Privacy notice for the ZoFound website

This notice explains what happens to your personal data when you visit zofound.com or zofound.de, when you join our waiting list, and when you sign up for the test round in Germany. It applies to the website only. The ZoFound app has its own privacy policy.

1. Who is responsible

LOVY (ZoFound is a brand owned and operated by LOVY) Damsted 37, 6000 Kolding, Denmark · CVR no. 26132517 Owner and responsible person: Jan Lektonen Privacy contact: privacy@zofound.com

We have not appointed a data protection officer; we are not required to.

2. Visiting the website

What we process. When you open a page, our hosting provider receives the technical data your browser sends: your IP address, the page you requested, the time, your browser and operating system type, and the page that referred you. This is needed to deliver the page and to keep the site secure.

Where it runs. The website is hosted on Google Cloud (Firebase App Hosting) in the European Union. Google Ireland Limited acts as our processor under a data processing agreement. Request logs are kept for 30 days and then deleted.

Legal basis. Our legitimate interest in operating a secure, working website (Art. 6(1)(f) GDPR). Our interest is limited to delivery, security and error analysis; we do not build profiles from these logs.

Cookie-free visit counting (always). In addition, our server counts each page view as an anonymous statistics line: which kind of page (e.g. “home” or “About ZoFound”), language, domain, the country in coarse form (only if our hosting provider supplies it), campaign details from the link (utm_source, utm_medium, utm_campaign) and only the domain name of the referring page. Neither your IP address nor your browser identifier is stored, no cookie is set and no visit ID is assigned — the line cannot be linked to a person. Legal basis and retention as for the request logs above. This tells us how many people visit which pages — even without your consent to Google Analytics.

No third parties without your yes. Fonts and scripts are served from our own domain, and so are the coach photos. One third-party script — Google Analytics — is loaded only if you agree (section 3a).

3. Cookies and local storage

Strictly necessary — no consent needed (Art. 5(3) ePrivacy Directive / § 25(2) TDDDG):

Name	Kind	Purpose	Lifetime
zf_preview_access	cookie	Grants access to the full site before public launch (only set if you open the private preview link)	90 days
zf-theme	local storage	Remembers your light/dark choice	until you clear it
zwLangHint	local storage	Remembers that you dismissed the language suggestion or chose a language	365 days
zwConsent	local storage	Remembers your privacy choice (version, yes/no per category, time) so we do not ask again	12 months if you agreed to at least one category; 6 months if you declined everything — after that we ask once more
zwConsentSeen	session storage	Remembers that the notice was already shown in full during this visit (after that only the small “Privacy choices” button)	until you close the browser or tab

None of these identify you, and none are shared with anyone.

Only with your consent (§ 25(1) TDDDG) — see section 3a:

Name	Kind	Purpose	Lifetime
_ga, _ga_<ID>	cookie (Google Analytics)	Tells visits apart so Google Analytics can count page views — only after your yes to “Statistics”	up to 12 months
_gcl_au, _gcl_aw	cookie (Google Ads via Google Analytics)	Links a click on our ad to a later visit or app download — only after your yes to “Marketing”	90 days

3a. Google Analytics and ad measurement (only with your consent)

How you decide. On your first visit we ask in a small panel. “Decline” and “Accept” carry equal weight; under “Settings” you can choose each category. Without your yes, no Google script is loaded and no cookie is set (Google Consent Mode in “basic” mode: all consent signals stay “denied” until you agree). Ignoring the notice counts as no. Your choice is stored as described in section 3.

Statistics (Google Analytics 4). With your yes, the site loads Google Analytics. It measures which pages are visited and which buttons are used (e.g. “Get the app”, language switch, starting the film, the waiting-list steps — without your email address or anything else you type). Google processes your IP address to derive an approximate country or region but, by its own account, does not store it for users in the EU; it also processes device and browser details and the cookies listed above. We send the page address without query parameters (only campaign details are kept). Google signals and personalised advertising are switched off.

Marketing (measuring our ads). With your yes to “Marketing”, we measure whether our ads on Google and YouTube lead to visits and app downloads. For this, Google Analytics may use the click identifier from an ad link (gclid, gbraid, wbraid) and pass it to the Google Ads account linked to Google Analytics. There is no personalised advertising, no remarketing and no audiences built from your visits. “Marketing” requires “Statistics”, because the measurement runs through Google Analytics. Technically, with your yes to “Marketing” we set the consent signals ad_storage and ad_user_data towards Google to “granted” (conversion measurement for Google Ads via the link with Google Analytics); ad_personalization always stays “denied”. We do not use enhanced conversions (hashed email addresses or similar).

Recipient. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor for Google Analytics. Transfers to Google LLC in the USA are possible; Google LLC is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses also apply.

Legal basis. Your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Retention. Cookies as in the table above. In Google Analytics, event data is deleted after 14 months.

Withdrawal. At any time and as easily as you agreed: via the “Privacy choices” button at the bottom of every page. It opens the settings directly; when you withdraw, we stop measuring immediately and delete the Google cookies. Withdrawal does not affect the lawfulness of processing before it.

4. The waiting list (“tell me when you open in my country”)

What we collect. Your e-mail address, the country you choose, and the language you signed up in. We also record when you signed up, when you confirmed, and that you gave consent — that is our proof of consent.

How it works (double opt-in). After you sign up we send one confirmation e-mail. Only when you click the link in it are you on the list. If you never click, your entry stays unconfirmed and is deleted after 90 days.

What we send. That depends on the country you choose. Germany: a confirmation, a short welcome, and the message that ZoFound has opened in Germany — a few e-mails at most. Any other country: a confirmation and one single message when we open in your country — nothing else. It is not a newsletter. So that we know what we may send you, we store the country you chose as a country code with your entry.

Legal basis. Your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every e-mail or by writing to privacy@zofound.com. Withdrawal does not affect what was lawful before.

Who helps us. We use OneSignal, Inc. (San Mateo, USA) to store the list and send the e-mails, under a data processing agreement. OneSignal is certified under the EU-U.S. Data Privacy Framework (registry participant 6776, verified 2026-08-29; re-check before the launch flip), and the standard contractual clauses in OneSignal’s data processing addendum apply in addition. OneSignal receives only your e-mail address, country, language and the dates above — not your IP address, location or device details. If a request from one of the forms in section 5 is sent as an e-mail, OneSignal additionally receives your name, your phone number or e-mail address, your language and any message — solely to deliver the e-mail to us.

Abuse protection. To stop the form from being misused we rate-limit sign-ups per network address. The address is held in the server’s memory for at most 15 minutes (5 sign-ups per address per 15 minutes) and is never stored with your entry or written to the list.

How long. Until you unsubscribe, or 12 months after ZoFound has opened in your country, whichever comes first. Our proof of consent is kept as long as we could be asked to show it (up to 3 years after the list entry is deleted), stored without your e-mail address in clear text.

4a. Signing up for the test round (Germany)

Before ZoFound launches in Germany, a small number of people in Bremen and northern Germany can sign up at zofound.de/testen to test the ZoFound app in advance. This sign-up is separate from the waiting list (section 4) and is not a newsletter.

Purpose. To give you test access to the app before its release (via Apple TestFlight on iPhone or a Google Play test on Android), to email you about it and about new test versions, and to read your feedback on the app.

What we process. Your name, your e-mail address, your city, whether you use an iPhone or an Android phone, the language of the page, the version of the consent text you agreed to, and the time you confirmed.

How it works (double opt-in). When you submit the form we store nothing yet. We send you a confirmation e-mail; your name, city and device are not in it in plain text but travel encrypted inside the confirmation link. Only when you open the link and confirm your sign-up there does it count — we then send ourselves an internal e-mail with your details so we can set up your test access, and create an entry with our e-mail provider that consists only of a pseudonymous code and the markers “test round”, “Germany” and “confirmed” (your name, city and device are not stored there). The link is valid for 7 days. If an address is already confirmed, we only send that address a short “you are already in” note — the page itself never reveals whether an address is signed up.

Who receives the data.

• OneSignal, Inc. (see section 4), as our processor, sends the e-mails. For this OneSignal receives your e-mail address and language, the content of the confirmation e-mail (with the encrypted link) and — after you confirm — the internal e-mail to us with your details. When the first e-mail is sent, OneSignal technically creates an e-mail record for your address, even if you never confirm.
• Apple (Apple Distribution International Ltd., Ireland — TestFlight) or Google (Google Ireland Limited — Google Play) receive your e-mail address (for TestFlight also your name) when we add you as a tester, so that you can install the test version. Apple’s or Google’s own privacy terms also apply there.

Legal basis. Your consent (Art. 6(1)(a) GDPR), which you give with the separate tick box in the form. You can withdraw it at any time by e-mailing privacy@zofound.com; we then delete your details and remove you from the test group. Withdrawal does not affect what was lawful before.

Abuse protection. As with the waiting list, we rate-limit sign-ups per network address (5 per 15 minutes); the address is only held briefly in the server’s memory and never stored. There is also a cap on confirmation e-mails per hour and per day.

How long.

• Confirmed sign-ups: until the test round ends, at the latest six months after you signed up. We then delete your entry at OneSignal, our internal e-mails with your details and your entry in the test group at Apple or Google.
• Unconfirmed sign-ups: the confirmation link expires after 7 days; we never store your details. We delete the e-mail record that OneSignal created for your address when sending the first e-mail within 30 days — unless the same address is also on our waiting list (section 4).
• Proof of consent: a pseudonymous code (without your e-mail address in plain text), language, version of the consent text and time — kept as long as the access logs (section 2).

Your rights and how to complain to a supervisory authority are set out in section 9.

5. Deletion and contact forms

You can send us a request through two forms: on the Delete your account page and on our contact page.

What we collect.

• Deletion form: your name, the phone number or email address the account was created with, an optional message and the language you wrote in.
• Contact form: your name, your email address (so we can reply), your message and the language you wrote in.

Purpose. For deletion: to identify your ZoFound account and handle your request. For contact: to answer your enquiry.

Legal basis. For deletion requests: our legal obligation to handle your request (Art. 6(1)(c) in conjunction with Arts. 12 and 17 GDPR). For enquiries via the contact form it depends on the content: if your enquiry concerns your use of ZoFound, the performance of our contract with you (Art. 6(1)(b)); otherwise our legitimate interest in being able to reply to you (Art. 6(1)(f)).

Who receives the data. Your request is received by our hosting provider (section 2). It is either transferred directly to ZoFound’s support system or sent as an email via our email provider OneSignal, Inc. (see section 4) — deletion requests to privacy@zofound.com, contact-form enquiries to hello@zofound.com. In both cases the information is read only by us; we handle it ourselves and do not pass it on to third parties.

Abuse protection. To prevent abuse, we limit the number of requests per network address (5 per 15 minutes). The address is held only temporarily in the server’s memory and is never stored or forwarded together with your request.

How long. Deletion requests: until your request has been completed; what applies after that to data linked to your account is set out in the app’s privacy policy. Contact-form enquiries: like other correspondence with us (section 8) — for as long as needed to handle your enquiry, and afterwards only where a law requires it.

The forms set no cookies, require no sign-in, and we do not use the information for profiling.

6. Getting the app

The “Get the app” buttons and the QR code lead to Apple’s App Store or Google Play. From that moment Apple’s or Google’s privacy terms apply; we receive no data about you from them through this website.

7. Member testimonials on the home page

Once the app is open in your country, the home page may show short testimonials from ZoFound members. We only show testimonials that the author agreed in the app to have published — for each testimonial separately — and that a person on our team has approved. A testimonial shows only a first name and a city; never a surname, a profile or contact details.

Legal basis. The author’s consent (Art. 6(1)(a) GDPR).

Withdrawal. The author can withdraw their testimonial at any time in the app under “Trust & Privacy”. It then disappears from the app immediately and from the website within a few minutes. It is also removed when the account is deleted.

8. Contacting us

If you write to hello@zofound.com or privacy@zofound.com, we process your message and contact details to answer you (Art. 6(1)(b) or (f) GDPR). We keep correspondence for as long as needed to handle your request, and afterwards only where a law requires it.

9. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. Write to privacy@zofound.com.

You can also complain to a supervisory authority — in Denmark the Datatilsynet (datatilsynet.dk), or the authority of the EU country you live or work in. (German version: add the right under Art. 77 GDPR and name the competent Landesdatenschutzbehörde / BfDI.)

10. Children

The ZoFound website and app are for adults (18+). We do not knowingly collect data from anyone younger.

11. Changes

We update this notice when the website changes — for example when the app launches in your country. The date at the top tells you which version you are reading.

Versions. 1.0.1 (9 October 2026): new section 4a on signing up for the test round; section 4 now says which e-mails you receive depending on your country. · 1.0.0 (8 October 2026): first published version.