OneUp · Effective: October 1, 2026 · Last updated: October 1, 2026
OneUp (“we”, “us”) is a personal growth app that helps you choose one meaningful action per day, with coaching from our companion Omi. This policy explains what we collect, why, and your choices.
Account — When you sign in with Google or Sign in with Apple: email (or Apple private relay), display name when provided, and a user ID from our auth provider (Supabase).
Profile & preferences — Locale, timezone, coaching style, notification preferences, and similar settings you choose.
Goals & daily activity — Goals, planned actions, today’s OneUp selection, completions, skips, energy check-ins, and related timestamps.
Reflections & memory — Evening reflections (mood, lessons, blockers) and structured “User Model” notes used to personalize future recommendations.
Companion / Bond — Soft companion state tied to your use of the app (not a public social profile).
Device push token — So we can send optional morning / evening / smart reminders via Apple Push Notification service (APNs).
Technical logs — Limited server logs needed to run and secure the service (e.g. auth errors). We do not sell advertising profiles.
2. How we use data
Provide the app: sign-in, sync your goals and daily OneUp, show Progress / Goals / Account.
Personalize recommendations and Omi copy (rules ranking + server-side AI wording).
Send push notifications you allow.
Security, abuse prevention, and troubleshooting.
Comply with law when required.
We do not sell your personal data. We do not use your data for third-party advertising. We do not track you across other companies’ apps or websites for advertising (no App Tracking Transparency advertising use).
3. AI processing
Some coaching text and reasons are generated by a large language model called from our secure server (Supabase Edge Functions). Relevant structured context (for example goal titles or reflection signals needed for that request) may be sent to the model provider to produce that text. Providers process data under their terms as our processors. Model output is used to help you inside OneUp — not to build ads.
4. Processors & subprocessors
Supabase — Authentication, database, and Edge Functions hosting.
Google — Sign in with Google (if you choose it).
Apple — Sign in with Apple (if you choose it) and APNs for push.
AI model provider — Server-side wording / structured coach payloads (keys never shipped in the iOS app).
5. Retention
We keep your account data while your account exists. You may delete your account in-app (Account → Delete account). Deletion removes your app data we control and deletes your auth user; Apple token revoke is attempted when applicable. Backups may take a short time to expire.
6. Your choices
Sign out or delete your account in the app.
Control notification permission in iOS Settings.
Contact us to ask questions about this policy.
7. Children
OneUp is not directed at children under 13. Do not create an account if you are under 13.
8. International transfer
Our providers may process data in the United States or other countries. By using OneUp you understand your data may be processed outside your country of residence with appropriate safeguards used by those providers.
9. Changes
We may update this policy. We will change the “Last updated” date above. Continued use after an update means you accept the revised policy.