Privacy Policy
Effective date: July 1, 2026
This Privacy Policy explains how One Month Apps ("One Month Apps," "we," "us," or "our") collects, uses, discloses, and protects information about you when you use the One Month mobile application, distributed as "One Month" on the Apple App Store and "One Month: Life Balance" on Google Play (the "App"), and any related services (together, the "Services"). One Month Apps is a sole proprietorship based in California, United States, and is the controller of the personal information described in this Policy.
By creating an account or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the App.
Questions or requests? Contact us at onemonthframework@gmail.com.
1. Summary
- We collect the email address you register with and the content you create in the App (your goals, intentions, notes, book highlights, check-ins, and daily "lens" answers).
- We use this information to operate the App, sync your data across your devices, generate your personalized AI reflections, and manage your subscription.
- We use a privacy-preserving product-analytics tool to understand which features are used and where people stop, using only anonymous usage events — never the content you write.
- We do not sell or rent your personal information, and we do not use it for third-party advertising.
- You can permanently delete your account and all associated data from within the App at any time.
2. Information we collect
a) Account information. When you create an account, we collect your email address and a password, which is stored only in cryptographically hashed form by our authentication provider (Supabase). We can never see your actual password.
b) Content you create ("User Content"). The App is built around content you enter: your area rotation, goals, daily intentions, check-ins, personal notes ("Worth Noting"), book highlights, and your answers to the daily lens. This content is stored on your device and, while you are signed in, synced to your private account in our cloud database so it is available across your devices. This content belongs to you. It stays private to your account, is never sold or shared with advertisers, and is only ever used to run the App for you — and you can permanently delete all of it whenever you want.
c) Subscription and purchase information. If you purchase a subscription, the transaction is processed by Apple or Google through their in-app purchase systems. Your subscription status and a purchase identifier are managed on our behalf by RevenueCat. We receive confirmation of your subscription status and a purchase identifier. We never receive or store your full payment card number — payment details are handled entirely by Apple or Google.
d) AI-feature inputs. To generate your daily lens and your weekly, monthly, and end-of-rotation reflections, relevant content you have entered (such as your goals, recent intentions, and notes) is transmitted to our AI provider (Anthropic) to produce a response that is returned to you. See Section 4.
e) Usage and analytics data. We use PostHog to collect anonymized product-analytics events that describe how the App is used — for example, that an account was created, a rotation was set, a paywall was viewed, or a subscription was started. Each user is associated with a random account identifier (your internal user ID), not your name or email. These analytics never include the content of your goals, intentions, notes, or lens answers. We do not use automatic screen recording, session replay, or automatic capture of what you type.
f) Device and technical information. We may process limited technical information necessary to operate the Services, such as a device or application identifier, general device type, and app version.
g) Notifications. If you enable reminders, they are scheduled and delivered locally on your device. We do not collect a record of your notification activity.
We do not knowingly collect precise geolocation, contacts, photos, or biometric data, and the App contains no advertising trackers.
3. How we use your information
We use the information described above to:
- Provide, operate, maintain, and improve the App and Services;
- Create and secure your account and authenticate you;
- Sync your User Content across your devices;
- Generate your personalized AI reflections and daily lens (Section 4);
- Process and manage your subscription and free trial;
- Understand which features are used and where users encounter friction, so we can improve the product (using anonymized analytics only);
- Communicate with you about your account, respond to support requests, and send service-related messages;
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues; and
- Comply with legal obligations and enforce our Terms of Service.
Legal bases (for users in the EEA/UK). We process your information to perform our contract with you (operating the App and your account), for our legitimate interests (securing, understanding, and improving the App), to comply with legal obligations, and, where required, with your consent (which you may withdraw at any time).
We do not sell your personal information, and we do not use your personal information for third-party advertising.
4. Artificial intelligence features
Certain features — your daily lens and your weekly, monthly, and end-of-rotation reflections — are generated using artificial intelligence provided by Anthropic. To create these, relevant content you have entered is sent, through our secure server, to Anthropic's API, which returns a generated response to you.
This processing is used only to produce your reflections and lens prompts. Under Anthropic's commercial terms, your inputs and the generated outputs are not used to train Anthropic's AI models. Because this content is processed to generate your results, please avoid entering information you would not wish to be processed for this purpose. AI-generated content is provided for personal reflection and may not always be accurate; see our Terms of Service regarding reliance on it.
5. How we share information
Your information is stored on your device and in your private cloud account. We share information only with the service providers ("subprocessors") that make the App work. Each processes your information solely to perform its function for us and under obligations of confidentiality and data protection:
| Provider | Function | Information involved |
|---|---|---|
| Supabase | Account authentication and encrypted cloud storage of your data | Email, hashed password, your synced User Content |
| Anthropic | Generating your AI reflections and daily lens | The content needed to generate a response (Section 4) |
| RevenueCat | Managing your subscription status | Your account identifier and subscription status |
| Apple / Google | Processing in-app purchases | Payment details (handled entirely by them) |
| PostHog | Privacy-preserving product analytics | Anonymized usage events and a random account identifier |
| Vercel | Hosting the secure server that connects the App to our AI provider | Technical request data needed to route AI requests |
We may also disclose information: (a) to comply with applicable law, regulation, legal process, or governmental request; (b) to enforce our Terms of Service or investigate potential violations; (c) to detect, prevent, or address fraud, security, or technical issues; (d) to protect the rights, property, or safety of our users, the public, or One Month Apps; and (e) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or provide notice as required by law.
We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.
6. Data retention and deletion
We retain your information for as long as your account is active or as needed to provide the Services.
You may permanently delete your account and all associated data at any time from within the App: go to Settings → Account → Delete account. This deletes your account and your synced User Content from our systems. Deletion is permanent and cannot be undone.
You may also request deletion by emailing onemonthframework@gmail.com. Deleting the App from your device additionally removes the locally stored copy of your data on that device. We may retain limited information where required to comply with legal obligations, resolve disputes, or enforce our agreements.
7. Security
We use reasonable and appropriate technical and organizational measures to protect your information, including encryption of data in transit (HTTPS/TLS), hashed password storage, and access controls that restrict each account to its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information using industry-standard safeguards.
8. Children's privacy
The App is intended for users 14 years of age and older and is not directed to children under 14. We do not knowingly collect personal information from children under 14. If you believe a child under 14 has provided us with personal information, please contact us at onemonthframework@gmail.com and we will delete it. We do not knowingly "sell" or "share" the personal information of any user under 16, and we do not sell or share personal information at all.
9. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access the personal information we hold about you;
- Correct inaccurate personal information;
- Delete your personal information;
- Port a copy of certain information to another service;
- Object to or restrict certain processing; and
- Withdraw consent where processing is based on consent.
You can exercise the core of these rights directly through the App's account deletion feature, or by emailing onemonthframework@gmail.com. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights.
California residents (CCPA/CPRA). In the past 12 months, we have collected the categories of personal information described in Section 2 (identifiers such as email and a user ID; customer records such as subscription status; internet or other electronic activity such as usage events; and User Content you provide). We collect this information for the business purposes described in Section 3 and disclose it only to the service providers listed in Section 5. We do not sell or share personal information as those terms are defined under the CPRA, and we do not use or disclose sensitive personal information for purposes that would require an opt-out. You have the right to know, access, correct, and delete your personal information, and the right not to receive discriminatory treatment for exercising these rights. You may submit requests using the methods above; we will verify your request through your account email. You may use an authorized agent, subject to verification.
EEA/UK residents. You have the rights listed above under the GDPR/UK GDPR and the right to lodge a complaint with your local data protection authority. Our legal bases are described in Section 3.
"Do Not Track." The App does not respond to browser "Do Not Track" signals, and it does not track you across third-party websites or apps for advertising.
10. Local storage and cookies
The App stores data locally on your device (for example, in local storage) to function offline and to remember your settings. Our AI server and third-party providers may use strictly necessary technical mechanisms to operate the Services. We do not use advertising or cross-site tracking cookies.
11. International users and data transfers
We are based in the United States, and your information is processed and stored in the United States and in other countries where our service providers operate. Data protection laws in these countries may differ from those in your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers. By using the App, you understand that your information may be transferred to and processed in the United States.
12. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective date" above and, where appropriate, notify you within the App or by email. Your continued use of the App after an update takes effect constitutes your acceptance of the revised Policy.
13. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:
One Month Apps
Email: onemonthframework@gmail.com