Legal

Privacy

Who we are

MRR Zero lists Zero MRR apps so other developers can pitch to take them over. This page explains what personal data we hold and why. Questions or requests go to mark@mrrzero.com.

What we collect

  • Your account: email address, display name and profile photo from Google or the email you sign in with, plus the handle, bio and links you add.
  • What you post: listings, pitches, comments, votes, follows, transfer messages and check-ins, with timestamps.
  • Sign-in codes: when you sign in by email we store a hashed copy of the code for 10 minutes.
  • Rate limiting: your IP address, held in daily counters that limit sign-in attempts and free checks.
  • Store data: public App Store and Google Play details of apps you list or check, such as name, description, ratings and screenshots.

How we use it

  • To run your account, show your public profile and posts, and run listings, pitches and transfers.
  • To send the notifications and emails you've chosen. You can turn them off in Settings.
  • To score apps. Public store details and screenshots are sent to an AI model to estimate opportunity. Your account details are not.
  • To keep the service safe: rate limits, moderation and an audit log of listing and transfer actions.
  • Our legal basis under UK GDPR is providing the service you signed up for and our legitimate interest in keeping it safe.

What's public

Your handle, display name, photo, bio, links, track record, listings, pitches and comments are visible to anyone. Your email address is never shown to other members, and transfer rooms are visible only to the two people in the transfer and admins.

Who we share it with

  • Google Firebase and Google Cloud host the site, accounts and database.
  • Resend sends our emails.
  • Anthropic's Claude scores apps from public store details.
  • We don't sell your data, show ads or use tracking cookies.

Cookies

We set one essential cookie, __session, to keep you signed in. There is no analytics or advertising tracking.

How long we keep it

We keep your account and posts while your account is open. Sign-in codes expire after 10 minutes. If you ask us to delete your account, we remove your profile and posts, except where we need records of a transfer or a moderation decision.

Your rights

You can ask for a copy of your data, or ask us to correct or delete it, by emailing mark@mrrzero.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

Apps you take over

When an app transfers, any user data that comes with it is between the old and new owner. The new owner becomes responsible for it under privacy law. See the Terms.

Last updated 22 October 2026.