Privacy policy.

Zone Six is a product of Value OS, LLC (“Value OS”, “we”, “us”, “our”), a Delaware limited liability company. Value OS operates the Zone Six mobile application, watch application, and website at zonesixlife.com, which help people stay consistent with training, nutrition, and fasting.

Our registered office is 651 N Broad St, Suite 201, Middletown, DE 19709, United States. You can reach us by phone at +1 (302) 520‑2393 or via thevalueos.com. For privacy matters, write to privacy@thevalueos.com.

For all privacy questions, requests, or complaints, contact privacy@thevalueos.com (general, non‑privacy questions can go to hello@zonesixlife.com). For the purposes of the EU/UK GDPR and equivalent laws, Value OS, LLC acts as the data controller of your personal information.

This policy explains what information Zone Six collects, how we use it, who we share it with, and the choices and rights you have. It applies globally to the Zone Six mobile app (iOS and Android), the Zone Six watch app, and the website at zonesixlife.com. Where local law gives you stronger rights than this policy, those rights apply.

When you create an account or use Zone Six, you may provide:

• Account details: email address, name, password (stored as a one‑way hash on our servers), and optional profile information.
• Health and fitness inputs: body metrics (height, weight, age, sex), goals, training preferences, fasting protocol, dietary preferences, and the workouts, meals, and fasts you log.
• Photos of meals: when you choose to scan a meal, the image is sent to our servers and to a third‑party AI vision provider to estimate the meal’s contents and nutrition. Photos are stored only for as long as needed to perform and audit the analysis.
• Communications: messages you send us by email or through the app, and content you submit via support, feedback, or waitlist forms.

Some of this information — body metrics, fasting and dietary data, GPS routes during workouts — qualifies as “health data” or “special category data” under EU/UK GDPR, Brazil’s LGPD, and similar laws. By choosing to enter this information into Zone Six, you give us your explicit consent to process it for the purposes described in this policy. You can withdraw that consent at any time by deleting the data or your account.

When you use Zone Six, we collect:

• Workout and activity data: durations, distances, intervals, paces, heart‑rate values, and other metrics produced during your sessions.
• Location data: during outdoor workouts, the app records your GPS route in the foreground and, when you start an outdoor workout, in the background so the route continues to record while the screen is locked. Background location is used only to record an active workout you have started — we do not track location at any other time, do not use it for advertising, and do not share precise location with third parties for their own purposes.
• Device and diagnostic data: device model, operating system version, app version, language, time zone, IP address, crash reports, and basic usage events. We use Sentry for crash and error reporting.
• Cookies and similar technologies on the website: strictly necessary cookies, plus session storage used for features like the intro animation and saved preferences. We do not use advertising cookies. Where required (for example in the EEA, UK, and the UAE), we will ask for your consent before setting any non‑essential cookies.

Zone Six only requests device permissions for features you actively use:

• Camera (Android and iOS): used solely to take photos of meals so they can be analyzed for nutrition. Photos are not used for facial recognition, biometric identification, advertising, or any purpose unrelated to meal analysis.
• Photos / photo library: used to let you pick existing meal photos and to save workout share cards or images you choose to export.
• Location (when in use and background): used to record GPS routes during outdoor workouts. Background location only runs while an outdoor workout is active.
• Notifications: used to send reminders, fasting milestones, and workout updates you opt into.
• Background audio (iOS): allows the app to keep playing workout audio cues when the screen is locked.

You can revoke any of these permissions at any time in your device settings. If you revoke a permission, the related feature will stop working but your account will remain.

We use the information we collect to:

• Provide the core product: build your training plan, track workouts, log meals, run fasting timers, and sync data across your devices and watch.
• Analyze meals you scan and return estimated nutrition information.
• Improve and debug the product, including diagnosing crashes and performance issues.
• Communicate with you about your account, product updates, and customer support.
• Detect, prevent, and respond to fraud, abuse, or violations of our terms.
• Comply with legal obligations.

We do not sell your personal information, do not “share” it for cross‑context behavioral advertising as defined under California law, and do not use your health, fitness, biometric, or location data for advertising. We do not use your data to make automated decisions that produce legal or similarly significant effects on you.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:

• Contract — to provide the Zone Six service you have asked us for (account, training plan, syncing, billing).
• Explicit consent — to process health, fitness, and location data, to send marketing emails, and to set non‑essential cookies. You can withdraw consent at any time without affecting prior processing.
• Legitimate interests — to keep Zone Six secure, prevent abuse, debug crashes, and improve the product. We balance these interests against your rights.
• Legal obligation — to meet tax, accounting, and other regulatory requirements.

We rely on a small set of trusted providers (“sub‑processors”) to run Zone Six. Each one only receives the data it needs to perform its function, is bound by a data processing agreement, and may not use your data for their own purposes:

• Cloud hosting and database providers, which store your account and activity data on our behalf.
• An AI vision provider used to analyze the meal photos you submit.
• Sentry for crash and error reporting.
• Apple Push Notification service and Firebase Cloud Messaging for push notifications.
• Google Maps SDK on Android to render maps inside outdoor workouts.
• hCaptcha on the website to protect signup forms from abuse.
• Strava — only if you choose to connect your Strava account, in which case we exchange activity data with Strava on your behalf.
• Apple and Google in‑app purchase systems, which process your subscription payments. Zone Six never sees your full payment card details.

A current list of sub‑processors is available on request from privacy@thevalueos.com.

Zone Six is operated globally and our providers are located in multiple countries, including the United States and the European Union. When we transfer personal data out of the EEA, UK, Switzerland, Brazil, or other regions with data‑transfer rules, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent mechanisms — to keep your data protected to the standard required by your home jurisdiction.

Authentication tokens are stored in the secure keychain on your device (Keychain on iOS, Keystore on Android). Other app data is stored locally on your device and on our servers behind authenticated, encrypted connections (TLS in transit; encryption at rest for production databases and backups).

We use industry‑standard safeguards — encryption, access controls, audit logging, and least‑privilege server access — to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

If we discover a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within the timeframes required by applicable law (within 72 hours under the GDPR) and notify affected users without undue delay where the breach is likely to result in a high risk to them.

We keep your account data for as long as your account is active. If you delete your account, we delete or irreversibly anonymize your personal data within 30 days, except where we are required to keep it longer to meet a legal obligation, resolve disputes, or enforce our agreements. Encrypted backups are rotated and fully purged within 90 days of deletion. Crash and diagnostic data is retained for up to 90 days. Aggregated, fully anonymized data — which can no longer be linked to you — may be kept indefinitely for analytics and product improvement.

Depending on where you live, you may have rights under the GDPR (EEA), UK GDPR, the Swiss FADP, Brazil’s LGPD, Canada’s PIPEDA, South Africa’s POPIA, the UAE PDPL, Australia’s Privacy Act, the California CCPA/CPRA, and similar US state laws (Virginia, Colorado, Connecticut, Utah, Texas, and others). These typically include the right to:

• Access the personal data we hold about you, and receive a copy.
• Correct inaccurate or incomplete data.
• Delete your account and associated data (the “right to be forgotten”).
• Export your data in a structured, machine‑readable format (data portability).
• Object to or restrict certain processing, including a right to opt out of profiling under several US state laws.
• Withdraw consent at any time, where processing is based on consent.
• Not be discriminated against for exercising your privacy rights.

To exercise any of these rights, email privacy@thevalueos.com from the address associated with your account. We will verify your identity and respond within the timeframe required by your local law (one month under the GDPR, 45 days under the CCPA, etc.). You may also designate an authorized agent where local law allows. If you are unhappy with our response, you have the right to lodge a complaint with your local supervisory authority — for example, your national data protection authority in the EEA, the ICO in the UK, the ANPD in Brazil, the Information Regulator in South Africa, or the relevant US state Attorney General.

In the past 12 months we have collected the following categories of personal information: identifiers (email, account ID, IP address), customer records (name, optional profile data), commercial information (subscription history), internet/network activity (app and site usage, crash logs), geolocation (during outdoor workouts only), sensory data (meal photos), and health/fitness data. We use this information for the business purposes described above.

We do not sell or share personal information for cross‑context behavioral advertising and have not done so in the past 12 months. Zone Six is intended for adults and we do not knowingly collect, sell, or share the personal information of consumers under 18. California residents have the rights to know, delete, correct, and limit the use of sensitive personal information; to exercise these rights, email privacy@thevalueos.com.

Zone Six is intended for adults. The service is not directed at, and we do not knowingly collect personal information from, anyone under 18. If you are under 18, please do not use Zone Six or submit any information to us. If you are a parent or guardian and believe a person under 18 has provided us personal information, contact privacy@thevalueos.com and we will delete the account and associated data.

We may update this policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app or by email before the change takes effect. Continued use of Zone Six after a change means you accept the updated policy.

Questions, requests, or complaints about this policy or your data can be sent to privacy@thevalueos.com. You can also reach us by phone at +1 (302) 520‑2393 or by mail at Value OS, LLC, 651 N Broad St, Suite 201, Middletown, DE 19709, United States. We aim to respond to every privacy request within the time required by applicable law. For general, non‑privacy questions, hello@zonesixlife.com is the right inbox.