Legal

Privacy Policy

Last updated: 14 August 2026

ZenFlo helps you manage ADHD at work, so some of what you log here is personal. This policy explains what we collect, why, and how it's protected.

1. Who We Are

ZenFlo is operated by Cambrian Digital (Big Bulldog UK Ltd), based in Wales, United Kingdom. We are the data controller for the information described in this policy. You can reach us at hello@zenflo.co.uk.

2. Information We Collect

To provide the ZenFlo service, we collect:

3. How We Use Your Information

We use your information to:

4. Data Storage & Security

Your data is stored securely in a PostgreSQL database hosted on Railway. Passwords are encrypted and never stored in plain text. We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse.

5. Sharing Your Information

We do not sell your personal data. We share information only with the third parties needed to run ZenFlo:

We may also disclose information if required by law.

6. Your Rights (UK GDPR)

Under UK data protection law, you have the right to access, correct, or delete your personal data, and to request a copy of the information we hold about you. To exercise any of these rights, email hello@zenflo.co.uk.

7. Data Retention

We keep your account data for as long as your account is active. If you delete your account, we will remove your personal data within a reasonable period, except where we're required to retain records for legal or accounting purposes.

8. Cookies & Analytics

ZenFlo uses essential cookies needed to keep you signed in and remember your session. We also use Google Analytics and Google Ads measurement to understand how people find and use ZenFlo, whether a signup is completed, and whether our advertising is effective. These services may set analytics or advertising cookies and receive technical information such as your device, browser, approximate location and the pages or actions you use.

You can restrict or delete these cookies through your browser settings. You can also use Google's advertising and analytics controls to limit how Google uses this information.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, contact us at hello@zenflo.co.uk.

Optional PostHog analytics and session replay

With your permission, PostHog in the EU receives named product actions and anonymous browser/session identifiers. Text is masked, inputs and private content are excluded, and console/network capture is disabled. We do not send names, emails, phone numbers, messages, tasks, notes or wellbeing values as event properties. Replay excludes private product areas. Choose Analytics choices to withdraw consent at any time. DNT and GPC are respected. Existing Google tracking is managed separately.