Privacy policy
Last updated: 21 October 2026
This policy explains what data the Zero In mobile app ("Zero In", "the app") collects, why, who it is shared with, and how you can delete it. Zero In is published by Grebenniki Farm LLC ("we", "us"), 1645 Anderson Creek Rd, Talent, OR, USA. We are responsible for your data in the app. Contact us at apps@grebenniki.farm.
The short version
- You don't give us your real name, email address or phone number. The app signs you in with an anonymous account.
- We collect only what is needed to share timers and send notifications: the name you choose, your timers and runs, and your phone's push notification token.
- Other members of a timer see your chosen name and that timer's runs.
- No ads, no advertising ID, no analytics or tracking SDKs, and we don't sell your data.
- You can delete your account and data at any time in the app's Settings.
What we collect
| Data | What it is | Why |
|---|---|---|
| Account ID | A random identifier created when you first open the app (anonymous sign-in). It isn't linked to your name, email or phone number. | To recognise your phone and keep your timers. |
| Your name | The display name you type in the app (up to 40 characters). It doesn't have to be your real name. | Shown to other members so they know who started, paused or cancelled a timer. |
| Settings | Your phone's time zone and language, whether to hide details on your lock screen, and which version of the terms of use you accepted. | To write notification times in your local time, to respect your lock-screen choice, and to record that you accepted the terms. |
| Timers and runs | Names you give timers and runs, durations, who is a member, who started, paused, resumed or cancelled each run and when, and the run history. | This is the service: keeping everyone's countdown in sync and showing the history. |
| Invites and join requests | Invite links you create (who created them, when they expire) and requests to join a timer that needs the owner's approval. | To let people join your timers. |
| Device and push token | A push notification token issued by Apple or Google for your phone, whether it is an iPhone or Android phone, and whether it can show Zero In's full-screen alarm (Android). | To send notifications when a run ends or changes, and to ring the alarm when time is up. |
| Blocks and reports | People you have blocked; reports you send, with your reason and a copy of the reported names. | To stop unwanted notifications and to review abuse. |
| Usage counters | Counts of actions per hour (for example, runs started), deleted automatically after a short time. | To limit spam and abuse. |
| Technical data | Your IP address and request details, processed by our cloud provider when the app talks to our servers, and error logs. The app may also ask Apple or Google to confirm it is a genuine copy of Zero In (App Attest, Play Integrity). | To run the service, keep it secure and fix problems. |
We don't collect your contacts, location, photos, email address, phone number or advertising ID.
Who can see your data
- Members of your timers see your display name, the timer's name and members, and the runs they are in, including who started, paused or cancelled them. Notifications show this on their phones and, unless they turn on "Hide details on lock screen", on their lock screens.
- Anyone with an invite link can ask to join that timer until the link expires (7 days) or the owner revokes it. The invite web page itself doesn't show anything about the timer.
- We can see the data in our database to run the service, answer support requests and review reports.
Service providers
We use these companies to run Zero In. They process data on our behalf, under their own data protection terms, and not for their own advertising.
- Google (Firebase and Google Cloud): anonymous sign-in, database, server functions, scheduling, website hosting and app checks. Data is stored in Google data centres in the United States. Firebase privacy
- Expo (650 Industries, Inc.): delivers push notifications to Apple and Google. It receives your push token and the notification text. Expo privacy
- Apple Push Notification service and Google Firebase Cloud Messaging: deliver notifications to your phone.
Because these providers are in the United States, your data is transferred there. Where the law requires it, these transfers are covered by the providers' Standard Contractual Clauses or equivalent safeguards.
We don't sell or rent your data. We only disclose it otherwise if the law requires us to, or to protect people's safety or our rights.
Why we are allowed to use it
If data protection laws such as the GDPR apply to you, we use your data to provide the app you asked for (performance of a contract), and to keep it secure and prevent abuse (our legitimate interests). Notifications are sent only if you allow them on your phone, and you can turn them off at any time.
How long we keep it
- Your profile, settings, timers, blocks and push token: until you delete your account. A push token is also removed when Apple or Google report it is no longer valid.
- Run history stays with its timer for the other members. When you delete your account, your ID is removed from it, and runs you started show "Deleted user".
- Timers you created stay with the remaining members, and ownership passes to the longest-standing member. A timer is deleted when its last member leaves.
- Invites expire after 7 days. Usage counters are deleted automatically.
- Reports are kept as long as we need them to deal with the report and prevent repeat abuse.
- If you uninstall the app without deleting your account, the data stays until you ask us to delete it. We may also delete accounts that have been inactive for a long time.
Deleting your data
In the app, open Settings and tap Delete account. This removes you from every timer and run, deletes your profile, devices, blocks and join requests, and deletes the account itself, straight away. If you no longer have the app, see deleting your account.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict how we use it, and to complain to your data protection authority. You can change your name and delete your account in the app yourself. For anything else, email apps@grebenniki.farm. Because accounts are anonymous, we may ask for details only you would know (such as your display name and the names of your timers) to find your account.
Security
Data travels encrypted between the app and our servers. Database rules let each person read only the timers and runs they belong to, and only our server can change run state. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you where the law requires it.
Children
Zero In is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has an account, contact us and we will delete it.
Changes to this policy
We will update this page when the app changes what it collects, for example when sign-in with Apple or Google or paid features are added. We will change the date at the top and, for important changes, tell you in the app.
Contact
Grebenniki Farm LLC, 1645 Anderson Creek Rd, Talent, OR, USA
Email: apps@grebenniki.farm