Privacy Notice

This Privacy Notice explains how T-Minus Zero (“T-Minus Zero”, “we”, “us”) collects, uses, and discloses information when you use our website, apps, and related services (the “Service”). This notice is written for a US audience and includes common state privacy rights.

For privacy choices and self‑serve requests (download or delete your account data), visit Privacy Choices.

Information We Collect

We collect information you provide, information collected automatically when you use the Service, and information from vendors that help run the Service.

• Account information: name, email address, account identifiers, timezone, and authentication information (handled by our authentication provider). If you choose to sign in with Google or X, we receive your email address and basic profile information from that provider.
• Notification information: phone number (if you opt into SMS), verification status, opt‑in/out timestamps, quiet hours, alert preferences, and SMS consent/compliance records (for example, action history and request metadata such as IP address and user agent).
• User preferences: per‑launch notification settings.
• Billing information: subscription status and Stripe customer/subscription IDs; payment card details are processed by Stripe and are not stored in our database.
• Communications: feedback you submit (such as your email address and message) and messages you send to our support inbox.
• Email preferences: whether you opt in/out of marketing emails (if offered).
• Push notification information (if enabled): push subscription endpoint and keys, plus user agent.
• Automatic data: IP address, device and browser information (such as user agent), and usage/diagnostic data (for example, server logs and limited feature telemetry).

How We Use Information

• Provide and operate the Service (launch schedule, notifications, and account features).
• Authenticate users, prevent abuse, and secure the Service (including optional CAPTCHA).
• Process payments and manage subscriptions.
• Send service communications (verification, alerts you request, and account/billing notices).
• If we send marketing emails, we do so only if you opt in and we provide unsubscribe options.
• Respond to feedback and support requests.
• Debug, maintain, and improve reliability (operational logs and monitoring).

How We Disclose Information

We disclose personal information to service providers and vendors that process data on our behalf to provide the Service, such as:

• Supabase (authentication, database, and related infrastructure).
• Vercel (web hosting and delivery).
• Cloudflare (DNS/CDN/security services).
• Stripe (payment processing and subscription management).
• Twilio (SMS delivery and phone verification). You can opt out of SMS alerts at any time by replying STOP (or reply HELP for support). We do not share mobile information (including opt‑in data and consent) with third parties or affiliates for marketing or promotional purposes.
• Resend (email delivery for service emails and optional email notifications).
• Google Workspace (support email inbox and related business tools).
• Sign‑in providers (Google and X) if you choose to use those login options.
• CAPTCHA providers (Cloudflare Turnstile or hCaptcha) if enabled for account protection.
• Embedded content providers (e.g., YouTube/Vimeo) if you choose to load embedded video.

We do not “sell” personal information. We do not “share” personal information (as those terms are defined under California law). Third‑party services you choose to use through the Service (such as Stripe checkout or embedded video) may collect information directly and use it according to their policies.

Cookies, Local Storage, and Similar Technologies

• We use cookies needed to keep you signed in and to secure the Service (session cookies).
• We use local storage for certain user experience features (for example, the iOS “Add to Home Screen” reminder cadence).
• Third‑party services you use through the Service (for example, Stripe checkout or embedded video) may set their own cookies or collect device data.

Sensitive Personal Information

Some data elements (such as account login credentials and payment information) may be considered “sensitive” under certain privacy laws. We use sensitive data only as reasonably necessary to provide the Service (for example, to authenticate you, secure the Service, and process payments through our payment processor).

Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, comply with law, resolve disputes, and enforce agreements. In general: account/profile and preference data is retained until you delete your account; operational records may be retained for security, troubleshooting, and compliance; and payment records are retained by Stripe and may be retained by us as required by law.

Your US Privacy Rights

Depending on your state of residence and the nature of our processing, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing (such as certain disclosures treated as “sale” or “sharing” of personal information under some laws).

• Access/know: request the categories and specific pieces of personal information we hold about you.
• Delete: request deletion of personal information, subject to certain legal and operational exceptions.
• Correct: request correction of inaccurate personal information.
• Portability: request a copy of your information in a portable format.
• Opt out: opt out of certain disclosures treated as “sale” or “sharing” under some state laws (if applicable).
• Limit: in some states, request limits on use/disclosure of “sensitive” personal information (if applicable).

• Self‑serve: use Privacy Choices to download your data or delete your account (if signed in).
• Email: send requests to support@tminuszero.app.

We may need to verify your identity before fulfilling requests. Authorized agents may submit requests where permitted by law, subject to verification. We will not discriminate against you for exercising privacy rights. Some states provide a right to appeal a denial; include “Appeal” in your email subject if you want to appeal a decision.

If your browser sends a Global Privacy Control (GPC) signal (also called an opt‑out preference signal), we treat it as a request to opt out of “sale”/“sharing” where those concepts apply.

California Disclosures

If you are a California resident, this section provides additional disclosures for the past 12 months.

Categories of personal information collected

• Identifiers: name, email address, phone number (if you opt into SMS), account identifiers, IP address, and push notification subscription identifiers (if enabled).
• Personal information categories listed in Cal. Civ. Code § 1798.80: name, email address, and phone number.
• Commercial information: subscription status and transaction identifiers.
• Internet or other electronic network activity information: interactions with the Service, push notification subscription data, and limited feature telemetry (for example, AR session summaries such as permission status, device category, and session duration).
• Geolocation data: precise location only if you enable AR features in your browser (used on-device; we do not store your precise location in our database).
• Audio, electronic, visual, or similar information: camera access for AR features (we do not record or store camera video/audio).

We do not “sell” or “share” personal information (as those terms are defined under California law).

We disclose the categories of personal information described above to service providers for business purposes, such as authentication and database providers, hosting and content delivery networks, payment processors, communications providers (SMS and email), and support tools.

To exercise your California privacy rights, use Privacy Choices or email us at support@tminuszero.app.

We do not disclose personal information to third parties for their own direct marketing purposes.

Profiling

We do not use personal information to conduct profiling in furtherance of decisions that produce legal or similarly significant effects about you (as those terms are used in some state privacy laws).

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit and database access controls.

Contact

Contact: support@tminuszero.app.

Changes

We may update this notice from time to time. Material changes will be communicated in the Service or through other appropriate channels.