Privacy Policy

Last updated: March 19, 2026

1. Information We Collect

When you use Zero Point, we may collect:

  • Account information (email address)
  • Intake assessment responses and derived profile data
  • Coaching conversation messages
  • Pattern Map data and session summaries
  • Feedback you provide about coaching responses
  • Usage data and analytics
  • Consent records including timestamps and checkbox states

2. How We Use Your Information

We use your information to:

  • Provide and personalize the coaching service
  • Generate AI coaching responses based on your profile and conversation history
  • Operate safety features including automated distress detection
  • Improve the quality of the service
  • Send account-related communications
  • Comply with legal obligations

3. Safety-Related Information

If you submit messages or responses indicating possible self-harm, suicidal thoughts, acute distress, or other safety concerns, we may process and store that content and related metadata for limited purposes including safety-feature operation, crisis-resource routing, internal review, security, legal compliance, fraud prevention, and service improvement. Messages are not monitored in real time.

This information may include:

  • Message content that triggered safety detection
  • Timestamps and user identifiers
  • Session and conversation identifiers
  • Automated safety classifications and risk tier assessments
  • Whether a crisis resource screen was displayed
  • Whether safety-related actions were selected by the user
  • Safety question responses

Internal safety alerts, if used, are administrative tools only and do not guarantee real-time review or intervention.

We retain safety-related information for as long as reasonably necessary for the purposes described above, unless a longer retention period is required by law, security needs, dispute resolution, or legitimate business purposes.

4. AI Processing

Zero Point uses OpenAI's language models to generate coaching responses. When you send a message, it is transmitted to OpenAI's API for processing. By default, data sent through the OpenAI API is not used to train or improve OpenAI's models unless the customer explicitly opts in. We have not opted in to any data sharing beyond what is necessary to generate your coaching response.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest, row-level security in the database, and server-side authentication on all API endpoints. For more details, see our Security page.

6. Data Sharing

We do not sell your personal information. We may share data with:

  • OpenAI (for AI response generation only)
  • Supabase (database and authentication hosting)
  • Vercel (application hosting)
  • Resend (transactional email delivery)

These service providers process data only as necessary to provide their services and are bound by their own privacy and security obligations.

7. Your Rights and Controls

You have the right to:

  • Export your data: Download a complete copy of your profile, conversations, and coaching history via Settings > Export My Data
  • Delete your account: Permanently remove all your data via Settings > Delete Account
  • Control your experience: Customize dark mode, font size, coaching style, and blocked topics via Settings

8. Conversation Deletion

When you delete a coaching conversation, the following data is permanently removed:

  • All message content (your messages and coach responses)
  • The conversation record itself

However, structured coaching data that was derived from the conversation may still be retained unless you choose a full deletion. This includes:

  • Session learnings (mechanism identified, barriers, what helped)
  • Intervention history (what was suggested and whether it worked)
  • Pattern Map updates and changelog entries

This derived data does not contain your raw conversation text. It contains only structured pattern intelligence used to improve future coaching accuracy.

Full forget option: When deleting a conversation, you can choose to also remove all derived learnings, intervention records, and changelog entries linked to that session. The cumulative Pattern Map model may still retain aggregated pattern data that cannot be attributed to a single conversation.

Deleting your account removes all data, conversations, messages, learnings, interventions, Pattern Map, profile, and authentication record.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently remove your profile, conversations, messages, Pattern Map, session history, feedback, and authentication record. Safety event logs may be retained for a longer period as required for legal, security, or compliance purposes.

10. Children

The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe a child under 18 has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other means.

12. Contact

If you have questions about this Privacy Policy, please contact us at our contact page.