This policy explains what information Zonely collects when you join our beta list, how we use it, and the rights you have over it. We keep it short and only collect what we need: your email address, plus basic analytics about how the site is used.
Zonely (“Zonely”, “we”, “us”, “our”) is a product currently in beta. Zonely is operated by POTERNA LTD, a company registered in England & Wales (company number 16852743), whose registered office is at 124 City Road, London EC1V 2NX, United Kingdom.
For anything about this policy or your data, contact us at [email protected]. We are the “data controller” for the information described here.
When you sign up or submit a form on our site, we collect:
We do not ask for your name, and we never see or store a password. Payments for Zonely Premium are handled by Stripe, our merchant of record — your card details go directly to Stripe, and we never see or store them.
We use your information to:
Where you create an account, our legal basis is performance of a contract (Article 6(1)(b) UK GDPR / EU GDPR) — we need your email address and sign-in details to give you the account you asked for, to email you a sign-in code, and to keep your test results attached to it.
For adding you to the beta list and sending you product updates, our legal basis is your consent (Article 6(1)(a) UK GDPR / EU GDPR), which you give by submitting your email to join the beta. You can withdraw your consent at any time — every email we send includes an unsubscribe link, or you can email us at [email protected]. Withdrawing consent does not affect anything we did before you withdrew it.
We do not sell or rent your information. We share it only with the service providers that help us run the site, who act as our “processors” and may store data in the United States:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Runs your account and stores your account details and test results | Ireland (EU) |
| Resend | Delivers the one-time sign-in code to your email | United States |
| Confirms your identity if you choose “Continue with Google” | United States | |
| Formspree | Receives and stores your form submission (your email) | United States |
| DigitalOcean | Hosts the Zonely website | United States |
| Stripe | Processes your subscription payments as our merchant of record | United States |
| Microsoft Azure | Powers the AI practice partner in the chat lessons and processes what you type there | Netherlands (EU) |
Your account, test results and practice conversations are stored by Supabase on servers in Ireland, and the practice conversations are processed by Microsoft Azure in the Netherlands — both inside the EEA. The other providers process data in the United States, so some of your information may be transferred outside the UK/EEA. Where that happens, the transfer is protected by appropriate safeguards — Standard Contractual Clauses and/or the EU–US / UK Data Privacy Framework, as applicable. You can ask us for more detail at any time.
We keep your email only as long as we need it for the purpose above. In practice that means until the Zonely beta ends and our launch communications are complete (and for up to 12 months afterwards), or until you ask us to delete it or unsubscribe — whichever comes first. If we decide not to proceed with Zonely, we delete the list.
If you created an account, we keep your account and its test results until you ask us to delete them, or until we shut the service down. Deleting your account deletes the test results attached to it.
Practice conversations from the chat lessons are deleted automatically 90 days after they happen. You can also delete all of them yourself at any time, without touching the rest of your account, from Settings → Practice conversations in the app.
Under UK and EU data protection law you have the right to:
To exercise any of these, email [email protected] and we’ll respond within one month. If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or to your local data protection authority if you’re in the EU.
If you have an account and want it removed, say so and we’ll delete the account together with everything attached to it, including your test results.
We use our own analytics, loaded from tracker.poterna.com, to understand how people find and use this site — for example which pages are viewed, the site or link that referred you, and general information about your browser, device, and approximate location (derived from your IP address). We use this in aggregate to measure interest in Zonely and improve the site; we don’t use it to personally identify you, and we don’t sell it.
This analytics is privacy-friendly: it does not use cookies, and it does not store or read any identifier on your device or track you across other websites. Because nothing is stored on or read from your device, it does not require a cookie banner. We rely on our legitimate interest in understanding and improving Zonely as the basis for this limited analytics, and you can object at any time by emailing us at [email protected].
There is one thing we do store on your device, and only if you sign in: a sign-in token kept in your browser’s local storage so that you stay signed in between visits. It is not analytics, it is not shared with anyone, and it is not used to track you. It exists only to keep you logged in — something you asked us to do by signing in — so it is strictly necessary for a service you requested and does not require a cookie banner. Signing out, or clearing your browser’s storage, removes it.
On the sign-up page only, we load Google’s sign-in library from accounts.google.com so that the “Continue with Google” button can be shown. This is Google’s own code, and it may read or set cookies belonging to Google in order to recognise that you are signed in to a Google account. We use it solely to offer Google as a way of signing in — we don’t use it for analytics or advertising, and it isn’t loaded anywhere else on the site. If you never use Google to sign in, no Google account information reaches us. You can avoid it entirely by signing up with your email address instead.
Zonely is intended for adults and is not directed to children under 16. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us their email, contact us at [email protected] and we’ll delete it.
As Zonely moves from beta to a full product, we may update this policy. When we do, we’ll change the “last updated” date at the top, and for significant changes we’ll let you know by email.
Questions about your privacy? Email us any time at [email protected].