Privacy Policy
Last updated: 2026-10-16
This Privacy Policy explains how the ZeroToHero mobile app (Google Play, Huawei AppGallery and the Apple App Store) and the zerotohero.community website (together, the "Platform") collect, use, store and protect your personal data, and the rights you have over it. ZeroToHero is developed and operated by Delgersuren Byambasuren ("we", "us").
1. Who We Are
App name: ZeroToHero Developer and operator: Delgersuren Byambasuren Website: https://zerotohero.community Contact: privacy@zerotohero.community Delgersuren Byambasuren is responsible for the personal data processed through the Platform.
2. Information We Collect
We collect information you provide directly (name, email, password, profile details and photo) when you register or update your account, and the content you create: posts, comments, messages, practice answers and, when you use speaking practice, your voice recordings and their transcripts. We also collect data automatically when you use the Platform, including IP address, browser type, device model, operating system and app version, device identifiers, push notification tokens, pages visited, and usage patterns. We do not receive or store your full payment card number; card payments are processed by the payment provider.
3. How We Use Your Information
We use your data to provide, operate, and improve the Platform; to authenticate you and manage your account; to process payments; to score and give feedback on your practice answers (including with AI); to send transactional notifications and service updates; and to respond to your inquiries and support requests.
4. Data Sharing
We do not sell your personal data. We may share your data with Community Owners whose communities you join (limited to your profile and activity within their community), and with third-party service providers who help operate the Platform (hosting, payment processing, email delivery, push notifications, crash reporting and AI feedback, listed under Third-Party SDKs and Services). All processors are contractually required to protect your data. We may also disclose data when required by law.
5. Third-Party SDKs and Services
The app and website use the following third-party SDKs and services. Each receives only the data it needs for the stated purpose. • Huawei Push Kit, Huawei Software Technologies Co., Ltd. (Huawei AppGallery version only). Purpose: deliver push notifications. Data: push token, device model, operating system version, app information. Privacy policy: https://consumer.huawei.com/en/privacy/privacy-policy/ • Firebase Cloud Messaging, Google LLC (Google Play and iOS versions). Purpose: deliver push notifications. Data: push token, app instance ID, device information. Privacy policy: https://firebase.google.com/support/privacy • Sentry, Functional Software, Inc. Purpose: crash and error reporting. Data: device model, operating system and app version, error details, and a screenshot of the app screen at the moment of an error. Privacy policy: https://sentry.io/privacy/ • Shorebird. Purpose: check for and install app updates. Data: app version, platform, CPU architecture, an anonymous install identifier. Privacy policy: https://shorebird.dev/privacy • RevenueCat, RevenueCat, Inc. (iOS version only). Purpose: App Store in-app purchases. Data: purchase history, your account ID. Privacy policy: https://www.revenuecat.com/privacy • Google Sign-In, Google LLC, and Sign in with Apple, Apple Inc. (only if you choose them). Data: name, email, account identifier. Privacy policies: https://policies.google.com/privacy and https://www.apple.com/legal/privacy/ • AI feedback, Anthropic PBC or OpenAI, L.L.C. Purpose: score and give feedback on the practice answers you submit, and generate answers from a community's AI assistant. Data: the text or speech transcript you submit. Privacy policies: https://www.anthropic.com/legal/privacy and https://openai.com/policies/privacy-policy/ • Speech recognition, provided by your device's operating system (for example Google, Huawei or Apple). Used only during speaking practice, to turn your speech into text. • Payment providers: Stripe, QPay and bank transfer. Purpose: process payments. Data: payment amount, order details, and the payment details you enter with the provider. Stripe privacy policy: https://stripe.com/privacy • Email delivery provider. Purpose: send account and notification emails. Data: your email address and the email content. • Google Analytics, Google LLC (public website pages only, never in the app or logged-in areas). Purpose: visit statistics. Data: pages visited, approximate location, browser and device type, a cookie identifier. Privacy policy: https://policies.google.com/privacy • Embedded videos: YouTube, Gumlet, Vimeo, Facebook and similar players may collect viewing data under their own policies when you play a video they host. • Zoom: see Zoom Integration below.
6. App Permissions
The app asks for a permission only when you use a feature that needs it. You can turn any permission off in your device settings; this only disables the related feature. • Notifications: send you messages, reminders and community updates. • Microphone: record your voice in speaking and pronunciation practice. • Camera: take a photo for your profile, posts or messages. • Photos and files: upload the images and files you choose in the system picker. • Biometrics (fingerprint or face): unlock the app quickly. Verification happens on your device; we never receive your biometric data. • Exact alarms: deliver task reminders at the time you set. • Bluetooth: play and record audio through Bluetooth headphones. • Background audio: keep listening practice playing while the screen is locked.
7. Authentication & Social Login
When you sign in with Google or Apple, we receive your name, email address, and a unique identifier from those services. We do not receive your passwords. Your use of social login is also subject to the respective privacy policies of Google and Apple. Google Sign-In is not offered in the Huawei AppGallery version of the app.
8. Where Your Data Is Stored
Our servers, databases and backups are hosted on Google Cloud (Google LLC) in the United States. If you use the Platform from another country or region, including Mongolia and the Chinese mainland, your personal data is transferred to and stored in the United States. By agreeing to this policy you consent to this transfer. We protect transferred data with the measures described under Security, and you can contact us about it at any time.
9. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
10. Your Rights
Depending on your location, you may have the right to access, correct, or delete your personal data; to object to or restrict processing; to request a copy of your data in a portable format; and to withdraw your consent at any time (withdrawing consent does not affect processing carried out before). You can edit your profile and delete your account in the app, or contact us at privacy@zerotohero.community. We will respond within 15 working days.
11. Account Deletion
You can delete your account at any time from your profile settings. Account deletion is permanent and will remove your profile, enrollments, and other account data. Content you have posted in communities may remain visible but will be anonymized.
12. Cookies
We use strictly necessary cookies for authentication and security, and functional cookies to remember your language preference. On the public pages of the website we also use Google Analytics cookies to understand how visitors use the site. See our Cookie Policy for full details.
13. Security
We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. No system is 100% secure; we encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorized access.
14. Children's Privacy
The Platform is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
15. Zoom Integration
If you connect your Zoom account, we use Zoom's OAuth to obtain and securely store an access token, a refresh token, your Zoom account email, and your Zoom user identifier. These are used solely to create, update, and cancel scheduled Zoom meetings on your own account for mentoring sessions booked on the Platform. We never access, store, or process your meeting recordings, participant lists, chat, or any meeting content. Tokens are encrypted at rest and transmitted only over TLS. You can disconnect Zoom at any time, and if you remove our app from your Zoom account, Zoom notifies us and we delete the stored tokens and associated data. Our use of information received from Zoom APIs adheres to the Zoom API license and Terms of Use.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Platform. Continued use after changes constitutes acceptance of the updated policy.
17. Contact
Developer: Delgersuren Byambasuren Email: privacy@zerotohero.community For privacy questions or to exercise your rights, contact us at the address above. We will respond within 15 working days.