This Privacy Notice explains how T-Minus Zero, operated by T-MINUS ZERO LLC, a Florida limited liability company (“T-Minus Zero”, “we”, “us”), collects, uses, and discloses information when you use our website, apps, and related services (the “Service”). The regional sections below explain additional rights where the relevant law applies.
For privacy choices and self‑serve requests (download or delete your account data), visit Privacy Choices.
The T-Minus Zero apps for iPhone, iPad, Apple Watch, and Android have no sign-in. When you first open an app, it creates a random installation ID, and the information the app sends, such as follows, alert settings, and Premium purchases, is associated with that installation rather than with a website account. Website account tools do not necessarily include information associated only with your native installation. For that information, or if you do not have a website account, contact us at support@tminuszero.app. Tell us which app or website feature your request concerns; do not send passwords, complete payment card details, or device security credentials.
Information We Collect
We collect information you provide, information collected automatically when you use the Service, and information from vendors that help run the Service.
- Website account information (if you create an account): name, email address, account identifiers, timezone, and authentication information (handled by our authentication provider). If you choose to sign in with Google, X, or Sign in with Apple where offered, we receive your email address and basic profile information made available by that provider.
- App installation information(apps): the random installation ID, kept in the device's secure storage and sent with app requests together with the platform, app version, and build type. We use it to keep your follows, alert settings, and Premium status with that installation and to protect the Service from abuse. On iPhone and iPad, the app also uses Apple's App Attest so we can check that requests come from a genuine copy of the app, and we keep the resulting device verification records.
- Notification and push information(if enabled): alert preferences, quiet hours, device registration data, push tokens or browser push subscription endpoints, platform, installation identifiers, app version, your device's time zone, user agent (website), and recent delivery status. On iPhone, this also includes the generic device model name (such as “iPhone”, not the name you gave your phone) and Apple push tokens for Live Activities and for Home Screen and Apple Watch widgets. The Android app does not send a device name.
- User preferences: followed launches, per‑launch notification settings, and related in-app alert controls.
- Location and AR information: with your permission, the website and apps use your device's location for personal visibility guidance, and the apps also use it for AR Pad alignment.
- To work out what you can see, the website or app sends the location you use (your current location or, in the apps, a viewing spot saved on your device) rounded to about 100 meters. Our server converts it to a grid square about 11 km across and keeps only that square and a code (hash) derived from it, in shared viewing, score, and weather records that are not linked to you, your installation, or your account. The rounded location itself is not stored.
- The apps keep your most recent location and any viewing spot you save (its exact coordinates and the address shown for it) in secure storage on your device, not on our servers. When you choose a viewing spot, the app uses it instead of your current location to work out what you can see, and sends it rounded, as described above.
- If you search for an address, city, or ZIP code in the apps, your device asks its own lookup service (Apple on iPhone and iPad, Google on Android) to find it, and to find the address at your viewing spot so the app can show it. We never receive what you type or that address, only the resulting location, used as described above.
- If you ask the apps to follow launches near you, your device works out the nearby launch state from the location you use. Only the resulting follow is sent to us.
- Apple Watch receives only the grid-square point from your iPhone, and sends that point to us to show your view on the watch.
- To look up local weather and alerts for that area, our servers send the center of the grid square, never your own location or an identifier, to the U.S. National Weather Service and Open-Meteo.
- AR features use the camera, motion sensors, compass, and location on your device. AR session telemetry sent to us includes a random session ID, the launch, device type and app settings, permission and tracking states, alignment quality and timing, and how accurate your location and compass heading were. It does not include your coordinates or any camera image, and these records are distinct from raw camera or microphone content.
- Saved places for visibility alerts(Premium, where available): if you save a place for visibility alerts, the app sends the place's coordinates once, and our server stores only its grid square (about 11 km across) and the code derived from it, together with the label you give the place (up to 20 characters), its type (such as Home), whether alerts are on, your alert settings, any per-launch choices, and a history of alerts sent. These records are linked to your app installation, or to your website account if the place belongs to one. Alert titles can include the label, so it passes through the push delivery services described below.
- Billing information: subscription status and store or payment-processor identifiers for App Store purchases (transaction and product identifiers), Google Play purchases (purchase token, product, and plan), and Stripe website purchases; payment card details are processed by the store or payment processor and are not stored in our database.
- Communications: feedback you submit and messages you send to our support inbox. Website feedback includes your email address, your message, and optionally your name. App feedback is a star rating, an optional message, and the app version; it includes an email address only if you add one to ask for a reply, within 7 days of sending the feedback.
- Email preferences: whether you opt in/out of marketing emails (if offered).
- Phone numbers: we do not collect phone numbers for SMS alerts. SMS is not offered in the current Service.
- Automatic data: IP address, device and browser information (such as user agent), and usage/diagnostic data (for example, server logs and limited feature telemetry). The apps send product interaction events, such as paywall views and purchase steps, linked to the installation ID, and crash, hang, and performance reports that carry no account, installation, or device identifier. Search terms are used to return results and are not stored by us, although they can appear in our hosting provider's request logs. Rate limits use a hashed form of your IP address rather than the address itself.
How We Use Information
- Provide and operate the Service (launch schedule, notifications, and account features).
- Work out launch visibility and weather for the area you choose, and send the visibility alerts you turn on.
- Authenticate users, verify that app requests come from a genuine app, prevent abuse, and secure the Service (including CAPTCHA).
- Process payments and manage subscriptions.
- Send service communications (verification, alerts you request, and account/billing notices).
- If we send marketing emails, we do so only if you opt in and we provide unsubscribe options.
- Respond to feedback and support requests.
- Debug, maintain, and improve reliability (operational logs and monitoring).
How We Disclose Information
We disclose personal information to service providers and vendors that process data on our behalf to provide the Service, such as:
- Supabase (authentication, database, and related infrastructure).
- Vercel (web hosting and delivery).
- Expo (push registration and notification delivery for the iOS and Android apps; it receives push tokens and notification content).
- Cloudflare (DNS/CDN/security services).
- Stripe (website payment processing and subscription management).
- Apple (App Store billing and subscription validation when you purchase through the iOS app; Apple Push Notification service for notifications, Live Activities, and widgets; App Attest device verification; address lookup from your device; and Apple Maps for launch-site maps in the iOS app).
- Google (Google Play billing and subscription validation where supported; Firebase Cloud Messaging and Firebase Installations, which deliver Android notifications; address lookup from Android devices; and the Google Maps SDK for launch-site maps in the Android app, which collects device and usage diagnostics and a pseudonymous identifier for Google).
- Resend (email delivery for service and account messages such as verification, billing notices, and support replies).
- Google Workspace (support email inbox and related business tools).
- Sign‑in providers (such as Google, X, and Sign in with Apple where offered) if you choose to use those login options.
- CAPTCHA providers (Cloudflare Turnstile or hCaptcha) if enabled for account protection.
- Embedded content providers (such as X, YouTube, or Vimeo) when you choose to load their posts or video players on the website.
We require service providers, contractors, and processors that handle personal information for us to protect it consistently with this Privacy Notice, process it only for permitted business purposes or our instructions, and maintain appropriate confidentiality and security safeguards.
We do not “sell” personal information. We do not “share” personal information (as those terms are defined under California law). Third‑party services you choose to use through the Service (such as Stripe checkout, an embedded X post, or embedded video) may collect information directly and use it according to their policies.
Launch videos in the apps work the same way. The apps show YouTube preview images, which load from YouTube when a launch page shows a video, so YouTube receives your IP address and device information even before you play it. Playing a video loads YouTube's player in the iOS app, or opens the YouTube app or your browser on Android. On iPhone and iPad, a video from another provider loads that provider's player in the app. Google and other video providers handle this information under their own terms.
To look up weather and weather alerts for an area, our servers send the U.S. National Weather Service and Open-Meteo the center of a grid square about 11 km across. These requests come from our servers, describe an area rather than a person, and include no identifier for you.
Privacy Requests Outside the United States
Your rights depend on the law that applies to your information. Contact support@tminuszero.app to make a request or complain about our handling of personal information. Describe your concern and the country whose rights you are exercising. We may need information to verify your identity and locate the relevant records. Applicable legal exceptions and response periods apply. An account is not required to contact us, and these contact options do not limit your right to approach a regulator.
Australia
Where the Australian Privacy Act applies, you may request access to your personal information and correction of inaccurate information. If you have a complaint, contact us first so we can investigate. If our response does not resolve it, or you have not received a response within 30 days, you can contact the Office of the Australian Information Commissioner (OAIC).
New Zealand
Where the New Zealand Privacy Act 2020 applies, you may request access to and correction of your personal information. The usual deadline for a decision on an access or correction request is 20 working days, subject to lawful extensions. If a requested correction is not made, you may ask for a statement of the correction sought to be attached to the information. You can raise an unresolved privacy concern with the New Zealand Office of the Privacy Commissioner.
United Kingdom
Where the UK GDPR applies, you may request access, correction, erasure, restriction of processing, or portability of your personal data, subject to the conditions for each right. You may object to processing based on legitimate interests and to direct marketing. Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. The usual response period is one month; lawful extensions and exceptions may apply. You may complain to the Information Commissioner's Office (ICO).
Singapore
Where Singapore's Personal Data Protection Act applies, you may request access to your personal data and information about its use or disclosure, request correction, and withdraw consent on reasonable notice, subject to applicable exceptions. Withdrawal may affect features that need the information; it does not prevent processing that the law permits or requires without consent. Contact us with a request or complaint. You may also approach the Personal Data Protection Commission (PDPC).
Canada
Depending on the federal or provincial privacy law that applies, you may request access to and correction of your personal information, ask about its use or disclosure, withdraw consent subject to legal or contractual restrictions and reasonable notice, and challenge our handling of it. PIPEDA access requests normally require a response within 30 days, subject to lawful extensions; provincial rules may differ. Where Quebec law applies, you may also request portability of eligible computerized personal information in a structured, commonly used format, subject to the law's conditions. You may contact the Office of the Privacy Commissioner of Canada or the relevant provincial authority, including the Commission d'accès à l'information du Québec.
European Union and European Economic Area
Where the EU GDPR applies, including in countries of the European Economic Area, you may request access, correction, erasure, restriction of processing, or portability, subject to the conditions for each right. You may object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal. The usual response period is one month, with extensions only where permitted by law. You may complain to a supervisory authority, including in the country where you live or work or where you believe an infringement occurred. The European Data Protection Board lists each country's authority, such as Ireland's Data Protection Commission (DPC) and the Netherlands' Autoriteit Persoonsgegevens (AP).
International Processing
Our operator is based in the United States. Using the Service may involve processing by the vendors described above outside your country of residence, including in the United States. Foreign courts or public authorities may have lawful access to information processed in their jurisdiction. Contact us for information about processing locations, recipients, and the safeguards applicable to your information. Using the Service does not, by itself, waive your local privacy rights or constitute consent to a transfer that requires separate consent under applicable law.
Cookies, Local Storage, and Similar Technologies
- We use cookies needed to keep you signed in and to secure the Service (session cookies).
- We use local storage for certain user experience features, such as remembering dismissed notices and app-install suggestions.
- The apps use the device's secure storage (the Keychain on iPhone and iPad, Android Keystore-protected storage on Android) for the installation ID, device credentials, your most recent location, and any viewing spot you save. On iPhone and iPad, Keychain items can remain on the device after the app is deleted and be used again if you reinstall it.
- Third‑party services you use through the Service (for example, Stripe checkout, embedded X posts, or embedded video) may set their own cookies or collect device data.
Sensitive Personal Information
Some data elements (such as account login credentials, payment information, and precise location) may be considered “sensitive” under certain privacy laws. We use sensitive data only as reasonably necessary to provide the Service (for example, to authenticate you, secure the Service, process payments through our payment processor, and show what you can see from where you are).
Data Retention
We retain personal information for as long as reasonably necessary to provide the Service, comply with law, resolve disputes, and enforce agreements. In general: website account/profile and preference data is retained until you delete your account; operational records may be retained for security, troubleshooting, and compliance; and payment records are retained by Stripe and may be retained by us as required by law.
- AR session telemetry is deleted after 90 days.
- App crash, hang, and performance reports are deleted after 30 days.
- Notification delivery history is normally deleted about 90 days after an alert is sent, and failed deliveries after up to 180 days.
- A saved place for visibility alerts is kept until you remove it in the app or ask us to delete it. Alert settings and per-launch choices are kept until you change them or ask us to delete them, and alerts sent follow the notification delivery history period.
- Installation records, push registrations, follows, Premium purchase records, product interaction events, and feedback have no fixed deletion schedule. We keep them while they are needed for the Service, or until you ask us to delete them, subject to legal requirements.
- Grid-square viewing, score, and weather records are not linked to you. Cached results are replaced as they expire, and we may keep the grid squares to prepare forecasts for those areas.
Native installation, notification, store-transaction, and diagnostic records are separate from website account records. Uninstalling the app, disabling notifications, or deleting a website account does not necessarily remove every server-side record associated with a native installation. Contact Support for a request concerning that information; applicable retention obligations and exceptions may limit deletion.
Your US Privacy Rights
Depending on your state of residence and the nature of our processing, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing (such as certain disclosures treated as “sale” or “sharing” of personal information under some laws).
- Access/know: request the categories and specific pieces of personal information we hold about you.
- Delete: request deletion of personal information, subject to certain legal and operational exceptions.
- Correct: request correction of inaccurate personal information.
- Portability: request a copy of your information in a portable format.
- Opt out: opt out of certain disclosures treated as “sale” or “sharing” under some state laws (if applicable).
- Limit: in some states, request limits on use/disclosure of “sensitive” personal information (if applicable).
We may need to verify your identity before fulfilling requests. Authorized agents may submit requests where permitted by law, subject to verification. We will not discriminate against you for exercising privacy rights. Some states provide a right to appeal a denial; include “Appeal” in your email subject if you want to appeal a decision.
If your browser sends a Global Privacy Control (GPC) signal (also called an opt‑out preference signal), we treat it as a request to opt out of “sale”/“sharing” where those concepts apply.
California Disclosures
If you are a California resident, this section provides additional disclosures for the past 12 months.
Categories of personal information collected
- Identifiers: name, email address, account identifiers, IP address, app installation IDs, device verification records, and push notification tokens and device identifiers (if enabled).
- Personal information categories listed in Cal. Civ. Code § 1798.80: name and email address.
- Commercial information: subscription status and transaction identifiers.
- Internet or other electronic network activity information: interactions with the Service (including paywall views and purchase steps in the apps), push notification subscription data, crash and performance reports, and limited feature telemetry (for example, AR session summaries such as permission status, device category, and session duration).
- Geolocation data: precise location only if you enable AR or location-dependent viewing features in the website or native app. It is used for personal visibility guidance and trajectory alignment; we do not store your precise location in our database unless we clearly say otherwise before collection. If you use visibility alerts, we store the grid square (about 11 km across) of each place you save.
- Audio, electronic, visual, or similar information: camera and motion/orientation access for AR features in the website or native app. In the native app, you may choose to save or share AR still captures, and AR trajectory beta video capture may include optional microphone audio through iOS ReplayKit. We do not upload, receive, or store camera images, AR captures, video, or microphone audio on our servers unless we clearly say otherwise before collection.
We do not “sell” or “share” personal information (as those terms are defined under California law).
We disclose the categories of personal information described above to service providers for business purposes, such as authentication and database providers, hosting and content delivery networks, push notification delivery services (such as Expo, Apple, and Google), map and address-lookup services, website payment processors, app marketplace billing providers (such as Apple and Google Play where applicable), communications providers (such as email delivery services), and support tools.
To exercise your California privacy rights, use Privacy Choices or email us at support@tminuszero.app.
We do not disclose personal information to third parties for their own direct marketing purposes.
Profiling
We do not use personal information to conduct profiling in furtherance of decisions that produce legal or similarly significant effects about you (as those terms are used in some state privacy laws).
Children
Public, signed-out launch information is available to people of any age. The Service is a general-audience service and is not directed to children under 13. Children under 13 must not create an account or directly submit personal information to us. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit and database access controls.
Contact
Legal operator: T-MINUS ZERO LLC.
Joshua Williamson, Owner and Privacy Contact, is responsible for privacy requests and complaints. He also serves as our privacy officer for New Zealand and data protection officer for Singapore where those laws apply.
Contact: support@tminuszero.app.
Changes
We may update this notice from time to time. Material changes will be communicated in the Service or through other appropriate channels.
