Privacy Policy

1. What We Collect

When you use OneWord, we may collect:

• Account information: Email address and display name when you create an account.
• Content: The words you post in response to daily prompts.
• IP address: Your IP address is temporarily stored when you post a word or interact with the Service. It is used to derive your approximate city-level location and for abuse prevention (spam detection, ban enforcement). IP addresses are automatically deleted after 30 days.
• Approximate location: We derive your approximate city-level location from your IP address when you post a word. We store only the city name and approximate coordinates (latitude/longitude rounded to ~10 km precision).
• Usage data: Basic analytics such as page views and interaction patterns.

2. Why We Collect It

• Account info: To let you sign in, maintain streaks, and personalize your experience.
• Content: To display your words in the feed and archive.
• IP address: To prevent abuse, detect spam, enforce bans, and derive approximate location. Automatically purged after 30 days.
• Location: To display an anonymous, aggregate word map showing where words are coming from around the world. Individual posts are not linked to precise locations publicly.
• Usage data: To improve the app and understand how people use it.

3. What We Don't Do

• We do not sell your data to anyone.
• We do not retain your IP address beyond 30 days.
• We do not share your data with third-party advertisers.
• We do not track you across other websites.

4. Data Storage & Security

Your data is stored in a secure database hosted by Supabase. We use industry-standard encryption for data in transit (HTTPS) and follow best practices for data security.

5. Cookies

We use essential cookies for authentication (keeping you signed in). We do not use tracking cookies or third-party advertising cookies.

6. Your Rights

You can:

• Delete your account and all associated data at any time.
• Request a copy of your data by contacting us.
• Post anonymously — anonymous posts are not linked to any account or stored location data.

7. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication.
• MaxMind GeoLite2: IP-to-location lookup (processed server-side; your IP is not sent to MaxMind).

8. Data Retention

• Account data: Retained as long as your account exists. Deleted permanently when you delete your account.
• Anonymous posts: Retained indefinitely as they are not linked to any identity.
• IP addresses: Retained for up to 30 days for abuse prevention, then permanently deleted via automated purge.
• Location data: Stored as approximate coordinates only. Retained as long as the associated post exists.
• Server logs: Temporary request logs may contain IP addresses and are automatically purged within 30 days.

9. Children's Privacy

OneWord is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. International Users

OneWord is operated from India. If you access the Service from outside India, your data may be transferred to and processed in India. By using the Service, you consent to this transfer. We handle all data in accordance with this privacy policy regardless of where you are located.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via the app. The "last updated" date at the top reflects the most recent revision.

12. Contact

Questions about this policy? Reach out at hello@sayoneword.com