Privacy Policy

Effective date: 8 October 2026

This policy explains what personal data the ONE app collects, why, where it is kept, who it is shared with, and how to delete it. It applies to the ONE Android app (com.placebodrinks.one).

Leer en español

1. Who we are

ONE is made by Placebo Drinks Ltd, a company in the United Kingdom (“we”, “us”). We decide how your data is used in ONE, so we are the data controller under UK data protection law (UK GDPR).

Contact for anything about privacy: laurynasjob38@gmail.com

2. The short version

We store what ONE needs to work: your sign-in email, your profile, what you post, your messages and your location.
Other people only see a blurred location a few hundred metres from where you really are, never your exact pin, unless you choose to share your exact location with a friend for a short time.
We don’t sell your data. ONE has no third-party ads, no ad trackers and no analytics or crash-reporting tools.
Your photos stay on your phone. We don’t upload them.
You can delete your account at any time in the app (Me → Delete account) or by emailing us.

3. What data we collect

When you use ONE, our server stores the following:

Data	What it is	Why we need it
Email address	The address you sign in with.	To send you a one-time sign-in code and to recognise your account. It is not shown on your profile.
Profile	Username, display name, bio, up to 5 links, skills, hobbies, services you offer or are looking for, what you’re on ONE for (dating, friends, networking, activities), gender icon, language, region, and whether you are visible or incognito.	To show your profile to people nearby and match you with people and services that fit.
Date of birth	The date you enter at sign-up.	To check you are old enough to use ONE. Only you see the full date; other members can see your birth year.
Location	Your phone’s GPS position, read only while you use the app.	To show what’s near you and to show you to others at a blurred point. See section 5.
Things you post	Posts, comments, likes, marketplace listings (title, description, price, tags, category, availability) and opportunities.	To publish them to people nearby.
Messages	1:1 messages with accepted friends, and when they were read.	To deliver your conversations.
Friends and sharing	Friend requests, accepted friends, and your location-sharing choices for each friend.	Messaging and exact-location sharing only work between accepted friends.
Blocks and reports	Who you block, and reports you send (reason and optional details).	To keep people safe and deal with abuse.
Badges	Yes/no markers such as “email verified”, “age check passed” and whether you have a profile photo.	To show verification badges and filter the map.
Technical records	A sign-in session (we only store a scrambled hash of it), short-lived sign-in records, and counters that limit how often actions can be repeated.	To keep you signed in and to stop spam and abuse.

Like any internet service, our hosting provider Cloudflare receives your device’s IP address when the app connects. Our code does not save it in our database.

What we don’t collect

Photos are not uploaded. Profile and gallery pictures you pick with the Android photo picker or take with the camera stay on your phone. Our server only stores a yes/no flag saying you have a photo. ONE uses the system photo picker, so it does not ask for access to your whole photo library.
If you set a password in the app, it stays on your phone and is never sent to us.
No contacts, call logs, SMS, files, microphone or background location.
No card or bank details (see Google Play in section 8).
No advertising ID, no analytics SDK, no ad networks.

4. How we use your data

To run ONE for you: your account, profile, the map, posts, listings, opportunities and messages. This is necessary to provide the service you asked for.
To keep ONE safe: the age check, blocks, reports, rate limits and our content rules. We do this because we have a legitimate interest in a safe service, and because ONE is for adults only.
To sign you in: the one-time code we email you. We don’t send marketing emails.

We don’t use your data for profiling for advertising, and we don’t sell it.

5. Location and how we blur it

Location permission is optional. ONE only reads your location while you are using the app. It never asks for background location. You can turn the permission off at any time in Android settings.
When you allow location, the app sends your device’s coordinates to our server so it can work out distances. Other people never receive your exact coordinates.
Instead, the server gives everyone else a blurred point: your position moved roughly 140 to 400 metres in a direction that is fixed for your account. Distances other people see are measured from that blurred point.
Marketplace listings and opportunities are saved at a blurred point too. Your exact position is not stored with them.
In the app you choose to show an approximate location or to hide it. If your location is hidden (or you haven’t chosen yet), you don’t appear on the map and you can’t publish listings or opportunities. Incognito hides your profile from people nearby.
Exact location sharing is off unless you start it. You can share your exact location with one accepted friend for a limited time (about 30 minutes). It ends automatically, and only that friend can see it.

6. Who can see what

People nearby can see your public profile (username, display name, bio, links, skills, interests, gender icon, birth year and badges), your blurred location, your posts and comments, your listings and your opportunities. You can hide your name on a listing, and opportunities don’t show your name unless you choose to.
Accepted friends can message you. They see your exact location only during a share you start.
People you block can’t see you and you can’t see them. They can’t message you or send friend requests.
We can access the data in our database to run ONE, look into reports and answer your requests.

7. Where your data is stored

ONE’s server runs on Cloudflare (Cloudflare Workers). Your account and content are stored in a Cloudflare D1 database, and one-time sign-in codes in Cloudflare Workers KV. Cloudflare is our hosting provider and processes this data for us under its data processing terms. Cloudflare runs a global network, so your data may be processed outside the UK, including in the United States.

All traffic between the app and our server is encrypted with HTTPS. Sign-in codes and session tokens are stored only as scrambled hashes.

Some data only ever lives on your phone, in the app’s own storage: photos, your private gallery, ad drafts and boosted-ad records, and your password if you set one.

9. How long we keep data

Your account, profile, location and content: for as long as your account exists. They are deleted when you delete your account. To have a single post, listing or message removed sooner, email us.
One-time sign-in codes: expire after 10 minutes and are deleted when used.
Sign-in sessions: expire after 30 days. Signing out removes the session.
Anti-abuse counters: small records holding a count and your account ID or email address. They are not removed automatically when you delete your account. Email us and we will remove them.
Reports: reports you made and reports about your profile or posts are deleted with your account. Reports other people made about your listings may be kept for safety.
Database recovery: Cloudflare keeps an automatic point-in-time recovery history of our database. Deleted data can stay in that history for up to 30 days before it is gone for good.

10. Deleting your account

In the app: open the Me tab, tap Delete account, then Delete my account permanently.

This deletes from our server your profile, email address, date of birth, location, posts and the comments and likes on them, your comments and likes, listings, opportunities, messages you sent and received, friends, location shares, blocks, reports you made, sessions and sign-in records. It also clears ONE’s data on that phone. Deleting removes whole conversations, so the people you messaged lose them too.

By email: if you can’t use the app (for example you uninstalled it), email laurynasjob38@gmail.com from the address you sign in with, with the subject “Delete my ONE account”. We may ask you to confirm from that address, and we will delete your account within 30 days.

Signing out or uninstalling the app does not delete your account. Full details: Delete your ONE account.

11. Your rights

Under UK and EU data protection law you can ask to access, correct, delete, restrict or move your data, and object to how we use it. In the app you can edit your profile, switch to incognito, hide your location and delete your account. For anything else, email laurynasjob38@gmail.com. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk or your local data protection authority.

12. Adults only

ONE is for adults only and is not meant for children. The app asks for your date of birth and only lets you in if you are at least 18 (19 in South Korea). ONE is rated Mature 17+ on Google Play because it includes dating and user-generated content. If you think a child is using ONE, tell us at laurynasjob38@gmail.com and we will delete the account.

13. Security

We use HTTPS for all traffic, store sign-in codes and session tokens only as hashes, limit sign-in attempts and rate-limit actions. No system is perfectly secure, so please don’t share sensitive information in your profile or posts that you wouldn’t want others to see.

14. Changes to this policy

If we change this policy, we will update this page and the effective date at the top. For important changes we will also tell you in the app.

15. Contact

Placebo Drinks Ltd (UK), maker of ONE.
Email: laurynasjob38@gmail.com