Who we are
Zero Debt provides debt-planning tools, public calculators, membership features, and support services through this website.
For account creation, we use your email address as the sign-in identifier. We do not require a legal name or username at signup, and each account is assigned a generated reference so we can help with support without exposing internal database IDs.
What we collect
We collect the information needed to run the service, secure accounts, handle billing, and reply to support requests.
- Account data such as your email address, password hash, membership status, verification status, and generated account reference.
- Profile and preference data such as your chosen currency, theme, motion settings, marketing preference, and optional display name.
- Debt-planning data you enter, including debts, bills, payment history, scenarios, snapshots, and related notes.
- Support and contact data, including the messages you send us and the details needed to reply.
- Billing-related information if you choose a paid membership. Payment details are collected and processed by Stripe through its checkout and billing tools. We receive limited billing information such as Stripe customer or subscription references, membership status, invoice-related metadata, and billing contact details made available through Stripe where needed to manage your membership, provide billing support, prevent fraud, or keep required financial records.
- Technical and security data such as IP address, session data, user agent information, audit or abuse-prevention logs, and limited first-party usage events for public calculator pages, such as page views and successful runs.
How we use it
We use personal data to provide the service you ask for, keep accounts secure, operate the website, and meet legal obligations.
- Contract: to create your account, save your plans, provide calculators and membership features, and respond to service requests.
- Legitimate interests: to secure the service, detect abuse, investigate issues, maintain logs, understand whether public calculator tools are being used, and keep the platform reliable.
- Legal obligation: to keep records needed for tax, accounting, fraud prevention, or other legal requirements.
- Consent: for optional marketing emails if you opt in, and for non-essential advertising cookies on public pages if you accept them.
Who we share it with
We do not sell personal data. We share data only where it is necessary to run the service or where the law requires it.
- Hosting, database, and backup providers that keep the website and app running.
- Stripe for checkout, subscriptions, billing support, and payment-related records.
- Email delivery providers for verification, password reset, product messages, and support replies.
- Security and anti-abuse providers, including Cloudflare Turnstile where it is enabled on forms.
- Professional advisers, regulators, courts, or law enforcement where disclosure is legally required.
When you pay for membership, Stripe processes your payment information directly for billing purposes. Depending on the checkout and billing information you provide, we may be able to view billing contact details such as a billing address inside Stripe for billing support, fraud-prevention, or accounting purposes. Zero Debt does not store full payment card details in the app.
International transfers
Some of our service providers may process data outside the UK. When that happens, we expect the provider to use the transfer safeguards available under applicable data protection law, such as contractual protections or an approved adequacy mechanism.
How long we keep it
We keep personal data only for as long as it is needed for the purpose it was collected. Our current retention rules include:
- Active account and planning data is kept while your account remains active.
- Unverified signups are removed after 30 days if the account is not verified.
- Support records are usually kept for up to 24 months after the case is closed.
- Audit logs are usually kept for 90 days and server or application logs for around 30 days, unless a specific incident requires a temporary hold.
- Billing and tax records may be kept for up to 6 years where required.
- If you delete your account, live user data is removed from active systems, while encrypted backups may continue to age out on a rolling backup window.
Your rights
You can ask to access, correct, delete, restrict, or port your personal data, and you can object to certain processing where the law gives you that right.
You can also withdraw marketing consent at any time. To make a privacy request, use the contact form or email [email protected].
If you have a concern about how we use your personal data, please contact us first and we will do our best to help. You also have the right to raise a concern with the Information Commissioner's Office at ico.org.uk.
Security
We use technical and organisational measures intended to protect accounts and user data, including authentication controls, security logging, anti-abuse protections, and two-factor authentication for users who choose to enable it. No online service can promise perfect security, so you should also use a strong password, keep your login access private, and enable two-factor authentication if it is appropriate for your account.