Privacy Policy

Last updated: May 13, 2026

1. Information We Collect

When you use OneDay, we collect the following information:

• Account Information: Email address, display name, and timezone provided during registration or OAuth sign-in (Google).
• Moments: Titles, text content, and images you create and store within the app.
• Usage Data: We do not collect analytics, tracking data, or usage metrics.

2. How We Use Your Information

Your information is used solely to provide and improve the OneDay service:

• To authenticate your account and maintain your session.
• To store and retrieve your moments and images.
• To send verification codes for email authentication (if applicable).

We do not use your data for advertising, profiling, or sell it to third parties.

3. Data Storage

Your data is stored securely on Cloudflare infrastructure:

• Database: Cloudflare D1 (SQLite) for user accounts and moment data.
• Images: Cloudflare R2 object storage for uploaded images.
• Location: Data is processed and stored in Cloudflare's global edge network.

4. Third-Party Services

OneDay integrates with the following third-party services:

• Google OAuth: For sign-in authentication. Google may collect data per its own Privacy Policy.
• Cloudflare: For hosting, database, and storage. Cloudflare processes data per its own Privacy Policy.

We do not share your personal data with any other third parties.

5. Data Security

We take reasonable measures to protect your data:

• Passwords are hashed using PBKDF2 with SHA-256 (100,000 iterations) and never stored in plain text.
• All data transmission is encrypted via HTTPS/TLS.
• Authentication tokens expire after 30 days.
• Locked moment content is not accessible until the unlock date.

6. Your Rights

You have the right to:

• Access your personal data stored in the app.
• Request deletion of your account and associated data.
• Withdraw consent for data processing at any time by deleting your account.

To exercise these rights, please contact us at the email below.

7. Data Retention

We retain your data for as long as your account is active. If you wish to delete your account and all associated data, please contact us.

8. Children's Privacy

OneDay is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:
chengchenglonglong@gmail.com

OneDay — Meet yourself again.