Privacy Policy
This is an earlier version, in force until 22 September 2026. The current policy is at /privacy/.
Last updated: 21 September 2026
The short version. ZeroPercent exists for one thing: if a phone dies, gets lost, or is stolen, its owner can still reach the people they trust. To do that we store the minimum we need: your name, phone number, date of birth, battery level, and your chosen trusted contacts. We never track your location. We never show ads. We never sell your data.
1. Who we are
ZeroPercent is a trading name of OppBox Ltd, a company registered in England & Wales under the company number 17351386 ("we", "us"). We are the data controller for the personal information described in this policy, and we are registered with the UK Information Commissioner's Office under registration number C2039038. You can reach us at [email protected].
This policy covers the ZeroPercent iOS app, the website at zeropercentapp.com, and the rescue sign-in at zeropercentapp.com/rescue.
2. What we collect and why
| Data | Why we need it |
|---|---|
| Name | So your family and trusted contacts see who you are. |
| Mobile number (verified by SMS code) | Your number is your account. It is also the first factor of the rescue sign-in, and how trusted people recognise you. |
| Date of birth | Age rules: from 16 you can create an account on your own; at 13–15 you can only join a family a parent or guardian invites you into; under-13s can't have an account at all; and creating a family is 16+, and a family with anyone under 16 in it must include an adult (18+). Your date of birth is also part of the rescue sign-in. |
| Rescue PIN | The third factor of the rescue sign-in. Stored only as a salted cryptographic hash, and we cannot read it back. |
| Battery level and charging state | The core of the product: your family can see your battery is low before your phone goes dark. iOS shares this in 5% steps. |
| Trusted contacts (names, numbers, relationship) | Who you would reach from a borrowed phone. Visible only to you. Family members see only how many you have, never who. |
| Family membership and role | Connects guardians and members so battery visibility and approvals work. |
| Device info (model, OS version, app version) | Diagnostics and making sure battery reporting works on your device. |
What we deliberately do not collect: your location, your browsing, your messages outside a rescue session, your contacts book (unless you explicitly pick someone as a trusted contact), advertising identifiers, or any data for marketing profiles.
3. Rescue sessions
When your phone dies and you sign in from a borrowed phone, we verify your number, date of birth, and PIN, then show your trusted contacts with partly masked numbers. Messages you send are relayed through our telecommunications provider (Twilio). Your trusted contact sees the relay and your name, and the borrowed phone keeps nothing after the 15-minute session ends. Failed sign-in attempts are rate-limited and logged (identifiers only) to protect against guessing.
4. If someone added you as their trusted contact
You do not need a ZeroPercent account to be someone's trusted contact, and you may be reading this because you got a text from us. Here is what that means.
How we got your number. Somebody who knows you typed it into their own list of people they would want to reach if their phone died. We did not buy it, and we did not take it from anyone's address book: the app never uploads contacts.
What we hold about you. Your number, the name and relationship label the person gave you, whether you have confirmed, and, if you confirmed by texting us, the message you sent, shortened to sixty characters, plus the reference our phone provider gives it. We keep those two so we can show that you agreed, if we are ever asked to. That is all. You are not a user, you have no profile, and we do not build one.
What we do with it. Nothing at all until that person starts a rescue from a borrowed phone, and then we send you the message they asked us to send. We never message you to advertise anything.
Confirming. The person who added you asks you to text SAVED and a six-digit code to our number. The code is not a password and it protects nothing: it only tells us which person you are confirming for, so your reply cannot be counted as agreeing to hear from somebody else. If you reply with something else, or mistype it, that still counts: we will not leave you unable to reach them over a typo. Nobody will ever ask you for a code from another app, and we will not either.
Stopping. Reply STOP to any message from us and we will not text you again. Reply HELP for what we are. You can also ask us to delete your number by emailing [email protected], whatever the person who listed you does, and you do not have to give a reason.
5. Children and families
ZeroPercent has a minimum age of 13, and there is no version of it for under-13s. From 16 you can create an account by yourself. Between 13 and 15 you can't: a parent or guardian creates the family and sends you an invite code, and that invitation is the only way in. Anyone under 18 who joins a family as a member is approved by an admin of that family before their membership becomes active. Admins are 16 or over, and any family containing someone under 16 must also include an admin aged 18 or over.
Accepting an invitation into a family is how you agree to that sharing, and it covers whoever is in the family — including anyone added later, since admins can invite and approve new members. Leaving the family ends it.
We designed data visibility narrowly: admins see a member's battery and readiness. Never their trusted contacts, and never any location, because we don't collect it.
6. Who we share data with
We share personal data only with the service providers who run ZeroPercent, under contracts that limit what they may do with it:
- Supabase: our database and authentication provider (hosting in the EU).
- Twilio: sends SMS verification codes and relays rescue messages and calls. It acts as our processor for what we ask it to send, and, as a communications provider, as a controller in its own right of the routing data and content those messages create — see the note on text messages below.
- Cloudflare: hosts our website and rescue page.
- Google Workspace: runs our email. Anything you send to [email protected], including a request to see or delete your data, is held in it.
- Enjo: runs the chat window on our website, so you can ask a question without writing an email. It receives what you type into that chat and anything you choose to tell it about yourself. It is not on the rescue page, the member page or the invite page, and it is never given your account data: it only knows what you type. Do not put your Zero PIN, a verification code or a password into it, and we will never ask you to.
- Apple: App Store distribution and, if you subscribe to Pro, payment processing. We never see your payment details.
- Slack: an internal activity feed, so the people who run ZeroPercent can see it being used. It carries first names only, phone numbers masked where they appear at all, and counts: "Amy signed up", "someone added a trusted contact". It never carries a message you sent, a rescue's contents, or anyone's full number.
We do not sell or rent personal data to anyone. We do not share data with advertisers or data brokers. We may disclose data if the law requires it, or to protect someone's life or safety.
Mobile numbers and text message consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Twilio carries our messages as our processor: it sends what we ask it to send, on our instructions, and it may not market to you or sell your number. It is also a communications provider in its own right, and its terms make it a controller of the routing data a message creates — the numbers at each end, and the delivery logs — and of message content, which it may use to run and improve its network, prevent abuse, and meet its own legal obligations. That is Twilio's position and not something we choose, and it is one of the reasons we keep a rescue message as short as we do. How each kind of text works, and how to stop them, is set out in our text message terms.
7. How long we keep data
- Account data: for as long as your account exists.
- Battery history: rolling recent history only, enough to show "last known" honestly.
- Rescue sessions: session tokens expire after 15 minutes. Messages sent during a rescue, their delivery status, and any replies from your trusted contacts are held on our systems only for the session and deleted shortly after it ends; audit records keep identifiers only. Twilio, which carries these messages, keeps its own copy of each message and its delivery record for 30 days so that we can investigate a message that did not arrive, and then deletes it (its systems may take up to 30 days more to clear it). If the police or another authority lawfully asks us to preserve a record, or we learn it may be needed to protect someone's safety, we stop deleting that record until the matter is resolved.
- Sign-in codes: the text carrying your code is kept by Twilio for the same 30 days. We keep a scrambled (hashed) form of the number, never the number itself, for 30 days to stop the same number being sent codes over and over.
- Deleted accounts: deleting your account in the app (Settings → Delete account) permanently removes your profile, contacts, battery history, and family records. Backups age out within 30 days.
- Safety and security records: we keep a permanent log of the things that matter if something goes wrong later. A rescue was started. A message was relayed. Someone was approved into a family, or removed from one. A Zero PIN was changed. Each entry holds the time, the action, and internal reference numbers. It never holds what anyone said. We keep these indefinitely because they are what lets us answer, months afterwards, whether a number was reached with permission, or how somebody gained access to a family. When you delete your account, these entries stop pointing at you: the link to your profile is severed, so what remains records that something happened, not that you did it.
- Proof that a trusted contact agreed: when someone texts back to confirm, we keep their reply and our provider's reference for it, so we can show a phone network or a regulator that they agreed, and when.
8. Your rights
Under UK and EU data protection law you can ask us to access, correct, delete, or export your personal data, restrict or object to processing, and withdraw consent at any time. Most of this you can do directly in the app; for anything else email [email protected] and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
9. Security
All traffic is encrypted in transit. Every database row is protected by row-level security so users can only ever read what this policy says they can. Rescue PINs are stored as salted hashes. Rescue sign-in gives identical responses for every kind of failure, so an attacker learns nothing about which detail was wrong.
10. International transfers
Our primary hosting is in the European Union. Where a provider processes data outside the UK/EU (for example Twilio routing an SMS), we rely on that provider's standard contractual clauses and equivalent safeguards.
11. Changes to this policy
If we make material changes we'll tell you in the app before they take effect, and update the date at the top of this page.
12. Cookies
The app sets no cookies. On this website we use only what is needed to make it work, plus anything you have actively agreed to. What each category is for, and how to change your mind, is set out in our cookie policy.
The chat window is the one part of this site run by somebody else. It stores nothing in your browser under our name: it runs in a frame of its own and anything it keeps is kept under Enjo's, separately from ours and from every other site you visit. The cookie policy says what that means in practice.
13. Contact
OppBox Ltd (trading as ZeroPercent), company number 17351386. ICO registration C2039038. [email protected]