Privacy Policy

Last updated: September 21, 2026

In short

• We read the sources you connect only to show you what to do next and to answer your questions.
• We never sell your data, never use it for ads, and never use it to train AI models.
• Our logs contain no email, task, calendar or chat content — only technical identifiers and error codes.
• You can export everything we store about you, and delete all of it, from Settings at any time.

What we collect

• Account info: your email address, name and profile picture, via Clerk (our authentication provider).
• What you create in OneThing: tasks, session notes, goals, people you add to Relationships, sticky notes, links, and the actions you take on cards (done, later, delete).
• Gmail(if you connect it): by default we read email metadata — sender, recipients, subject, date, labels and Gmail's short preview snippet. If you turn on Full Gmail in Settings, we can also search all your mail, read a full email when you ask the assistant about it, save drafts you approve, and archive, star or label emails when you ask. We never send an email without your explicit confirmation in the chat.
• Google Calendar (if you connect it): event titles, times, location, attendees and descriptions, to show your day and find free time. The assistant can create, move or delete events when you ask it to.
• Google Tasks and Todoist (if you connect them): task titles, due dates, priorities and projects, and changes you make through OneThing.
• Screen Time and Apple Health (only if you set them up): daily totals and top apps, steps and sleep, sent by the shortcut or script you install.
• Chats with the assistant: the text and images you send, and the assistant's replies. Voice sessions stream your audio for transcription and replies.
• Technical data: app version, device platform, pseudonymous usage events (e.g. “a card was completed”, without the card's content) and error reports. We do not track you across other apps or websites.

Why we use it

To run the product: rank what needs your attention, show your day, write your weekly list, and answer what you ask the assistant. We do not sell your data and do not use it for advertising or for any purpose other than operating and improving OneThing.

AI processing

Ranking your tasks, the weekly list and the assistant use AI models from third-party providers. We send only what a feature needs, and we minimise it first:

• Senders and recipients are sent as a name or domain (e.g. “OSW”), not as email addresses.
• Email previews are shortened. A full email is sent only when you ask the assistant about that email or ask it to draft a reply.
• To spot promises you made (“I'll send it Friday”), only the sentences that look like a promise are taken from your recent sent mail — not the whole email. This runs only with Full Gmail.
• The assistant sees a capped summary of what it remembers about you, your session notes, and the item you attached; chat history is limited to the most recent messages.
• The assistant can open a web link only if you pasted that link yourself; internal and private network addresses are always blocked.

• Anthropic (Claude) — task ranking, weekly list, text assistant. anthropic.com/privacy
• OpenAI — real-time voice assistant (your audio, transcripts, and the minimised context above). openai.com/privacy
• ElevenLabs — turns the assistant's replies into speech (reply text only, capped in length). elevenlabs.io/privacy

These providers process data through their business APIs, which do not use API data to train their models, and they keep it only for their limited API retention periods. Your OAuth tokens and passwords are never sent to any AI provider.

Google API data — Limited Use

OneThing's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not use Google user data to develop, improve or train generalised or third-party AI/ML models.
• We do not transfer Google user data to third parties except as necessary to provide these features (the processors listed below), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
• We do not use Google user data for advertising, and we do not sell it.
• We do not allow humans to read Google user data, except with your explicit consent for a specific support request, for security purposes, to comply with applicable law, or when the data is aggregated and anonymised for internal operations.

Google permissions we request

• openid, email, profile — to sign you in and show your name and photo.
• gmail.metadata — to read sender, recipients, subject, date, labels and preview snippets.
• Full Gmail (optional, only if you turn it on) — to search all mail, read full emails you ask about, save drafts, and archive, star or label emails on your request.
• calendar — to read your events and create, update or delete events you ask for.
• tasks — to read and update your Google Tasks.

How long we keep data

• Your ranked task list: about 2 minutes (then re-ranked).
• Email insights (unanswered threads, promises): up to 1 hour; your “resolved/skip” choices up to 30 days.
• Dashboard card snapshots: 7 days. Weekly list: 8 days. Session notes: 7 days after your last note.
• Subscription overview (from receipts): up to 30 days after the last scan.
• Screen Time and Health: 90 days.
• Things you create yourself (tasks, goals, people, memory, links): until you delete them or delete your account.
• Server logs contain no personal content and follow our hosting provider's log retention.

How we protect your data

• Encryption in transit: all traffic between your device and our servers uses HTTPS (TLS).
• Tokens: Google sign-in tokens are held by Clerk; other connection tokens are stored server-side only, isolated per user, never sent to your browser, never logged and never included in exports.
• Isolation: every request is checked against your signed-in account; data is stored and read per user ID.
• Content-free logs: logs and error reports record technical identifiers and error codes, not the content of your mail, tasks, calendar, notes or chats.
• Operator access: we do not look at your data. The only exceptions are the ones listed under Limited Use above.

Who processes data on our behalf

• Clerk — sign-in and account management
• Vercel — hosting of the web app and API
• Redis Ltd. (Redis Cloud) — our database and cache
• Anthropic — AI ranking, weekly list and text assistant
• OpenAI — real-time voice assistant
• LiveKit and Fly.io — real-time audio transport and hosting for voice sessions
• ElevenLabs — text-to-speech
• Sentry — error reporting (content-free)
• Google and Todoist — only when you connect them

These processors may not use your data for their own purposes beyond providing the service.

Your rights and controls

• Export: Settings → Account → Export my data downloads everything we store about you as a JSON file. Tokens and passwords are never included.
• Delete everything: Settings → Delete data, then type DELETE to confirm. This deletes your tasks, notes, memory, goals, people, digests and email insights, revokes and removes your Google and Todoist connections, and deletes your account. It cannot be undone.
• What delete can't reach: copies other people hold of tasks you shared with them (these expire within 30 days, and your name is removed), anonymous aggregate statistics, our providers' own short-term logs and backups (which expire under their retention policies), and data inside Google or Todoist themselves.
• Revoke Google access at any time via myaccount.google.com/permissions.
• Under the GDPR you can also ask us to access, correct, restrict or delete your data, or object to processing — email us below.

Children

OneThing is not intended for users under 16.

Changes to this policy

We will post material changes on this page and update the “Last updated” date.

Contact

Questions? Email mirresnelting@gmail.com.