open-source community platforms, or app stores that host or distribute our software. Those services are governed by their own policies.</p>
    <p>App Store product pages also include Apple’s App Privacy “nutrition labels.” Those labels summarize data practices for a specific app version and complement this policy.</p>

    <h2>2. Information we collect</h2>
    <p>What we collect depends on how you interact with the Services.</p>

    <h3>2.1 Information you provide</h3>
    <ul>
      <li><strong>Contact and support messages.</strong> Name or handle (if you include it), email address, and the content of your message when you email us or otherwise contact support.</li>
      <li><strong>Business inquiries.</strong> Information you choose to share about partnerships, press, or collaboration.</li>
      <li><strong>Account or profile data (when offered).</strong> If an app offers optional accounts, sign-in, cloud save, or profiles, we may process identifiers and settings you provide for those features. Many of our apps are designed to work without creating a Zero State account.</li>
    </ul>

    <h3>2.2 Information from your device and use of apps</h3>
    <p>Depending on the app and platform permissions you grant, we or our service providers may process:</p>
    <ul>
      <li><strong>Device and technical data</strong> — device type, OS version, app version, language, time zone, coarse diagnostics needed to run the app</li>
      <li><strong>Usage and gameplay data</strong> — feature use, session timing, progress, settings, crash logs, and performance metrics used to improve stability and design</li>
      <li><strong>Purchases</strong> — if in-app purchases or subscriptions are available, purchase status and transaction identifiers processed through Apple or other store platforms (we do not receive your full payment card number)</li>
      <li><strong>Advertising identifiers</strong> — only if a specific app uses advertising or measurement SDKs and you have not limited ad tracking; many apps do not use personalized advertising</li>
    </ul>
    <p>Where an app stores progress primarily on device, that data may remain local unless you enable cloud sync, backups, or similar features.</p>

    <h3>2.3 Website visitors</h3>
    <p>This marketing website does not currently provide account registration forms, on-site analytics pixels, advertising trackers, or marketing cookies that we control. The site is hosted on GitHub Pages. GitHub may process standard server and request logs (such as IP address, user agent, and timestamps) as part of delivering the site. See GitHub’s <a href="https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement">Privacy Statement</a>.</p>
    <p>If we add forms, analytics, or cookies later, we will update this policy before those features go live.</p>

    <h3>2.4 Information from third parties</h3>
    <ul>
      <li><strong>App platforms</strong> (for example Apple App Store) — limited developer reports, sales summaries, crash and performance aggregates, and review metadata</li>
      <li><strong>Infrastructure and tools</strong> — hosting, email delivery, crash reporting, or analytics vendors we engage, only as needed to operate the Services</li>
    </ul>

    <h2>3. How we use information</h2>
    <p>We use personal information to:</p>
    <ul>
      <li>Provide, operate, maintain, and improve the Services</li>
      <li>Respond to support requests and business inquiries</li>
      <li>Diagnose crashes, fix bugs, and monitor performance and security</li>
      <li>Process purchases and restore entitlements through platform stores</li>
      <li>Comply with law, enforce terms, and protect users, the public, and Zero State</li>
      <li>Communicate about updates, security notices, or policy changes when appropriate</li>
    </ul>
    <p>We do not sell your personal information. We do not use personal information to train public foundation models. We do not use the contents of private support emails for advertising.</p>

    <h2>4. Legal bases (where applicable)</h2>
    <p>If you are in a region that requires a legal basis for processing (for example the EEA, UK, or similar), we rely on one or more of the following as appropriate:</p>
    <ul>
      <li><strong>Contract</strong> — to provide the app or service you requested</li>
      <li><strong>Legitimate interests</strong> — security, product improvement, fraud prevention, and basic analytics that do not override your rights</li>
      <li><strong>Consent</strong> — where we ask for it (for example optional notifications or certain tracking on platforms that require opt-in)</li>
      <li><strong>Legal obligation</strong> — when we must retain or disclose information to comply with law</li>
    </ul>

    <h2>5. How we share information</h2>
    <p>We may share information with:</p>
    <ul>
      <li><strong>Service providers</strong> who process data on our instructions (hosting, email, crash reporting, analytics, payment platforms)</li>
      <li><strong>Platform operators</strong> such as Apple when you download, buy, or interact with apps through their stores</li>
      <li><strong>Professional advisors</strong> (legal, accounting) under confidentiality obligations when needed</li>
      <li><strong>Authorities or other parties</strong> when required by law, legal process, or to protect rights, safety, and security</li>
      <li><strong>Business transfers</strong> — if we are involved in a merger, acquisition, financing, or sale of assets, information may transfer subject to appropriate safeguards</li>
    </ul>
    <p>We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws, unless we update this policy and provide any required opt-out mechanism first.</p>

    <h2>6. Retention</h2>
    <p>We keep personal information only as long as needed for the purposes described above, including:</p>
    <ul>
      <li>Support correspondence — typically for a limited period after resolution, unless a longer period is required for legal or security reasons</li>
      <li>Diagnostics and logs — short rolling windows unless tied to an active incident</li>
      <li>Purchase and entitlement records — as needed to honor purchases and meet financial or tax recordkeeping requirements</li>
      <li>Legal holds — longer when reasonably necessary for disputes, investigations, or compliance</li>
    </ul>
    <p>On-device data is under your control and can often be removed by deleting the app or using OS settings; cloud-synced data is retained until you delete it or close an account (when accounts exist), subject to backup and legal exceptions.</p>

    <h2>7. Security</h2>
    <p>We use reasonable administrative, technical, and organizational measures appropriate to the nature of the data and our stage of product maturity. No method of transmission or storage is completely secure. Please use strong device passcodes and keep your OS and apps updated.</p>

    <h2>8. Children</h2>
    <p>Our Services are not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a> and we will take appropriate steps to delete it.</p>
    <p>Some games may be suitable for a general audience under platform age ratings. Those ratings are not an invitation for children under 13 to submit personal information to us.</p>

    <h2>9. International transfers</h2>
    <p>Zero State is based in the United States. If you use the Services from another country, your information may be processed in the United States and other countries where we or our providers operate. Those countries may have different data-protection laws than your home jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.</p>

    <h2>10. Your privacy rights</h2>
    <p>Depending on where you live, you may have rights to:</p>
    <ul>
      <li>Access personal information we hold about you</li>
      <li>Correct inaccurate information</li>
      <li>Delete personal information</li>
      <li>Export or receive a copy of information (data portability)</li>
      <li>Object to or restrict certain processing</li>
      <li>Withdraw consent where processing is based on consent</li>
      <li>Opt out of “sale” or “sharing” of personal information if we ever engage in those activities as defined by applicable law</li>
    </ul>
    <p>To make a request, email <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a> with “Privacy Request” in the subject line. We may need to verify your identity before fulfilling a request. You may use an authorized agent where law allows. You will not be discriminated against for exercising privacy rights.</p>
    <p><strong>California residents:</strong> We do not sell personal information. For categories of information, sources, purposes, and sharing, see the sections above. You may submit access or deletion requests as described here. If we process sensitive personal information in the future, we will disclose it and provide any required choice mechanisms.</p>
    <p><strong>EEA/UK residents:</strong> You may lodge a complaint with your local supervisory authority. You can also contact us first so we can try to resolve the issue.</p>

    <h2>11. Push notifications, tracking, and platform settings</h2>
    <p>Where an app uses push notifications, you can disable them in system settings. On Apple platforms, App Tracking Transparency and system privacy settings control certain advertising and tracking identifiers. Use your device’s Settings app to review permissions for each Zero State app.</p>

    <h2>12. Do Not Track</h2>
    <p>There is no consistent industry standard for browser Do Not Track signals. Our marketing website does not respond to DNT signals in a special way because we do not currently run first-party analytics on the site. App-level tracking follows platform rules and any in-app disclosures.</p>

    <h2>13. Third-party links and SDKs</h2>
    <p>Apps or pages may link to third-party content (documentation, stores, social profiles). We are not responsible for third-party privacy practices. If an app embeds third-party SDKs, those providers may process data under their policies; we will identify material SDKs in app disclosures or updates to this policy when they are introduced.</p>

    <h2>14. Changes to this policy</h2>
    <p>We may update this Privacy Policy from time to time. We will post the revised policy on this page with a new effective date. Material changes may also be communicated in-app or by other reasonable means when appropriate. Continued use of the Services after an update means you acknowledge the revised policy.</p>

    <h2>15. Contact</h2>
    <p>
      Zero State LLC<br>
      Privacy inquiries: <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a><br>
      Support: <a href="contact.html">Contact &amp; support</a><br>
      Products: <a href="marketing.html">Marketing &amp; products</a>
    </p>
    <p>United States</p>

    <h2>Appendix A — App-specific disclosures</h2>
    <p>Sections 1–15 describe what Zero State may collect across all of its products. Individual
    apps often collect far less, and several collect nothing at all. This appendix states what
    each released app actually does. <strong>Where an app is listed below, the entry governs for
    that app</strong> and matches the App Privacy label on its App Store product page.</p>

    <h3>Hexwire (iOS)</h3>
    <p><strong>Data collected: none.</strong> Hexwire is a single-player offline game. It makes no
    network connection, has no accounts or sign-in, no in-app purchases, no advertising or
    tracking identifiers, and no analytics, attribution, or crash-reporting SDKs. Save data,
    settings, and mission progression are stored on your device and never transmitted. Deleting
    the app removes them.</p>
    <p>Hexwire's music and sound effects were generated during development using ElevenLabs
    under a paid commercial licence held by Zero State. They ship as fixed files inside the app.
    <strong>Hexwire performs no AI processing while you play</strong> — it does not contact
    ElevenLabs or any other AI service, and no information about you is sent to any AI provider.
    Zero State holds all rights necessary to use and distribute this content.</p>

    <h3>Surveillance Survivor (iOS)</h3>
    <p><strong>Data collected: none.</strong> Gameplay is local to your device. No accounts, no
    tracking identifiers, and no third-party analytics. As with Hexwire, audio was generated
    during development and is bundled as static files; the app performs no AI processing at
    runtime.</p>

    <h3>Waykin (iOS)</h3>
    <p>Waykin uses device sensors to do its job, and that data stays on your device:</p>
    <ul>
      <li><strong>Location</strong> — only while an active walk is running and only with your
      permission, to measure distance, pace, and route progress. It is not used for advertising,
      not sold, and not tracked in the background when you are not walking.</li>
      <li><strong>Camera</strong> — only during an active AR session, to place the companion in
      the world. Frames are used live and are not stored or uploaded.</li>
      <li><strong>Health data</strong> — optional. Read-only, on-device enrichment during a walk.
      Waykin never requires it, and Demo Mode never asks for it.</li>
    </ul>
    <p><strong>None of this is transmitted to Zero State.</strong> Waykin has no remote analytics
    and no upload path. Map search and routing are handled by Apple's services under Apple's
    own privacy terms. You can deny any permission and still use the app, including a fully
    offline Demo Mode.</p>

    <h3>Beta and TestFlight builds</h3>
    <p>If you use a pre-release build through <strong>TestFlight</strong>, Apple may collect crash
    logs, device information, and any feedback you submit, and may share it with us as the
    developer. That collection is governed by
    <a href="https://www.apple.com/legal/privacy/" rel="noopener">Apple's Privacy Policy</a>
    rather than this one. It is Apple's collection, not ours, and it does not change what the
    apps themselves collect.</p>

    <h3>If an app is not listed here</h3>
    <p>Sections 1–15 apply. If you are unsure what a specific app collects, ask us at
    <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a> and we will tell you.</p>
  </section>
</main>

<footer class="site-footer">
  <div class="shell footer-grid">
    <a class="brand footer-brand" href="index.html">
      <img src="assets/zero-state-mark-inverse.svg" alt="" width="32" height="32">
      <span>ZERØ STATE</span>
    </a>
    <p>Software for a world that keeps changing.</p>
    <div class="footer-links">
      <a href="privacy.html">Privacy</a>
      <a href="terms.html">Terms</a>
      <a href="marketing.html">Products</a>
      <a href="contact.html">Support</a>
      <span>© <span data-year></span> Zero State LLC</span>
    </div>
  </div>
</footer>
<script src="script.js"></script>
</body>
</html>