Applies to the OneOne AI Companion mobile app
(package online.oneone.app) and the OneOne companion service.
Last updated: 16 August 2026
OneOne (“we”, “us”) operates the OneOne AI Companion app and the OneOne companion service. For any privacy question, data request, or complaint, contact us at [email protected]. We aim to reply within 30 days.
OneOne is intended solely for adults aged 18 or over. The app asks you to confirm your age before you can use it. We do not knowingly collect data from anyone under 18. If we learn that we hold data belonging to a minor, we delete it. If you believe a minor is using the service, write to us at the address above.
| Data | Why we have it |
|---|---|
| Anonymous account identifier and session token, generated on first launch | To keep you signed in and tie your conversation and balance to your device. No name, email address, password, or phone number is required. |
| Age confirmation and interface language | To enforce the 18+ requirement and show the app in your language. |
| Messages you send and receive, including any photos you choose to attach | To generate replies and to give your companion memory of your conversation. Without this the service cannot function. |
| Telegram account identifier — only if you choose to link your Telegram account | To merge your app and Telegram profiles so one balance and one conversation history follow you across both. Linking is optional. |
| Balance and transaction records — virtual currency earned, purchased, and spent | To operate the in-app economy, prevent abuse, and keep accurate records. |
| Rewarded-ad events — that an ad was requested, shown, and rewarded | To credit your reward and to detect fraudulent reward claims. |
| Technical data — IP address, browser/app user agent, timestamps, error logs | To run and secure the service, diagnose faults, and detect abuse. |
| Advertising identifier and device data, collected by our advertising partners inside their own SDKs | To select and measure rewarded ads. See section 6. |
We do not use your conversations to build advertising profiles about you, and we do not sell your personal data.
Companion replies are produced by large language models. To generate a reply, the content of your conversation — including recent messages and any photo you attach — is sent to third-party AI model providers acting as our processors. These providers process the content solely to return a response to us.
The app offers optional rewarded video ads. Ads are delivered through the Unity LevelPlay mediation platform, which runs an auction across several advertising networks and serves the winning ad. The networks that may take part, and whose SDKs are included in the app, are: ironSource Ads, Unity Ads, AppLovin, Mintegral, Vungle (Liftoff), Meta Audience Network, and Google AdMob.
These partners operate their own SDKs inside the app and may collect your advertising identifier (on iOS, the IDFA; on Android, the Advertising ID), device model and operating system version, coarse country-level location derived from your IP address, and ad interaction data, in order to select, deliver, cap, and measure ads, and — where you allow it — to personalise them and measure their performance across apps. That processing is governed by each partner's own privacy policy:
Your choice over tracking. On iOS, the app asks for your permission before it lets these partners use your advertising identifier to track you across other companies' apps and websites (Apple's App Tracking Transparency prompt). If you decline, the identifier is not shared and ads are not personalised. You can change this at any time under Settings → Privacy & Security → Tracking. On Android, you can delete or reset your Advertising ID, and opt out of personalised ads, under Settings → Privacy → Ads. Watching ads is always optional; declining them does not remove access to the app.
We do not sell personal data, and we do not share it with data brokers.
We keep your conversation and profile data for as long as your account exists, because the service depends on your companion remembering you. When you delete your account, we remove the associated data as described in Account & Data Deletion.
Limited records may be retained after deletion where we are legally required to keep them — for example, records of completed purchases needed for tax and accounting — or in backups, which are overwritten on a rolling basis and fully cycled within 30 days. Security logs containing IP addresses are retained for up to 90 days.
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. To exercise any of these, email [email protected]. Deletion is also available directly in the app, without contacting us.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your national data protection authority.
Our infrastructure and our service providers are located in various countries, so your data may be processed outside the country where you live, including outside the EEA. Where that happens, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
Data is transmitted over encrypted connections and stored on access-controlled servers. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect your data and we review them as the service grows.
We may update this policy as the service changes. The “last updated” date at the top of this page always reflects the current version. If a change materially affects how we use your data, we will give notice in the app before it takes effect.
Questions, data requests, or complaints: [email protected].