Privacy Policy

This Privacy Policy explains how A1C PTE. LTD., a company incorporated in Singapore ("0spike", "A1C", "we", "us"), collects, uses, and protects your personal information when you use the 0spike website (the "Site"). A1C is the data controller responsible for your information. 0spike products are made in Malaysia by A1C SDN. BHD. [202501051906 (1653313-T)] and distributed in Indonesia by PT Metabolik Sehat Indonesia; if you place an order, the selling entity for your region also processes your order details to fulfil it. By using the Site, you agree to this Policy.

1. The short version

The Site no longer collects your name or contact details. You can read about 0spike and take our glucose quiz without giving us anything, and the quiz answers stay in your browser. If you arrive through an affiliate link, we keep that affiliate's referral code in your browser so their referral can be credited. We use Google Analytics to count visits and see which pages people read, which sets cookies in your browser. We do not run advertising cookies, we do not track you across other companies' websites, and we never sell your information. If you pre-order, checkout happens on our Shopify-hosted store under its own policies.

2. Information we collect

Nothing you have to type. The Site has no sign-up form. We do not ask for your name, email address, phone number, or payment details anywhere on it.

Glucose quiz. If you take the glucose quiz on our homepage, your answers are used in your browser to show you your result. We do not send them to us or store them, and they are gone when you close the page.

Basic technical data. Like any website, our hosting and security provider automatically processes limited technical information needed to deliver and protect the Site, such as your IP address, approximate location, browser and device type, and the pages you request. This is used to serve the Site and guard against abuse, not to build a profile of you.

Affiliate referral codes. Our affiliates and partners share links that carry a referral code in the web address. If you arrive through one, we store that code in your browser's local storage for up to 30 days and add it to the store link if you go on to pre-order, so the affiliate is credited for the referral. The code identifies the affiliate, not you. It is stored only on your own device, we do not use it to build a profile of you or follow you across other websites, and you can remove it at any time by clearing site data in your browser.

Ordering on our online store. Pre-orders are placed on our online store, which is hosted by Shopify on its own domain. The details you enter at checkout (name, contact, shipping address, payment) are collected there and handled by Shopify and our payment providers under the store's own policies. Payment details never pass through this Site.

Analytics. We use Google Analytics 4 to understand how the Site is used: pages viewed, which language version, roughly where in the world you are, what kind of device you are on, and which site or affiliate link sent you. Google sets cookies in your browser to recognise a returning visit and processes your IP address to estimate your location. We do not use it to identify you personally, and we do not combine it with anything you tell us elsewhere.

We do not run advertising cookies, tracking pixels, session recording, or third-party marketing trackers on the Site.

3. How we use your information

We use the limited information described above to:

• credit the right affiliate if you arrived through a referral link;
• respond to you if you get in touch; and
• operate, secure, and improve the Site.

We do not use your information for automated decisions that produce legal or similarly significant effects.

4. Legal basis

We rely on our legitimate interest in running, securing, and improving the Site, and in crediting our affiliates fairly. Where we hold information you gave us earlier (see section 5), we rely on the consent you gave at the time, which you can withdraw whenever you like. Withdrawing consent does not affect processing we carried out before you withdrew it.

5. If you joined our waiting list before

Until July 2026 the Site offered a waiting list, and some people gave us a name, WhatsApp number, and country to join it. That form has been removed and we no longer collect those details. We still hold the entries submitted while it was running, and we use them only to message you on WhatsApp about 0spike availability and founding-member offers, as we said we would when you signed up. Those messages travel via our messaging provider and WhatsApp; your use of WhatsApp is subject to WhatsApp's own terms and privacy policy, and standard carrier charges may apply. You can stop them at any time by replying to ask us to stop, or by emailing care@0spike.com, and you can ask us to delete your entry entirely at the same address.

6. Cookies and tracking

The Site sets analytics cookies through Google Analytics 4 (named _ga and _ga_5B15XBM4C8), which let Google tell a returning visit from a new one and group page views into a session. They expire after two years and you can clear them at any time in your browser settings, or block them with a browser setting or extension; the Site works normally without them. The Site does not set advertising cookies and does not use cross-site profiling. The one thing we do keep in your browser is the affiliate referral code described above, in first-party local storage for up to 30 days, and only if you arrived through an affiliate link. Our infrastructure provider may use strictly necessary cookies or similar mechanisms to keep the Site secure and running; these are not used to track you for marketing. The Site also embeds a short product video streamed by Cloudflare; the video player processes limited technical data (such as your IP address and playback events) to deliver the video, and we do not use it to identify or profile you.

7. Service providers we share with

We share your information only with the service providers that help us run the Site, under agreements that require them to protect it and use it only on our instructions. These are currently:

• Google Analytics to measure how the Site is used, as described in section 6;
• Google Workspace (Google Sheets) which still holds the waiting-list entries described in section 5;
• Shopify to host our online store and process orders placed there;
• BixGrow to run our affiliate programme; it reads orders placed through an affiliate's referral so we can credit that affiliate's commission;
• Cloudflare to host, deliver, and secure the Site (including streaming the product video); and
• our email and workspace providers (for example Google Workspace and Mailgun) if you contact us by email.

We do not sell your personal information, and we do not share it for third-party advertising. We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, or property of A1C, our users, or others.

8. International transfers

A1C is based in Singapore, and our service providers operate globally, so your information may be stored and processed in countries other than where you live, including the United States. Where personal data is transferred across borders, we take reasonable steps to ensure it receives a standard of protection comparable to that required under applicable law, including through our contracts with those providers.

9. How long we keep it

We keep the earlier waiting-list entries described in section 5 for as long as needed to contact you about availability and for a reasonable period afterward, unless you ask us to delete them sooner. When we no longer need information, we delete or anonymise it.

10. How we protect it

We use reasonable technical and organisational measures to protect your information, including reputable providers, encryption in transit, and limiting access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your choices and rights

You can ask us to access, correct, update, or delete your personal information, to restrict or object to certain processing of it, to stop messaging you, or to withdraw your consent, at any time. To do any of these, email care@0spike.com and we will respond within a reasonable time. Depending on where you live you may have additional rights, and you may lodge a complaint with your local data-protection authority. We handle personal data in line with Singapore's Personal Data Protection Act, and, for users in Indonesia and Malaysia, consistently with Indonesia's Personal Data Protection Law and Malaysia's Personal Data Protection Act.

12. Children

The Site is for people who are at least 18 years old, or the age of majority where they live if that is higher. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows when it last changed. Material changes take effect when we post the updated Policy on the Site, and your continued use of the Site after that means you accept the update.

14. Contact us

Questions about your privacy or this Policy, or want to exercise a right? Email us at care@0spike.com.