The short version
You can use One Current forever without an account, and in that case we hold nothing about you at all — no analytics, no tracking, no profile. Your threads, your history, your wholeness check-ins: all of it stays in your device's own storage.
Data moves off your device only when you take a deliberate action: creating an account, uploading a backup, or sharing threads with your psychologist. Each of those is described below, and each can be undone.
On your device
The app writes your timeline to your browser's local storage on the device where you use it. It works offline. We cannot read it, and neither can anyone else who doesn't hold your device. If you never create an account, this section is the whole story.
If you create an account
For account holders, the server stores only what an account needs to function:
- your email address,
- a display name, if you chose to give one,
- a hash of your password — never the password itself,
- your plan, and — if you subscribe to Pro — the Stripe customer and subscription identifiers that connect your account to your payment.
That's the complete list. Your timeline is not on it.
Cloud backups
Backup is opt-in. When you upload a backup, the server stores a full export of your app data so you can restore it on a new device. Each upload replaces the previous one — we keep the latest backup, not a history of them. If you never press upload, no backup exists.
Shares with your psychologist
When you share, only the threads you picked leave your device — nothing else. A share code works exactly once, expires after fourteen days if unused, and you can revoke a share at any time, which removes it from the server and from your psychologist's view.
Push notifications
If you turn notifications on, the server stores a push registration for that device — the technical address it needs to deliver a notification. Turn notifications off and it's no longer used.
Services we rely on
Running the account features means working with a few processors. Each sees only what its job requires:
- Stripe — payments. Your card details go directly to Stripe and never touch our server.
- Twilio SendGrid — transactional email only: verification codes and password-reset codes.
- Railway — hosts the server.
- Cloudflare — DNS and content delivery for this website.
We do not sell data, share it with advertisers, or use third-party analytics.
Deleting everything
Delete everything in the app's settings means what it says: it erases the data on your device and deletes your server account in the same action — your subscription is canceled, your backup is removed, and any outstanding shares are revoked. Nothing is retained to “win you back.”
Taking your data with you
Export everything, also in settings, writes your complete data to a file you keep. No request form, no waiting period — it's your data, on your device, so exporting it is just a button.
Who we are
Questions, concerns, or a request we haven't automated yet? Write to hello@onecurrentapp.com — a person reads it.