1ONE Collective
Privacy Policy
Last updated: 3 October 2026
1ONE Collective (“1ONE Collective”, “we”, “us”, or “our”) respects your privacy.
This Privacy Policy explains how information is collected, used, stored and protected when you use the 1ONE Collective iOS app (the “App”). The App is a private operating tool for 1ONE Collective. Accounts are created only by 1ONE Collective; the App does not offer public sign-up.
Information We Collect
- Account information: email address, optional display name, assigned role and an internal user identifier.
- Authentication information: authentication credentials and your authenticator-app (TOTP) enrolment, used for two-step verification.
- Security records: sign-in events and actions taken in the App, together with the date and time, IP address and device user agent, used to protect accounts and detect unauthorised access.
- Business records you choose to enter in the App.
Receipt images and documents you scan are processed on your device and are not uploaded to our servers.
We collect only the information needed to operate, secure and maintain the App.
How We Collect Information
- Directly from you, when you sign in, enrol two-step verification or enter records.
- Automatically, when you use the App, including the security records described above.
- From services operated by 1ONE Collective that an administrator connects to the App, limited to aggregate business figures such as counts, states and dates that contain no personal information about their users.
How We Use Information
Information may be used to:
- Provide and maintain the App.
- Authenticate authorised users.
- Protect accounts and the App from unauthorised access.
- Maintain records and functionality requested by users.
- Diagnose errors, maintain reliability, and improve security.
- Meet applicable legal and regulatory requirements.
We do not use personal information for advertising. The App contains no advertising and no third-party analytics or tracking software, and we do not track you across apps or websites owned by other companies.
Authentication and Security
Access to the App is restricted to authorised users.
We apply appropriate technical and organisational measures to protect information processed through the App and to prevent unauthorised access, use, alteration, or disclosure.
Access controls are applied according to the purpose for which the App is used.
Service Providers and Data Sharing
We do not sell personal information.
The App’s data is hosted by Supabase for database and authentication services. Service providers process information only on our instructions and only to operate, secure and maintain the App, and they are required to protect it with the same or equal protection as described in this Policy.
We may disclose information where required by applicable law, or where reasonably necessary to protect our rights, our users or the security of the App.
Data Retention and Deletion
Account and authentication information is kept while your account is active and deleted when the account is closed.
Business records you enter are kept until you or an administrator delete them, or until the account is closed.
Security records are kept as an append-only history for as long as needed to protect the App and meet legal obligations. When an account is closed, the link between those records and the account is removed.
You can ask for your account and associated personal information to be deleted at any time using the contact details below. We will confirm when deletion is complete, except for information we must keep by law.
Your Choices and Rights
Subject to applicable law, you may request access to, correction of, or deletion of personal information associated with you, and you may withdraw your consent to our processing at any time. Withdrawing consent may result in closure of your account and cessation of processing, apart from information we must keep by law.
Make any request using the contact details below. We will respond within a reasonable time.
Children’s Privacy
The App is not directed toward children.
We do not knowingly collect personal information from children in violation of applicable law.
Changes to This Policy
We may update this Privacy Policy when necessary. The updated version will be published on this page with a revised “Last updated” date.
Contact
For privacy questions, requests or grievances, contact our privacy contact:
1ONE Collective
India