One (“we”, “us”, “our”) is operated by One Dating PTY LTD. This Privacy Policy explains how we collect, use, and protect your personal information when you use the One dating app, in accordance with the Australian Privacy Act 1988.
What we collect
- Contact information: email address
- Profile information: name, date of birth, gender, relationship preferences, values, and photos you upload
- Location information: city (derived from GPS with your permission)
- Usage information: likes, passes, matches, and messages sent within the app
- Device information: anonymous analytics data collected by Vercel
Why we collect it
We use your information to operate the app, match you with compatible people, send transactional emails (OTP login, waitlist notifications), and process payments. We do not use your information for advertising and we do not sell it.
Who we share it with
We use the following third-party processors to operate the service:
- Supabase (database and authentication) — data hosted in AWS ap-southeast-2
- Resend (transactional email)
- Apple (in-app purchases, iOS only)
- Vercel (hosting and analytics)
Each processor is bound by data processing agreements and handles your data only as necessary to provide their service.
How long we keep it
We retain your data for as long as your account is active.
When you delete your account in the app, your profile, photos, matches, messages, and voice messages are permanently deleted immediately. When you request deletion by email, deletion is completed within 7 days of identity verification.
After deletion, a small amount of data is retained for legal and safety reasons:
- Transaction records: retained for 7 years to comply with Australian Taxation Office record-keeping requirements.
- Email addresses (re-registration prevention): retained when an account is deleted, used solely to prevent the same email from being re-registered to claim a new free account. Stored separately from your active account data and used for no other purpose.
- Safety and abuse prevention records: if your account was the subject of a report, block, or community guideline action, we retain a record of that action to prevent banned users from rejoining under a new identity. This record contains no profile content.
- Anonymised aggregate analytics: retained indefinitely, no longer connected to your account or to any personally identifying information.
For more detail on how to delete your data, see Manage or delete your One data.
Your rights
Under the Australian Privacy Act 1988, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data (via Settings)
- Make a complaint to the Office of the Australian Information Commissioner
To exercise these rights, contact us at hello@joinone.app.
Security
All data is encrypted in transit (TLS) and at rest. Access to your data is controlled by row-level security policies. Only you can read your messages.