Privacy Policy
Last updated: 2026-10-22.
The One ("we", "us") is a dating app for adults (18+). This policy explains what data we collect, why, who receives it and what control you have. The data controller is Rachid Tannaoui, an individual operating The One from Ireland. Contact: privacy@theone-app.com.
What we collect
| Data | Why |
|---|---|
| Email address, or Google/Apple sign-in identifier | Create and secure your account (magic-link or social sign-in). |
| Phone number | One-time code to verify you are a real person and to limit fake accounts. |
| Name, age/date of birth, bio, prompt answers, interests, occupation, neighbourhood | Show your profile and enable matching. Other people see only the profile fields meant for discovery. |
| Photos (up to 6) | Show your profile. Photos are stored privately, shown through short-lived links, and checked automatically for unsafe content. |
| Location | Your city/region/country and, if you choose Local, a place you check in to. We use your device location only when you ask for it (for example when you open the Local picker); we do not track you continuously. |
| Favourites, Likes, passes, matches, messages, blocks and reports | Run the matching features, keep you safe and handle abuse. |
| Push notification token | Send notifications such as a new Like or match. |
| Purchase status (provider and plan, no card details) | Unlock Premium features. Payments are handled by Google Play, Apple or the payment provider. |
| Crash and performance data | Find and fix bugs. |
| Technical data (hashed IP address, consent records) | Rate limiting, abuse prevention and proving consent. Raw IP addresses are kept up to 30 days. |
We do not sell your personal data, we do not show third-party advertising, and we do not read your contacts or track you across other apps.
Who receives data (service providers)
| Provider | Purpose |
|---|---|
| Supabase | Database, sign-in and file storage (EU region). |
| Google (Firebase Cloud Messaging) | Delivering push notifications. |
| Google Cloud Vision | Automatic check of uploaded photos for unsafe content. |
| SMS provider (Twilio, via Supabase) | Sending the phone verification code. |
| Sentry | Crash reports. |
| OpenStreetMap services | Finding nearby places when you search in Local (your search text and approximate map position). |
| Google Play / Apple / payment provider | Processing purchases. |
Some providers process data outside the EU/EEA; where that happens we rely on appropriate safeguards such as standard contractual clauses.
Legal bases (GDPR)
Contract (providing the service you signed up for), legitimate interests (safety, fraud and abuse prevention, fixing bugs), consent (location when you allow it, notifications), and legal obligation (where the law requires us to keep records).
How long we keep it
Account data is kept while your account exists and deleted when you delete it. Likes expire and are cleaned up after a short period. Raw IP addresses are kept up to 30 days. Backups are overwritten on the normal backup cycle.
Your rights and controls
- Access and portability: Settings → Privacy → Download my data (JSON file).
- Correction: edit your profile in the app.
- Deletion: Settings → Privacy → Delete my account, immediate and permanent. See how to delete your account.
- Block and report: available on every profile.
- Restriction, objection, complaints: email privacy@theone-app.com. You may also complain to your data protection authority (in Ireland, the Data Protection Commission, dataprotection.ie).
Visibility after a match
After a match, your profile can be shown only to people in your confirmed Favourites for at least 24 hours. This limits who can see you in discovery; it does not share any extra data.
Children
The One is only for people aged 18 or over. If we learn that someone under 18 has an account, we delete it.
Security
Data is encrypted in transit (HTTPS). Access is protected by row-level security rules, and sensitive fields (such as your exact location, date of birth and push token) are never sent to other users. If a breach affects your data we will notify you and the authorities as the law requires.
Changes
If we change this policy in a material way, we will update this page and the date above, and tell you in the app where required.