Availability
Your One Thing is available on the App Store. App subscriptions and downloads are handled through Apple, not through this website.
Who is responsible
Your One Thing is operated by Luca Corsilli. For privacy questions or requests, contact luca.corsilli@gmail.com. This is the verified support and contact address currently used for the app.
Why data is used
Where the GDPR applies, the reasons for processing are separated by purpose:
- Support and requested service. We use support details to answer the request you send us and use account details to provide the account functionality you ask for. This also covers Pro synchronization and AI assistance you request. Where necessary for those steps, the legal basis is Article 6(1)(b) GDPR; other local laws may describe the same activity differently.
- Security and abuse prevention. We protect the support service with attestation, validation, and rate limiting. Purchase safeguards also prevent a purchase from being reassigned to another account. The legal basis is our legitimate interest in keeping the service secure and preventing purchase misuse (Article 6(1)(f) GDPR), balanced against your rights.
- Optional connections. Signing in for Pro cloud synchronization, connecting Apple Health, choosing Pal sharing, and allowing notifications are optional. We ask for the relevant app or operating system permission when needed. Where consent is the applicable basis, it is explicit, optional, and can be withdrawn in the app or system settings; withdrawal does not change processing that already occurred.
- Purchases. Apple handles App Store payment and purchase administration. The Pro service verifies Apple's signed purchase information and processes subscription updates to provide the access you purchase, under Article 6(1)(b) GDPR. Our verification records are separate from Apple's purchase records.
The website
The public website is a static marketing site. It does not include advertising pixels, optional analytics, social tracking, or a newsletter signup. Firebase Hosting and the services that deliver the site may receive standard technical request data such as an IP address, browser details, requested path, and time as part of serving and protecting the site. Those provider records follow the provider's infrastructure and retention terms.
The App Store link is a separate Apple service. When you follow that link, Apple's privacy terms apply to that visit and to any download or purchase.
Support requests
The support form asks for a reply email, a topic, a message, and confirmation that the details may be used to answer the request. The website sends those fields to the protected Firebase support service. The browser has no direct permission to write support data.
The support service stores the request in a restricted database so it can be reviewed and answered. It does not intentionally store the requester's IP address, User-Agent, attestation token, account identifier, or a separate profile. A short-lived in-memory rate limit is used to reduce abuse, and its key is not written to the database. Do not put passwords, health records, journal text, or other sensitive details in a support message.
Support details are scheduled for automatic deletion after 90 days. The deletion schedule can run later than that point. Provider logs and backups can have separate retention periods under Firebase and Google Cloud policies.
The app
Your One Thing is designed to work from the device first. You can begin without an account or network connection. Free includes the daily loop, notes, check-ins, and full on-device history, without artificial limits on notes or history. Manual entry and on-device text recognition remain Free. Signing out disables account synchronization without removing your local data.
When you create or use an account, the app may handle your email address, the sign-in provider you use, your display name when supplied, an account identifier, and other content you create in the app when those details are needed for the requested functionality. An account-linked device identifier may also be used for synchronization. These values are not used to build a public profile.
A device push token is stored only after you turn on optional Pal invitation alerts and allow the operating system notification permission. The app removes the token when it is disabled or when the account signs out where the active device can complete that cleanup. Pal invite alerts stay unavailable when you do not opt in.
On iOS, Apple Health is optional and read-only. Health data is used as context for an explainable suggestion when you choose to connect it. The app does not present a medical diagnosis or readiness score, and raw HealthKit samples, journal bodies, and private payloads are not sent to website analytics or included in logs or crash evidence.
Pro includes private cloud synchronization and recovery of plans, activities, journal notes, and check-ins. Signing in with an eligible Pro account enables this synchronization automatically, with no separate journal switch. Recovery depends on the data having synchronized successfully; a local entry that has never uploaded cannot be recovered from the account. Free keeps these records on the device. Pro cloud synchronization includes the Mind and Body states you report in check-ins: these are personal wellbeing information linked to your account, used to provide your private history and recovery. Raw samples read from Apple Health remain on the device and are excluded from cloud synchronization. The cloud service does not use your check-ins for advertising, analytics, or tracking.
Private Pal support is an optional Pro feature. It is not a public profile, follower system, feed, leaderboard, or group chat. The app supports one private connection at a time and uses pseudonymous identity by default.
Pro purchases and subscription updates
Our service verifies signed purchase information from Apple and links the verified subscription to your account. We store your account identifier, subscription product, current access status, whether the purchase is a test or live transaction, Apple's current and original transaction identifiers, purchase and original purchase dates, expiry and any revocation date, Apple's signing time, and verification and update times. Apple handles payment; this verification does not give us your payment card or bank account details.
Apple's subscription notifications help keep access current after renewals, expirations, refunds or revocations. The service verifies these notifications and retains their identifier, type and subtype, receipt and expiry times, processing status, and the associated current and original transaction identifiers and account identifier where available. These purchase-history records are used to provide Pro and prevent misuse, not for advertising, analytics or tracking. The signed purchase and notification payloads, receipts and account tokens are processed for verification but are not saved or logged by our purchase service.
Apple can send a subscription update before you link the purchase to an account. In that case, we keep the latest verified transaction details: current and original transaction identifiers, subscription product, test or live purchase status, purchase and original purchase dates, expiry, Apple's signing time and any revocation date, together with the update type, subtype and receipt time. This record has no account identifier yet, but it is purchase-related information, not anonymous data. When you later verify the purchase while signed in, we use this information to keep your access consistent with Apple's updates.
While the purchase remains unlinked, its latest transaction record is scheduled for deletion 90 days after the later of the verified subscription expiry and the first notification receipt. A later verified expiry can extend that schedule. Separate notification records that have no account link are scheduled for deletion 90 days after receipt; account deletion does not remove records that were never linked to that account. Automatic deletion can happen later than the scheduled date.
Account deletion removes your current Pro access record, transaction history and subscription-notification records linked to your account. Notification records are otherwise scheduled for deletion 90 days after receipt. A separate purchase-ownership record remains to prevent the same purchase from being claimed by another account. It contains your former account identifier, original transaction identifier, subscription product, test or live purchase status, first and last verification-seen times, account-deletion time and a retention end date. It remains linked information, not anonymous data. After account deletion, its retention end date is 90 days after the later of your verified Apple subscription expiry and your account-deletion date. The purchase cannot be claimed by another account during that period. Automatic deletion is scheduled after the retention end date and can happen later; it is not an exact deletion deadline. You can contact us about retention or your rights.
Service providers and locations
The website support flow uses Google Firebase services, including hosting, a protected support service, and an EU-hosted database. Google services may process technical data in other locations as described in their terms. Where required, international transfers rely on the safeguards in Google's applicable data processing terms, including the contractual transfer clauses described there. You can contact us for information about the safeguards applicable to your data. The App Store is operated by Apple.
The form includes Google reCAPTCHA Enterprise as an anti-abuse control. Google may process device and network interaction data, including an IP address, to provide that protection. We do not intentionally copy that information into the support request. See the Google Privacy Policy and Google Terms of Service.
Approximate location
The app can request foreground approximate location on the device to calculate local sunrise and sunset context for Plan. The coordinate is used for that calculation and is not saved or synchronized. Declining location keeps the rest of the product available; daylight context simply remains unavailable.
Capture assistance
Manual entry and on-device text recognition remain available to everyone. Pro includes optional AI completions without a monthly request allowance. Short-term rate limits protect the service against excessive requests. Manual Activity or Routine creation and the Free local features remain available when assistance is unavailable.
AI assistance starts off. When you enable the AI assist flag, it sends the Activity or Routine text after a pause in typing, together with the capture type, a reference date for scheduling, and your language setting using Gemini through Google Cloud Vertex AI's EU endpoint. It does not read your journal, check-ins, or Apple Health data. Avoid putting sensitive information in the text you choose to send. You can review and edit suggestions before saving.
The service stores short-lived account-linked request markers: an identifier, a fingerprint derived from the request, processing state, version, and creation, update and expiry times. A separate short-term request counter protects against excessive requests across server instances. These records support app functionality, not advertising, analytics or tracking. They do not contain the entry text or result. Our recognition service processes the text and result without saving them in request logs or a recognition history. An activity you choose to save becomes part of your app data and may sync with Pro. Google's processing can include temporary caching or abuse monitoring under its data governance terms. This is not a promise of zero retention by Google. Account deletion removes account-linked AI usage records, including their request markers. These records expire after at most 24 hours for completed requests; pending requests and burst counters use a five-minute expiry. Automatic expiry cleanup can occur later than the expiry timestamp. Legacy monthly usage records from the previous allowance remain until account deletion. The request fingerprint is not anonymous data.
Deletion and recovery
The app includes a protected account deletion flow in Settings. It requests deletion of your cloud account data and then removes the sign-in account. The purchase service has the purchase-ownership retention exception described above; do not assume account deletion will erase that record or Apple's own purchase records. Local device data has a separate erase control; use that control as well if you want to remove the local copy. Data that has never uploaded cannot be recovered through an account. Free local history remains available if Pro expires; expiration is not a request to erase your local notes or history. App Store purchases and subscriptions are managed separately by Apple; account deletion does not cancel an Apple subscription.
Your choices and rights
You can choose not to use the support form and email us instead. You can ask for access to, correction of, or deletion of your personal information by writing to luca.corsilli@gmail.com. Depending on where you live and the legal basis that applies, you may also have rights to restriction, objection, data portability, or to complain to your data protection authority. We will verify a request before acting on it so we do not disclose another person's information.
Privacy and service information
Firebase publishes its privacy and security information. Google Cloud publishes the Cloud Data Processing Addendum that governs customer data processing where applicable. Google also publishes its Privacy Policy and Terms of Service. The GDPR text and rights referred to here are available from EUR-Lex.
Changes
If the website, support flow, or app data behavior changes materially, this page will be updated with a new date. Changes to how your information is used are explained before new processing begins, with additional permission requested where needed.