OnePad Privacy Policy

Last updated: January 25, 2026

1. Introduction

OnePad ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, and protect your information when using our task management service.

By using OnePad, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide:

• Email address during registration
• Profile information (name, avatar)
• Task content (titles, descriptions, attachments)
• Messages in chat with AI assistant Ally
• App settings and preferences

2.2 Information Collected Automatically:

• Usage data (which features you use)
• Device and browser information
• IP address (for security and analytics)
• Cookies and similar technologies
• Activity and productivity time (for statistics)

2.3 AI Interaction Data:

• Messages sent to AI assistant Ally
• AI task analysis results
• Work preferences and patterns (for personalization)

3. How We Use Your Information

• Providing and improving the OnePad service
• Personalizing AI recommendations and suggestions
• Synchronizing data across devices
• Sending important service notifications
• Analyzing usage to improve the product
• Ensuring security and preventing fraud
• Fulfilling legal obligations

4. Sharing with Third Parties

We use the following services to operate OnePad:

• Supabase - data storage and authentication (servers in EU/US)
• Anthropic (Claude AI) - AI message processing (data processed anonymously, not stored)
• Netlify - application hosting
• Stripe - payment processing (PCI compliant)
• Google - calendar integration (only with your explicit consent)

We do not sell your personal data to third parties.

5. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data (data portability)
• Restrict processing
• Object to data processing
• Withdraw consent

To exercise these rights, contact us at: privacy@onepad.app

6. California Privacy Rights (CCPA)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising CCPA rights

To make a request, email us at privacy@onepad.app or use the "Delete Account" feature in settings.

7. Data Security

We use industry-standard security measures:

• TLS/SSL encryption for data transmission
• AES-256 encryption for data at rest
• Regular security audits
• Access control and monitoring
• Automatic session expiration

8. Data Retention

• Active account data: retained while account is active
• Deleted data: permanently removed within 30 days
• Backups: retained for 90 days
• Analytics: aggregated and anonymized after 12 months

9. Cookies

We use cookies for:

• Essential - authentication, session management
• Functional - saving preferences
• Analytics - anonymous usage statistics

You can manage cookies in your browser settings.

10. Children's Privacy

OnePad is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification.

12. Contact Us

If you have questions about this Privacy Policy:

• 📧 Email: privacy@onepad.app
• 🌐 Website: onepad.app

Kseniia Development SRL
Bucharest, Romania