Last Updated: August 5, 2026
Welcome to Burnout Zero ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our burnout prevention application and services.
Burnout Zero is operated by Xonitech AB (org.nr 556680-3390), Gosvägen 7, Hammarö, Sweden. Xonitech AB is the data controller for the personal data described in this policy, and is who "we" refers to throughout.
We collect the following types of information:
Account Information
Name, email address, password (encrypted), and profile information you provide during registration.
Wellness Data
Daily check-in data including energy levels, mood ratings, sleep quality, activities (boosters and drainers), notes, and emotion tags.
Health and Fitness Data (Optional, Mobile App)
If you use our mobile app and explicitly grant permission, we read the following health and fitness data from Apple Health (HealthKit) on iOS or Health Connect on Android:
• Sleep duration
• Step count
• Active minutes from recorded exercise sessions
• Heart rate variability (HRV)
• Mindful minutes (iOS only)
This access is read-only — we never write data back to Apple Health or Health Connect. It is entirely optional: the app works without it, we only read this data after you grant permission on your device, and you can revoke that permission at any time in iOS Settings or the Health Connect app, which stops all further reading immediately. See Section 3 for how this data is used and Section 5 for the strict limits on sharing it.
Calendar Information (Optional)
If you choose to connect your Google Calendar or Microsoft Outlook Calendar, we access meeting schedules and event data to analyze meeting load and schedule focus time blocks.
Usage Data
On our website, we measure aggregate page visits using our own self-hosted analytics (Section 9). In the mobile app, we record the actions you take in the product itself, such as completing a check-in or logging an activity, so that the app can show you your history, streaks, and insights. The mobile app contains no third-party analytics, advertising, or tracking software.
Device Information
On our website, we record your browser type and IP address. In the mobile app, we record your device's operating system, the app version, your time zone, and your IP address, together with a randomly generated installation identifier used to deliver push notifications and app updates. Your IP address is recorded by our authentication system alongside each sign-in session. We do not collect GPS or precise location data, and the mobile app never requests location permission.
We use your information to:
• Provide and maintain the Burnout Zero service
• Calculate your burnout score and track wellness metrics over time
• Generate AI-powered insights and personalized recommendations using third party LLM services
• Analyze patterns in your energy levels, activities, and calendar to help prevent burnout
• Use health and fitness data you have chosen to share (see Section 2) solely to calculate your burnout score and personalize your own recovery insights. We do not use health data for advertising, we do not sell it, and we do not use it to make decisions about you on behalf of any third party, including your employer.
• Send you check-in reminders and notifications (if enabled)
• Improve our services and develop new features
• Respond to your requests, questions, and provide customer support
• Ensure the security and integrity of our services
• Comply with legal obligations
We use third-party LLM services to generate personalized insights from your wellness data. We do not send your name, email address, or account identifiers to these providers. Text that you write yourself is sent as you wrote it. This includes the names you give to activities and, if you have connected a calendar, meeting titles and descriptions, which are used to classify your meetings. Text like that can incidentally contain personal details, so we describe it as carrying no direct identifiers rather than as anonymous.
Health and fitness data read from Apple Health or Health Connect (Section 2) is not sent to third party LLM providers. It is used only by our own burnout score calculation on our own infrastructure.
We do not sell your personal information. We may share your information only in the following circumstances:
Service Providers
We share data with trusted third-party service providers who help us operate the service. Which ones apply depends on how you use Burnout Zero.
Website and mobile app: third-party LLM services for AI insights (Section 4), and Google or Microsoft if you choose to connect a calendar.
Mobile app only:Expo, which operates the push notification service. Expo receives a push token for your device and a randomly generated installation identifier, so that notifications can reach you. It does not receive your wellness, health, or calendar data. On Android, delivery also passes through Google's Firebase Cloud Messaging; on iOS, through the Apple Push Notification service.
Website only: Stripe for payment processing, Sentry for error monitoring, and, only with your cookie consent, the analytics and marketing tools described in Sections 9 and 10. None of these run in the mobile app, which contains no error-reporting or analytics software.
Reminder and transactional emails are sent from our own mail server on our own infrastructure, not through a third-party email provider.
Health and Fitness Data — Additional Limits
Health and fitness data read from Apple Health or Health Connect is subject to stricter limits than the categories above. We do not sell it, we do not use it for advertising or marketing, we do not transfer it to data brokers or information resellers, and we do not share it with third party LLM providers. Your individual health data is never shared with your employer and is never exposed in the aggregate team reporting available to organizations. Where you belong to an organization and have consented to aggregate reporting, only privacy-thresholded, team-level indicators derived from your overall burnout score are visible — never the underlying health measurements themselves, and never at an individual level. It is otherwise used only to provide the service to you.
Legal Requirements
We may disclose your information if required by law, court order, or governmental authority.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
With Your Consent
We may share your information with your explicit consent.
We implement industry-standard security measures to protect your data, including: encryption of data in transit (HTTPS/TLS), encrypted password storage, secure database access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and data at any time through your account settings or by contacting us. Some information may be retained for legitimate business purposes or legal compliance after deletion.
Health and fitness data (Section 2) is retained only while your account is active. Deleting your account — which you can do yourself from within the mobile app or on the web — permanently deletes your stored health data along with it. Health data is also included in the data export you can request under Section 8, so you can see exactly what we hold. Revoking health permissions on your device stops any further data being read immediately; delete your account if you also want the previously synced data removed.
Depending on your location, you may have the following rights regarding your personal data:
• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain data processing activities
• Restriction: Request restriction of processing in certain cases
To exercise these rights, please contact us at the email address provided below. To delete your account and all associated data, see Delete Your Account, which explains every route available to you and exactly what is removed.
We use essential cookies to maintain your session and provide core functionality. These cookies are necessary for the application to function and cannot be disabled.
With your consent (via the cookie banner), we additionally use analytics and marketing cookies:
Microsoft Clarity (analytics)
Heatmaps and session recordings on our public marketing pages, to understand how visitors use the site. Clarity sets cookies and only loads after you accept analytics cookies. It is never loaded for signed-in users, so your in-app activity and wellness data are never visible to it.
HubSpot (marketing & support chat)
Visitor tracking and our support chat widget. HubSpot sets cookies and only loads after you accept analytics cookies. For signed-in users who have consented, we identify you to HubSpot by email address only — never with your wellness, check-in, or calendar data.
If you reject the banner, only essential cookies are set. You can change your choice at any time via “Cookie settings” in the footer.
We also measure aggregate product usage with Umami, a self-hosted, cookieless analytics tool. Umami does not set cookies, does not use advertising identifiers, and its data stays on our own infrastructure. We do not use third-party advertising networks.
Our application integrates with third-party services, each with their own privacy policies:
• Google Calendar (for calendar integration)
• Microsoft Outlook Calendar (for calendar integration)
• Apple Health / HealthKit (iOS mobile app — an on-device source we read from with your permission; we do not send any data to Apple through it)
• Health Connect (Android mobile app — an on-device source we read from with your permission; we do not send any data to Google through it)
• Third party LLM services (for AI-generated insights)
• Stripe (payment processing — we never store your full card details)
• Microsoft Clarity (website only, marketing-site analytics, consent-gated, anonymous visitors only; see Section 9)
• HubSpot (website only, marketing analytics and support chat, consent-gated; see Section 9)
• Sentry (website and backend error monitoring, receives technical crash and error diagnostics; session replay is disabled and we do not send your wellness data. Not present in the mobile app.)
• Umami (website only, product analytics, self-hosted on our own infrastructure, cookieless; no data leaves our servers)
• Expo (mobile app only, push notification delivery; see Section 5)
When you use these integrations, you are also subject to their respective privacy policies.
Burnout Zero is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your country. We ensure appropriate safeguards are in place to protect your information.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@burnoutzero.com
Xonitech AB
Gosvägen 7, Hammarö, Sweden
Org.nr: 556680-3390 · VAT: SE556680339001
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). We process your personal data based on your consent, contractual necessity, and our legitimate interests in providing and improving our services.
Health and fitness data (Section 2) is a special category of personal data under Article 9 GDPR. We process it solely on the basis of your explicit consent, given when you grant health permissions on your device (Article 9(2)(a)). We do not rely on legitimate interests for this category of data. You may withdraw that consent at any time by revoking the permission in iOS Settings or the Health Connect app, which stops all further processing; see Section 7 for deletion of data already collected. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and the rest of the service continues to work without health data.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt-out of the sale of personal information (note: we do not sell personal information).