Privacy Policy

Last updated: September 22, 2026

One Thing is built to work without a server and without an account. This page describes, specifically, what that means for your data.

The short version

• There is no server and no account. One Thing does not have a login, a user database, or a backend that stores your entries.
• What you write stays on your device. It only leaves your device through iCloud sync, and then it goes to your own iCloud account — not to us.
• We use a small number of outside services for narrow, specific purposes, listed below in full. None of them receive the text of your entries.

What stays on your device

Your entries, categories, attached media, and app settings are stored in a local database on your device. One Thing has no way to read this data remotely, because there is nothing on our side to read it — no server exists that your entries are sent to.

iCloud sync

One Thing uses Apple's CloudKit to copy your data to your own private iCloud account, so it's available on your other devices. This sync is between your device and your iCloud account — we do not have access to it, and Apple's own privacy terms govern data stored in your iCloud account. In the current version, sync happens automatically whenever iCloud is available on your device; there is no in-app control to disable it. If you don't want your entries synced to iCloud, you can turn off iCloud Drive for this app in your device's Settings → [your name] → iCloud → Apps Using iCloud. We're working on adding an in-app sync toggle in a future update.

Website waitlist

If you join the waitlist on our website, your email address is stored with our email provider, Kit, only to notify you when One Thing launches. Kit sends you a confirmation email when you sign up, and you can ask us to remove it at any time at privacy@successateverystage.com.

Crash and error reporting

One Thing uses Sentry to catch crashes and errors, so we can fix bugs. This is limited on purpose:

• The text of your entries, media file paths, category names, and location labels never reach Sentry, in any form — not in an error message, not in a breadcrumb, not in any attached data.
• We never send a device or user identifier of any kind, and we never associate crash reports with an identifiable person.
• Debug logging is disabled in the version of the app you install, so it can't become a breadcrumb attached to a report.
• Database error messages are stripped down to an error code and the shape of the failed operation before they're ever captured — never the raw underlying error, which could otherwise contain fragments of what you typed.

Subscription purchases

One Thing's subscription is handled through Apple's App Store and a subscription-management service called RevenueCat. When you subscribe, Apple processes the payment and shares the purchase receipt with RevenueCat so the app knows your subscription is active. Neither One Thing nor RevenueCat see your card details — that stays with Apple.

Gift subscriptions

If you buy a gift subscription, redeeming it works through a small purchase-verification service we operate. It receives only the App Store transaction ID for that purchase — enough to confirm it's real and release a redemption code — and nothing else. It never receives a name, email address, or any other contact information — this request never includes who the gift is for. Delivering the code to the recipient is something you do yourself after buying it.

Link previews

If you paste a link into an entry, One Thing automatically fetches a preview (a title and image) from that link's own website, so the entry shows something more useful than a bare URL. This means the linked website itself sees that its page was requested — the same way it would if you'd opened the link in a browser. The text of your entry is never sent anywhere as part of this; only the URL you pasted is used to fetch its preview.

No ads, no tracking, no GIF search

• One Thing has no advertising SDK of any kind, and doesn't show ads.
• We don't ask for App Tracking Transparency permission, because we don't track you across other apps or websites.
• Any app-install attribution we receive from Apple uses Apple's SKAdNetwork, which reports aggregated install counts and doesn't identify you personally.
• GIFs you attach to an entry come from your own device's photo library. One Thing does not search or fetch GIFs from any outside service.

How long we keep things

Deleted entries and media are held for 30 days (so you can undo a deletion) and then permanently removed from your device. If you uninstall the app, its local data is removed with it — anything that also exists in your own iCloud account remains there under your control, separate from the app.

Children's privacy

One Thing is not directed at children and does not knowingly collect data from children.

Changes to this policy

If how One Thing handles data changes, this page will be updated and the "Last updated" date above will change to match.

Contact

Questions about this policy can be sent to privacy@successateverystage.com.