Privacy Policy

Zero Drag is operated by:

• Cambridge Sound Technologies UK Limited
• Company number: 09408007
• Registered address: c/o Peters Elworthy and Moore, Salisbury House, Station Road, Cambridge CB1 2LA, United Kingdom
• Business address: St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom
• Support email: support@zerodrag.world

For privacy questions or data requests, contact: support@zerodrag.world

We may collect the following information:

Account information:

• name
• email address
• authentication and login details
• account status

Programme information:

• level and session progress
• session completion status
• before-session and after-session intensity scores
• replay and usage activity
• technical events needed to maintain the service

Billing information:

• paid access status
• payment status
• Stripe customer ID
• invoice and transaction references
• cancellation or refund status

We do not store full card details. Payments are processed by Stripe.

Support information:

• support messages you send us
• support category and issue type
• information needed to resolve account, billing, access, audio, progress, refund, cancellation, privacy, or technical issues

Technical and analytics information:

• device and browser type
• approximate location derived from technical data
• pages visited
• errors and performance data
• analytics events used to improve the product

Zero Drag works with emotional states and may involve personal reflection. We do not ask users to submit detailed personal histories, medical information, trauma narratives, diagnoses, or highly sensitive personal material to support.

If you choose to include sensitive information in a support request, we will use it only to respond appropriately, maintain safety boundaries, and manage the service.

Please do not send urgent, crisis, medical, psychiatric, or therapeutic material to Zero Drag support. Zero Drag support is not monitored as an emergency or crisis service.

We use personal information to:

• create and manage your account
• provide access to Zero Drag content
• track progress through levels and sessions
• save session completion and intensity scores
• process purchases, cancellations where applicable, invoices, refunds, and billing events
• provide customer support by email
• maintain safety guidance and product reliability
• improve the product, content, onboarding, and user experience
• detect and fix technical issues
• comply with legal, tax, accounting, fraud-prevention, and regulatory obligations

Where UK GDPR applies, we process personal information on the following bases:

Contract:

To provide the Zero Drag service, account access, programme access, billing, paid access, and support.

Legitimate interests:

To improve the product, maintain security, analyse usage, prevent fraud, resolve technical issues, and understand completion and outcome patterns.

Consent:

Where consent is required for optional analytics, marketing, or non-essential communications.

Legal obligation:

To meet tax, accounting, consumer protection, legal, and regulatory requirements.

Payments, paid access records, invoices, customer portal access, and payment method updates are processed through Stripe.

Stripe may process information such as your name, email address, billing address, payment method details, invoice history, paid access status, and transaction data.

Zero Drag does not store full payment card details.

We may use analytics tools such as PostHog and Vercel Analytics to understand how users move through the product, identify technical issues, measure completion, and improve the service.

Analytics may include events such as page views, session starts, session completions, intensity score submission, playback issues, checkout events, and support-related interactions.

Where required, non-essential analytics will be controlled through consent or privacy settings.

We may send service emails, including:

• account login or authentication emails
• purchase and paid access confirmations
• billing and cancellation notices where applicable
• support replies
• safety or service updates
• important changes to terms, privacy, or product access

Marketing emails, if used, will include an unsubscribe option.

We only share personal information where needed to operate the service, process payments, provide support, comply with law, or protect users and the platform.

Service providers may include:

• Supabase for account, authentication, and database services
• Stripe for payments, paid access records, invoices, and billing portal services
• Resend for transactional email
• Vercel for hosting
• Cloudflare for security, performance, and asset delivery
• PostHog and Vercel Analytics for product analytics

We do not sell personal information.

We keep personal information only for as long as needed for the purposes described in this policy.

Account, progress, and support records may be retained while your account remains active.

Billing and invoice records may be retained for legal, tax, accounting, and fraud-prevention purposes.

If you delete your account or request deletion, we will delete or anonymise personal data where we can, subject to legal and operational retention requirements.

Depending on your location, you may have rights to:

• access your personal information
• correct inaccurate information
• request deletion
• object to certain processing
• restrict processing
• request data portability
• withdraw consent where processing is based on consent
• complain to a data protection authority

To make a request, contact: support@zerodrag.world

To request account deletion, data access, correction, or privacy support, email: support@zerodrag.world

Please use the subject line: Privacy request

We may need to verify your identity before acting on the request.

We use reasonable technical and organisational measures to protect personal information, including authentication, access controls, secure hosting, encrypted transport, trusted payment processors, and limited access to operational data.

No online service can guarantee complete security. You are responsible for keeping your login access secure.

Zero Drag is intended for adults. It is not directed at children or young people under 18.

If we become aware that a child has created an account, we may delete the account and related data.

Some service providers may process data outside the United Kingdom or European Economic Area. Where required, appropriate safeguards are used for international data transfers.

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date.

For privacy questions, support requests, or data rights requests, contact: support@zerodrag.world