Privacy Policy

Who we are

The One app and theonestudy.com are operated under the trading name Bothmade. In this policy, “we”, “us” and “our” refer to the operator trading as Bothmade, responsible for the personal information described here. For privacy questions or requests, email halalchristiano@gmail.com with “Bothmade privacy” in the subject.

The short version

We use personal information to provide your account and study features and, if you choose to join, Community. There is no advertising or tracking across other apps or websites. We do not sell your personal information. Service providers process information needed to run the service, as explained below.

What is stored

If you create an account, we hold your email address, account identifier, authentication records, and the notes, highlights, bookmarks, saved works, reading positions, progress and preferences that your version of the app syncs. If you have bought access, we hold the entitlement needed to recognise it. Unsynced information remains on your device.

Where Apple or Google sign-in is offered, we receive the identifier and profile information that provider supplies, such as your email address and name. Apple may supply a private relay address. We do not receive your Apple or Google password or access to your email inbox. Email-and-password sign-in is handled by our authentication provider.

If you contact support or request an invitation, we receive your email address and the information you send. Please avoid sending passwords or unnecessary sensitive information.

Where it is stored

Account data is held in a Supabase database with access controls. Your private study records are restricted to your account. Community profiles are visible only to eligible members, and selected contact details only to accepted connections. Authorised moderators can review reports and relevant evidence. Purchases are processed by Apple; the app never sees your payment details.

Why we use information

We use account and study data to provide the service you request (performance of our contract with you). We use limited technical, support and safety records for our legitimate interests in keeping the service secure, resolving problems and preventing abuse, taking your rights into account. Where a legal obligation requires us to keep or disclose information, we rely on that obligation.

Optional Community discovery and sharing rely on your consent, including explicit consent where your profile reveals religious beliefs. You can withdraw that consent through Community controls or by contacting us. Withdrawal does not affect processing that was lawful before it. Private notes can also contain sensitive information you choose to write; we do not use them to build a religious profile or for advertising.

An email address and authentication information are needed for an account; optional profile details are not required for private study. Without required account information we cannot provide account-based features. We do not make solely automated decisions that have legal or similarly significant effects on you.

Website and technical information

The website is hosted by Vercel. Hosting and authentication services process technical information such as IP addresses, request times, browser or device information and security logs to deliver and protect the service. The website uses session storage to remember whether its opening animation has played in the current tab. It has no advertising cookies or third-party analytics scripts. Fonts are served from the website itself.

Following an external link or signing in through Apple or Google also involves that provider’s privacy policy. If you test the app through TestFlight, Apple may provide crash information and any feedback you submit under its TestFlight terms.

Service providers and international processing

We use Supabase for account authentication and hosted app data, Vercel for the public website, and email services to receive support messages and deliver account messages. Apple handles App Store purchases and TestFlight. Authorised service providers may process information on our behalf; we disclose information where required by law or necessary to protect people and the service. Your private study is not made public to other members.

These providers operate internationally, so processing and support access may occur outside your country, including outside the UK. Their contractual data-protection arrangements and applicable transfer safeguards govern that processing. You can contact us for information about the providers and safeguards relevant to your data.

What is not collected

No advertising identifiers, address-book access, background location tracking, or third-party tracking SDKs. Community interests and source selections come from what you explicitly choose to share; private reading history, notes, highlights, purchases, and time spent reading are not used to infer your beliefs or match you with people.

Community profiles and approximate areas

Community is off by default. Joining a directory of Unitarians may reveal a religious interest or belief, so discovery requires a separate affirmative choice. We store your profile, selected interests and intentions, approved broad area, matching preferences, and consent record. The optional foreground location action asks Apple to suggest an area; raw device coordinates and full postcode searches are not saved in your member profile. Matching uses approved area centres. Members see a general area label, never a home pin, live position, or precise distance. Optional portraits are cropped and stripped of embedded metadata before storage.

Invitations and chosen contact details

Each invitation lets you select which contact methods to share after acceptance. The recipient also reviews and chooses before accepting. You can withdraw an invitation, revoke a shared method, disconnect, or block someone. Changing a saved number or address removes its existing sharing grants and does not reveal the replacement automatically. Contact values are retrieved online and kept in app memory for the active view. Information already copied or used outside THE ONE cannot be recalled.

Circles meetups and conversations

When these features are enabled, joining a circle or meetup uses approval and participation controls. Private session links, venue details, and participant lists are restricted to authorised participants. Conversations are available only between accepted connections. Messages are not described as end-to-end encrypted. Reports include the content and context selected for review; unrelated private notes and contact values are not included. Optional email notifications use separate settings and generic wording.

Pausing and leaving Community

Pause hides your profile from discovery and closes pending invitations; existing connections and selected sharing remain until you revoke them. Leave Community withdraws directory participation, removes your active profile and contacts, and closes connections. Reading purchases and private study remain available. You can export your own Community records, including your authored content, from Community settings. Limited closed-request records and report evidence may be retained for abuse prevention as explained under “How long information is kept”. Backup expiry follows the service provider's configuration; we do not promise immediate deletion from backups.

How long information is kept

Account and synced study records are kept while needed to provide your account, until you delete the relevant records or account, subject to the limited exceptions below. Local copies and downloads remain until removed from the device.

Support correspondence is kept as needed to resolve your request and any related dispute. Security and moderation records are kept only as needed to investigate abuse, handle appeals, prevent repeated harm or meet legal obligations. Relevant factors include whether a case is open, the seriousness of the incident, any unresolved appeal and a legal preservation requirement. Access is restricted. Backup copies expire under the hosting provider’s backup cycle rather than disappearing immediately when you delete a record. Contact us for the retention information applicable to a particular record.

Your data is yours

Use the export and deletion controls available in Settings to obtain your account data or delete your account. You can also request access or deletion by emailing us. Account deletion removes account-owned study records and revokes active Community access; limited safety or legal records may need to be retained as explained below. Deletion cannot be undone. Deleting the app alone does not delete a server account or cancel an Apple subscription.

Your privacy rights

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests and withdraw consent where we rely on it. Email halalchristiano@gmail.com to exercise these rights; we may need proportionate information to verify your request. We normally respond within one month and explain any lawful extension or exception.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or to your local data-protection authority. You do not have to contact us first, although we welcome the chance to resolve a concern.

Children

The app is not directed at children under 13 and does not knowingly collect their information. Community is for adults aged 18 and over. Contact us if you believe a child has provided information contrary to these age limits.

Changes and contact

We update the date on this policy when it changes and explain material changes where appropriate. Contact Bothmade at halalchristiano@gmail.com for privacy questions, access requests or concerns.