ZAAG Intelligence Privacy Policy
ZAAG INTELLIGENCE 4-Week Trial — Privacy Notice
This notice supplements the ZAAG Privacy Policy (zaagsupplements.com/pages/privacy-policy). It explains how we collect, use, and protect your data specifically in connection with the ZAAG Intelligence 4-Week Trial. Please read it before completing the pre-trial questionnaire.
Last updated: 20th April 2026
Who we are.
Restore Labs Ltd (ZAAG.) is the data controller for the information collected during this trial. If you have questions about how your data is handled, contact us at support@zaag.co.
What data we collect.
During the trial, we collect three categories of data:
1. Questionnaire data. Information you provide in the pre-trial questionnaire, including: your age, weight, gender, training habits, sleep and recovery goals, current supplement and caffeine use, medical history, medications, and availability for the trial period. Some of this information — particularly medical history and medications — is classified as special category data under UK data protection law.
2. Wearable biometric data. Data from your Whoop or Oura device that you connect to the ZAAG Intelligence app, including: heart rate variability (HRV), resting heart rate, sleep duration and architecture (REM, deep sleep, light sleep, awakenings), respiratory rate, skin temperature, and daily strain or recovery scores. This data is accessed via the Whoop or Oura API with your permission and is classified as health data.
3. Self-report data. Your responses to daily check-in questions within the ZAAG Intelligence app, including: subjective energy levels, caffeine intake, emotional state, and other short questions about your day. Over the course of the trial, this may also include feedback on protocols and recommendations.
Why we collect it and the legal basis.
We use your data for three purposes:
To run the trial and provide personalised recommendations. Your questionnaire responses help us assess suitability for the trial and tailor your experience. Your wearable and self-report data powers the ZAAG Intelligence recommendations you receive during the trial — ZAAG shot timing, protocol suggestions, training adjustments, and daily insights. The legal basis for processing your personal data for this purpose is your consent (UK GDPR Article 6(1)(a)).
To process your health data specifically. Medical history, wearable biometric data, and health-related self-report data are special category data under UK GDPR Article 9. We process this data on the basis of your explicit consent (Article 9(2)(a)), which we ask for separately before you submit the questionnaire. You can withdraw this consent at any time (see "Your rights" below).
To analyse trial outcomes. We use aggregated, non-identifiable data to analyse how the trial group responded as a whole — patterns in recovery, sleep quality, HRV changes, protocol compliance, and similar measures. This analysis helps us improve the product and the intelligence layer. No individual is identifiable in this aggregated data. The legal basis for this processing is our legitimate interest in product development (UK GDPR Article 6(1)(f)).
Who has access to your data.
Your personal data is accessible only to the ZAAG team directly involved in running the trial. We do not share your personal data with any third parties. This includes:
- No sale of data to advertisers, brokers, or data companies.
- No sharing with supplement industry partners, research institutions, or media.
- No sharing with Whoop, Oura, or any other wearable manufacturer beyond the standard API connection you authorise.
If this position ever changes in the future, we will seek your explicit consent before any data is shared.
Aggregated, non-identifiable data (from which no individual can be identified) may be used in published trial results, marketing materials, or product development documentation. This data cannot be traced back to you.
How we store and protect your data.
Your data is stored securely on encrypted servers. Access is restricted to authorised ZAAG team members. We use industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews.
Wearable data is accessed via authenticated API connections to Whoop and Oura. We do not store your Whoop or Oura account credentials. The API connection can be revoked by you at any time through the ZAAG Intelligence app or directly through your Whoop/Oura account settings.
How long we keep your data.
During the trial: All three categories of data are retained in identifiable form for the duration of the trial and for a reasonable period afterwards (up to 90 days) to complete analysis and follow-up.
After the trial — if you continue with ZAAG Intelligence: If you are granted continued access to ZAAG Intelligence (e.g., through the conditional access offer for trial completers), your data remains active and identifiable for as long as you use the service. You can request deletion at any time.
After the trial — if you do not continue: Your data will be anonymised within 90 days of the trial ending, unless you request earlier anonymisation. Anonymised data is retained as part of the aggregated trial dataset and cannot be linked back to you.
If you request anonymisation at any point: You can request that your data be anonymised at any time during or after the trial. We will anonymise your identifiable data within 30 days of your request. Once anonymised, the data cannot be restored to identifiable form. Your anonymised data will remain part of the aggregated dataset.
Your rights.
Under UK data protection law, you have the right to:
Access your data — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate data.
Erasure — request deletion of your personal data. Note: if your data has already been included in the anonymised aggregate dataset, the anonymised portion cannot be removed (as it is no longer personal data).
Withdraw consent — you can withdraw your consent to the processing of your health data at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent during the trial, we will stop processing your health data and your participation in the trial will end. You can withdraw consent by contacting us at support@zaag.co or through the ZAAG Intelligence app.
Data portability — request your data in a structured, machine-readable format.
Object — object to processing based on legitimate interest (aggregated analysis).
To exercise any of these rights, contact support@zaag.co. We will respond within 30 days.
Consent.
Before submitting the pre-trial questionnaire, you will be asked to confirm:
"I consent to ZAAG Supplements Ltd collecting and processing my health data (including medical history, wearable biometric data, and health-related self-report data) for the purposes described in the ZAAG Trial Privacy Notice. I understand that I can withdraw this consent at any time by contacting support@zaag.co."
This consent is required to participate in the trial. It is separate from any general terms or marketing preferences.
Questions.
If you have any questions about how your data is handled during the trial, contact us at support@zaag.co.
ZAAG Supplements Ltd - 71-75 Shelton Street, London, WC2H 9JQ Company number: 12570468
This notice should be read alongside the ZAAG Privacy Policy at zaagsupplements.com/pages/privacy-policy. Where there is any conflict between this notice and the main privacy policy regarding trial data, this notice takes precedence.