Privacy Policy

Last updated: 28 August 2026

This page explains, in plain language, what personal data Ground Control collects and why. It is provided for transparency and is not a substitute for legal advice.

Who we are

Ground Control is built and operated by 1ZERO9 (“we”, “us”). For any privacy question or request, contact us at privacy@1zero9.com.

What data we collect

• Account data: the email address and password (stored as a salted hash, never in plain text) used to sign in.
• Household data: family/household name, and profiles you create for family members (name, short name, colour, avatar, role).
• Content you add: calendar events, sticky notes, tasks and reminders, and any details you enter against them (e.g. location, category).
• Technical data: a single session cookie used to keep you signed in (see “Cookies” below).

We do not collect payment information, precise location, or biometric data. We do not use advertising trackers or sell any data to third parties.

Why we process it

All data is processed solely to provide the Ground Control service to your household — i.e. on the basis of performance of a contract with you (GDPR Art. 6(1)(b)). Where we have a legitimate interest in keeping the service secure and working reliably (GDPR Art. 6(1)(f)), we rely on that instead.

Children's data

Ground Control is designed to be used by a household, and account holders may add profiles and calendar/task information relating to their own children. The account holder (an adult) is responsible for creating and managing any child profiles and for obtaining any consent required under local law. We do not knowingly allow children to create their own account.

Where data is stored

Data is stored in a managed PostgreSQL database and the application is hosted on Vercel. Depending on your region, data may be processed outside your home country; where that involves a transfer outside the EU/EEA, appropriate safeguards (such as Standard Contractual Clauses) are used by our infrastructure providers.

Cookies

We use exactly one cookie — gc_session — which is strictly necessary to keep you signed in. It is httpOnly, secure, and cannot be read by JavaScript or third parties. We do not use analytics or advertising cookies.

How long we keep data

We keep your household's data for as long as your account is active. If you'd like your account and all associated data permanently deleted, email us at privacy@1zero9.com and we'll action it within 30 days.

Your rights (GDPR)

If you are in the UK/EU, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• receive a copy of your data in a portable format;
• object to or restrict certain processing; and
• lodge a complaint with your local data protection authority.

Automated decision-making & AI

Ground Control does not use artificial intelligence, machine learning, or automated profiling to make decisions about you or your family. Everything shown in the app is data you or another household member entered directly. See our Terms & Disclaimer for more detail.

Changes to this policy

We may update this page from time to time. Material changes will be reflected in the “Last updated” date above.