docs(legal): per-app privacy disclosures + scope the Apache-2.0 statement

privacy.html

@@ -38,7 +38,7 @@ <h1>Privacy Policy</h1>
 
   <section class="section shell longform">
     <p><strong>Effective date:</strong> August 7, 2026</p>
-    <p><strong>Last updated:</strong> August 7, 2026</p>
+    <p><strong>Last updated:</strong> August 11, 2026</p>
     <p>This Privacy Policy describes how <strong>Zero State LLC</strong> (“Zero State,” “we,” “us,” or “our”), a company organized in the United States, collects, uses, shares, and protects information when you use our websites, mobile applications, and related services (collectively, the “Services”).</p>
     <p>If you have questions or want to exercise privacy rights, contact us at <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a>.</p>
 
@@ -169,6 +169,58 @@ <h2>15. Contact</h2>
       Products: <a href="marketing.html">Marketing &amp; products</a>
     </p>
     <p>United States</p>
+
+    <h2>Appendix A — App-specific disclosures</h2>
+    <p>Sections 1–15 describe what Zero State may collect across all of its products. Individual
+    apps often collect far less, and several collect nothing at all. This appendix states what
+    each released app actually does. <strong>Where an app is listed below, the entry governs for
+    that app</strong> and matches the App Privacy label on its App Store product page.</p>
+
+    <h3>Hexwire (iOS)</h3>
+    <p><strong>Data collected: none.</strong> Hexwire is a single-player offline game. It makes no
+    network connection, has no accounts or sign-in, no in-app purchases, no advertising or
+    tracking identifiers, and no analytics, attribution, or crash-reporting SDKs. Save data,
+    settings, and mission progression are stored on your device and never transmitted. Deleting
+    the app removes them.</p>
+    <p>Hexwire's music and sound effects were generated during development using ElevenLabs
+    under a paid commercial licence held by Zero State. They ship as fixed files inside the app.
+    <strong>Hexwire performs no AI processing while you play</strong> — it does not contact
+    ElevenLabs or any other AI service, and no information about you is sent to any AI provider.
+    Zero State holds all rights necessary to use and distribute this content.</p>
+
+    <h3>Surveillance Survivor (iOS)</h3>
+    <p><strong>Data collected: none.</strong> Gameplay is local to your device. No accounts, no
+    tracking identifiers, and no third-party analytics. As with Hexwire, audio was generated
+    during development and is bundled as static files; the app performs no AI processing at
+    runtime.</p>
+
+    <h3>Waykin (iOS)</h3>
+    <p>Waykin uses device sensors to do its job, and that data stays on your device:</p>
+    <ul>
+      <li><strong>Location</strong> — only while an active walk is running and only with your
+      permission, to measure distance, pace, and route progress. It is not used for advertising,
+      not sold, and not tracked in the background when you are not walking.</li>
+      <li><strong>Camera</strong> — only during an active AR session, to place the companion in
+      the world. Frames are used live and are not stored or uploaded.</li>
+      <li><strong>Health data</strong> — optional. Read-only, on-device enrichment during a walk.
+      Waykin never requires it, and Demo Mode never asks for it.</li>
+    </ul>
+    <p><strong>None of this is transmitted to Zero State.</strong> Waykin has no remote analytics
+    and no upload path. Map search and routing are handled by Apple's services under Apple's
+    own privacy terms. You can deny any permission and still use the app, including a fully
+    offline Demo Mode.</p>
+
+    <h3>Beta and TestFlight builds</h3>
+    <p>If you use a pre-release build through <strong>TestFlight</strong>, Apple may collect crash
+    logs, device information, and any feedback you submit, and may share it with us as the
+    developer. That collection is governed by
+    <a href="https://www.apple.com/legal/privacy/" rel="noopener">Apple's Privacy Policy</a>
+    rather than this one. It is Apple's collection, not ours, and it does not change what the
+    apps themselves collect.</p>
+
+    <h3>If an app is not listed here</h3>
+    <p>Sections 1–15 apply. If you are unsure what a specific app collects, ask us at
+    <a href="mailto:zer0state@zer0state.com">zer0state@zer0state.com</a> and we will tell you.</p>
   </section>
 </main>
 

products/hexwire.html

@@ -38,6 +38,7 @@ <h2>What it is</h2>
       <div>
         <p>HexWire is a tactical cyberpunk hex-grid RPG for iPhone and iPad.</p>
         <p>Power costs exposure. Four runner roles, authored missions, and a pressure-driven combat loop.</p>
+        <p class="product-loop"><strong>Signal → Power → Trace → Escalation → Lay Low → Tempo Tradeoff.</strong></p>
       </div>
     </div></div>
   </section>

terms.html

@@ -37,7 +37,7 @@ <h1>Terms of use</h1>
   </section>
 
   <section class="section shell longform">
-    <p><strong>Effective date:</strong> July 26, 2026</p>
+    <p><strong>Effective date:</strong> July 26, 2026<br><strong>Last updated:</strong> August 11, 2026</p>
 
     <h2>Scope</h2>
     <p>These terms apply to your access to and use of the Zero State website, operated by Zero State LLC in the United States.</p>
@@ -46,7 +46,9 @@ <h2>Informational website</h2>
     <p>This website presents Zero State, its philosophy, and its work. Product pages are parent-brand summaries and do not constitute product documentation, a product offer, a service-level commitment, or a promise that a product is available.</p>
 
     <h2>Intellectual property</h2>
-    <p>The source code in the public repository is available under the Apache License 2.0. That license does not grant permission to use Zero State, Balanced Aperture, or product names and marks except as the license permits for describing the origin of the work.</p>
+    <p>The source code for <em>this website</em> is published in its public repository under the Apache License 2.0. That grant covers the website repository only.</p>
+    <p>Zero State product software &mdash; including our applications, games, and the assets distributed with them &mdash; is <strong>proprietary</strong> and is licensed separately under the Zero State Proprietary License. It is not offered under the Apache License or any other open-source license unless a specific repository states otherwise in its own <code>LICENSE</code> file.</p>
+    <p>No license granted here permits use of the Zero State or Balanced Aperture names, product names, or marks, except as a license permits for describing the origin of the work.</p>
 
     <h2>No warranties</h2>
     <p>This website is provided for general informational purposes. To the extent permitted by applicable law, it is provided without warranties of any kind. Do not rely on this website as legal, financial, medical, or professional advice.</p>

work.html

@@ -93,7 +93,7 @@ <h3 class="portfolio-title">Surveillance Survivor</h3>
         <div class="portfolio-body">
           <span class="portfolio-meta">Tactical cyberpunk RPG</span>
           <h3 class="portfolio-title">HexWire</h3>
-          <p class="portfolio-status">Vertical slice · iOS</p>
+          <p class="portfolio-status">Stabilized vertical slice · CI-verified · device and App Store release gates remain</p>
         </div>
       </a>