Privacy Policy

What we collect

Nothing. OneThought has no analytics SDKs, no third-party tracking, no advertising identifiers, and no telemetry of any kind.

Your journal entries, photos, drafts, reflections, and preferences never leave your iPhone except to sync with your own iCloud account if you opt in.

On-device AI

Daily prompts are generated by Apple's on-device Foundation Models (Apple Intelligence). Your text never reaches a server.

Weekly reflections are summarised on-device. If the model is unavailable, the app falls back to a local fallback library — never a network call.

Photo scenes and joy detection use Apple's Vision framework on your iPhone. Photos are never uploaded.

Semantic search uses Apple's NaturalLanguage embeddings, all on-device.

Reverse geocoding (place names on the map) uses Apple Maps; only quantised coordinates are sent, and results are cached locally so the same lookup never repeats.

iCloud sync

If you enable iCloud sync, your data moves only between your own Apple devices using your private CloudKit database (your iCloud account, your container, your encryption keys).

Apple cannot read your entries. Neither can we. There is no shared server in the middle.

If you delete the app from a device, your iCloud copy remains on your other devices unless you wipe explicitly via Settings → Danger zone.

Permissions

• Photos: read-only access used to surface recent media, build moments, and render the Places map. The app never modifies, deletes, or uploads anything in your photo library.
• Calendar: optional. Used only to enrich photo-derived drafts with event titles.
• Face ID / Touch ID / Optic ID: used only to unlock the app. Apple stores biometric data in the Secure Enclave; OneThought never sees it.
• Microphone & Speech Recognition: optional. Used for on-device dictation when writing entries by voice.
• Notifications: optional. Used for the daily prompt and weekly reflection reminders only.
• Camera: optional. Used when you attach a photo taken with the camera to an entry.
• Contacts: optional. Used on-device to recognise people in your photos. Names never leave your iPhone.

Your data, your control

Export everything as PDF, JSON, or plain text at any time (Settings → Privacy & data → Export archive).

Skip individual Suggested moments — they're persisted to UserDefaults so they don't reappear.

Delete every byte from Settings → Danger zone. The app returns to its first-launch state on this device. To wipe iCloud copies, open the app on each device and run Delete all my data.

For step-by-step instructions, see Delete my data.

Children

OneThought is not directed to children under 13 and does not knowingly collect personal data from anyone, including children.

Changes to this policy

If this policy changes, the change will be noted in the in-app What's New screen and updated here. Continued use of the app after a change means you accept the updated policy.

Contact

Questions about privacy: hello@onethought.app