Privacy Policy
Last updated: July 19, 2026
Who we are
Qzero is the advisory practice of Oscar Caducén, operating at questionzero.ai. For anything in this policy, write to contact@questionzero.ai.
What this website processes
- The contact form — name, email, company, and your message. It is delivered to us as email and used for one purpose: responding to you. It does not enter a marketing list. To keep the form usable, we use Cloudflare Turnstile as abuse protection. Turnstile checks that a submission comes from a real browser and may, when needed, ask you to tick a box — never an image puzzle. To do this Cloudflare processes technical signals about your browser and connection (such as IP address, browser characteristics and the page's address) on our behalf, to protect the form; it does not read what you write in the form. Cloudflare also uses such signals for its own documented purpose of improving Turnstile's bot detection, as an independent controller — see Cloudflare's Turnstile Privacy Addendum. If the check cannot be completed, the form does not send — you can always write to contact@questionzero.ai instead.
- The free guided path (/start) — what you write on the path is not sent to us; the path makes no network calls with your content. A page you choose to keep, or a path you save to continue later, is stored in your own browser's local storage — saved by your tap, never automatically. You remove it through the path itself or by clearing the browser's storage. The path also keeps a local round counter (the key
qzero-walk-cycles-v1): a count of completed rounds plus a random technical ID that only prevents double-counting — never anything you wrote. It is written automatically when a round completes, never leaves your browser, and disappears when you clear site data. The details are in the cookie policy. - Your language choice — kept in your own browser's local storage. It never leaves your device.
- Hosting logs — our hosting provider keeps standard server logs (IP address, user agent) for operation and security, as virtually every website does.
What this website does not do
No tracking cookies. No audience measurement or marketing analytics. No advertising. No marketing profiling. We do not sell personal data or share it for advertising or marketing; technical signals are disclosed to Cloudflare solely for the Turnstile purposes described above. The one third-party check on this site is Cloudflare Turnstile's security check on the contact form, described above; it exists to protect the form, and information about that check may appear in Cloudflare's security analytics. Nothing else on this site measures you.
Advisory engagements
Material shared within an advisory engagement is confidential, governed by the engagement agreement, and never passes through this website. The conversation is confidential — from the first message onward.
Legal basis and retention
We process contact-form messages on the basis of legitimate interest (answering you). Correspondence is kept as ordinary business records. What you write on the free guided path is not sent to us and is therefore not processed by us.
Service providers
Three providers process data on our behalf: Resend (email delivery), Vercel (hosting), and Cloudflare (DNS, email routing, and the Turnstile abuse check on the contact form). For the Turnstile check, Cloudflare additionally processes technical signals for its own documented purpose, as described under the contact form above. Where processing occurs outside the EU/EEA, it is covered by GDPR-recognized safeguards such as standard contractual clauses.
Your rights
Under the GDPR you may request access to, correction of, or deletion of your personal data, object to processing, and withdraw consent at any time. Write to contact@questionzero.ai. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
The Qzero app
The Qzero app for iOS is built so that Qzero cannot see what you do in it. The app has no account, no login, and no Qzero server behind it.
What you write is stored on your device
Your pages, drafts, and Briefs are stored locally on your iPhone. The app does not send what you write to any Qzero service, and Qzero does not store your content from the app.
Backups follow your Apple settings
Depending on your settings, app data may be included in your device or iCloud backup. The backup is handled by Apple according to your settings. Qzero has no access to it.
Sharing is your act
An exported page or Brief leaves the app only when you choose to share or save it. From that point, the file is handled by the service or destination you chose.
The purchase is handled by Apple
The depth is bought through the App Store. Apple processes the payment under its own privacy policy.
Apple may provide Qzero with sales and transaction information about the purchase. Through the purchase, Qzero does not gain access to your name, your email address, your payment details, or what you have written in the app.
The reflection runs on the device
When you use the depth's reflection, your text is processed by Apple's model on your device. The text is not sent to Qzero or to any external AI service.
No tracking in the app
The app contains no analytics, crash reporting, advertising, or tracking of its own, and no third-party SDKs.
This is not just a promise layered onto machinery. No such machinery exists in the app.
Contacting us is your choice
The "Contact Qzero" links open your mail app. Qzero receives your email address and the content of your message only when you choose to send it.
Deletion in the app
"Delete everything" in the app's settings removes the app's locally stored pages, drafts, Briefs, and temporary export files from the device.
Since Qzero holds no copy of the content, there is no corresponding content to delete at ours. Files you have previously exported, and data held in backups, are not affected by deletion in the app. They are handled where they were saved.
Changes
If this policy changes, the date at the top changes with it. We will never quietly expand what is collected.