Privacy Policy
This policy explains what One of One uses, why it uses it, and what you can do.
What you save
- Account: an owner ID and any limited information returned when you choose Sign in with Apple, which may include a private relay email.
- Companion life: goals, check-ins, proud moments, milestones, reflections, names, Bond, care history, reminder choices, and generated images or videos.
- Purchases: subscription, entitlement, and Sparks status from Apple, Google, and RevenueCat. One of One does not receive your full card details.
Supabase keeps account sign-in, database records, private storage, and server functions. Your companion data is private. When you use your phone's share sheet, One of One does not learn the destination.
App activity
Supabase records a limited set of app activity and outcomes, such as whether onboarding, saving, generation, purchases, or deletion worked. Its stable event IDs prevent the same event from being counted twice. These records never include your goal text, proud-moment text, pet name, journal text, images, videos, media links, or store receipts.
Invitation links and install measurement
AppsFlyer is the service that opens an invitation link and measures installs. It receives its own install ID, limited device, app, and network context, a privacy-protecting account code made from your account ID that cannot be turned back into that ID, and invitation-link, app-open, install, and activation signals.
Advertising IDs are disabled. Other platform identifiers and Apple search-ad collection inside AppsFlyer are disabled. Ad-partner sharing is disabled. AppsFlyer never receives your goal text, proud-moment text, pet name, journal text, images, videos, media links, or store receipts. We use it for invitation links and overall install measurement, not personalized ads.
Images you ask us to make
Before an optional new look, One of One explains what it will send and asks you to agree. If you say no, nothing is sent for image generation.
When you agree, One of One sends only the prompt text and companion image needed to make it to Atlas and BytePlus. No owner or account identifier is sent with the image request. Atlas may retain the request for up to 7 days. BytePlus handles it under its applicable terms, our service agreements, and legal duties.
If you ask for a Motion Memory, Fal.ai receives only the companion media and optional motion direction needed to make it.
We do not use a separate AI service to judge, score, or rewrite what you wrote.
Purchases and Apple install reports
- RevenueCat handles store purchases, subscriptions, and Sparks.
- Apple Ads may provide aggregate App Store attribution. This helps us understand overall installs.
Delete your account
In One of One, open Settings → Delete account. It takes two taps and does not require another Apple sign-in. One of One first gets accepted AppsFlyer deletion requests for iOS and Android. It then revokes saved Apple access when available and deletes your RevenueCat customer, private media, database records, and sign-in account.
Your One of One account data is gone when the app reports success. AppsFlyer may take up to 10 days to finish its own deletion. Deleting your account does not cancel a store subscription. Store companies may keep transaction records for billing, tax, refunds, fraud prevention, or legal duties.
A separate technical receipt can remain briefly so outside deletion work can finish. It does not contain your owner ID, the privacy-protecting AppsFlyer account code, Apple identity, token, email, or content, and it cannot lead back to your account. Read the account-deletion page for the full steps.
Your choices
You can skip optional generation, leave optional fields blank, restore purchases, manage subscriptions, or delete your account. We do not sell your personal data.
Children
One of One is not directed to children under 13. We do not knowingly collect personal information from them.
Contact
Questions or deletion requests: support@modudahakkoya.com.