Privacy

• Everything you log is private by default. Nothing is shared unless you turn it on.
• We never sell your data, never show ads, and never share it with data brokers or advertisers.
• Weight, body measurements, body photos, food, journal, mood and location are never shown in the community.
• The AI sees only what a question needs, already summarized, and never your journal, name or email.
• You can export everything or delete your account from Account, at any time.

• Your account: your email address (for sign-in links), a display name if you give one, and your date of birth, which sets age-appropriate protections.
• What you log: food, water, fasting, workouts, activities, stretching, sleep, recovery, mood, journal entries, weight, body measurements, body photos, goals and priorities.
• What you import: data from files you choose to import (for example an Apple Health export), such as steps, workouts, sleep, heart rate and weight.
• Your device: if you turn on notifications, a push address from your browser so we can send them; and your app settings, such as theme and units.
• Location, only when you ask: to show weather, your browser shares your position, which we round to about 10 km before looking up conditions. We don’t store it.
• Error reports: when a screen breaks, we record what went wrong (a scrubbed message, the page’s path, a browser and system label such as “Safari 18, iOS”, and the app version). Never what you typed, your health data, your email or your IP address. These are deleted after 30 days.
• Payments: if you choose a paid plan, Stripe handles your card. We keep only a customer reference and your plan’s status.

Only to run ONERING for you: to calculate your Ring and its reasons, suggest a next step, show your progress, keep your logs in sync across devices, send the notifications you asked for, and keep the service secure and working.

Scores come from versioned, evidence-based methods. Personal patterns (your baselines and what tends to help you) are learned from your own data and stay in your account.

ONERING uses Claude, made by Anthropic, for two things:

• Coach answers. The model receives a short summary of only the parts relevant to your question (for example today’s training or this week’s sleep). It never receives your journal text, your name, your email or anything that identifies you.
• Food photos and nutrition labels. Only the image is sent. The result is an estimate that you confirm before anything is saved.

AI answers always say how confident they are and are never a diagnosis. Anthropic’s commercial terms say it doesn’t use this data to train its models.

• Nothing you log is visible to anyone else until you choose to share it, and you can change that at any time.
• Friends and teams can see only what you turn on, such as activity, milestones or challenge progress. Weight, body, food, sleep, mood, journal and location are never part of it.
• In the community, people under 18 connect only with others under 18, and their weight, body, journal and mental-wellness data is never shared.
• Family members, guardians, trainers and clubs see only what you choose to share with them. Guardian controls can limit what a teen’s account does; they never give a guardian access to the teen’s private data.
• When something is reported, a small review team sees the reported post or profile so they can act on it.

Progress photos are for adults, stored privately, and visible only to you. Before a photo leaves your device, ONERING redraws it so location, camera and other hidden details are removed, and our server checks that they’re gone. Deleting a photo, or your account, deletes the file.

These services process data on our behalf, only to provide ONERING:

• Supabase: our database, sign-in and private photo storage.
• Vercel: hosts the app and runs its servers.
• Anthropic: the AI described above.
• Stripe: payments, if you choose a paid plan.
• Open Food Facts and USDA FoodData Central: food and barcode lookups. They receive the search term or barcode, nothing about you.
• Open-Meteo: weather, using only your rounded position.
• Your browser’s push service (for example Apple, Google or Mozilla): delivers the notifications you turned on.

We may also disclose information if the law requires it, and we’ll push back on requests that are overly broad.

• Export: download everything in your account as a file, from Account.
• Delete: delete your account and everything in it, including photos, from Account. This is permanent.
• Correct: edit or delete any entry yourself.
• Sharing: change what friends, teams and others see at any time.

Where the law where you live gives you more rights (for example in the EU, the UK, California, or states with consumer health data laws), we honor them.

Your data stays while your account exists. When you delete your account it’s removed right away; copies in our providers’ encrypted backups expire on their regular schedule. Error reports are deleted after 30 days.

ONERING is for people 12 and older. For people 12 to 17, ONERING never sets calorie deficits or weight-loss targets, never shows weight or body comparisons, and keeps weight, body, journal and mental-wellness data private. It focuses on skill, fueling, sleep, recovery and confidence. Guardian features let a parent or guardian add limits, never see private data.

Data is encrypted in transit and at rest. Every table in our database is protected so each person can reach only their own records, and the people who run ONERING don’t browse your data. No system is perfect; if a breach ever affects you, we’ll tell you promptly.

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect. Questions or requests: contact details will be listed here before launch.

Also see the terms and health and safety.