Privacy Policy
Effective date: 10 August 2026
OneFlow Collective Ltd (company number 16747266), whose registered office is 5 High Street, Congleton, England, CW12 1BN ("OneFlow", "we", "our" or "us"), provides digital applications and services including Already., Perspective. and Being Books (together, the "Services").
This policy explains how we use personal information when you use the Services or contact us. OneFlow Collective Ltd is the controller of that information. Questions and rights requests may be sent to hello@theoneflow.life.
1. Information we use
Depending on the Service and the choices you make, we may use:
- writing or other content you choose to submit, such as a reflection;
- responses created for you and any reflections you choose to keep;
- a pseudonymous installation identifier used to protect the service against misuse and enforce fair-use limits;
- basic technical and diagnostic information needed to operate, secure and troubleshoot the Services; and
- information you include in a support or privacy request.
Please do not include personal information that is unnecessary for your reflection. If you voluntarily include health information or another special category of personal data in writing submitted for AI processing, Perspective asks for your explicit permission before that processing. You can avoid including it and withdraw AI-processing permission later in the app.
We do not use the Services for advertising or cross-app tracking, and we do not sell personal information.
2. How Perspective works
Perspective is a private reflective tool for adults. When you choose to submit writing and have enabled AI processing, the app sends that writing through OneFlow's secure service to an AI provider to create reflective lenses. The AI response can be incomplete or inaccurate and should not be treated as professional advice.
Before AI processing, Perspective performs a safety check. If that check pauses a submission, the writing is not sent to the AI provider and the app instead presents fixed human-support information. OneFlow does not use that feature to diagnose, monitor or provide crisis care.
Reflections you choose to keep are stored locally on your device. You can delete an individual kept reflection, delete all kept reflections, or withdraw AI-processing permission from within the app.
3. Why we use information
We use information only where needed to:
- provide a reflection or other feature you request;
- keep the Services secure, reliable and within fair-use limits;
- respond to support, privacy or legal requests;
- diagnose faults without intentionally logging reflection bodies; and
- meet legal obligations.
Our usual lawful basis for providing a feature you request is that the processing is necessary to perform our agreement with you. Security, misuse prevention and service reliability are based on our legitimate interests, balanced against your rights. Legal compliance is based on legal obligation. Where submitted writing contains special category data, we rely on the explicit permission presented in Perspective in addition to the applicable Article 6 basis.
4. Service providers
We use carefully selected providers to operate the Services. For Perspective these currently include:
- Supabase, for the secure application service and operational database; and
- OpenAI, to create AI-generated reflections from writing you choose to submit.
Providers process information for OneFlow under their contractual and security terms. Perspective requests that AI outputs are not stored for product features by the AI provider. Unless a separately approved reduced-retention arrangement applies, provider safety and abuse-monitoring systems may retain API content for up to 30 days. Our Supabase production systems are hosted in the EU (Frankfurt region), and the current service plan provides up to seven days of platform logs.
Some providers may process information outside the United Kingdom. Where required, we use contractual safeguards and the relevant UK adequacy regulations, International Data Transfer Agreement or UK Addendum.
5. Retention
We keep personal information only for as long as needed for its purpose:
- kept Perspective reflections remain on your device until you delete them or remove the app;
- submitted API content may be retained by the AI provider for safety and abuse monitoring for up to 30 days, unless a shorter approved control applies;
- platform operational logs are retained for up to seven days under the current service plan;
- pseudonymous hourly rate-limit records expire after their operational window, and aggregate daily usage counts are automatically deleted after 35 days;
- support correspondence is normally retained for 12 months after the matter is resolved, unless it is needed longer for an unresolved legal, security or safeguarding reason; and
- we may retain a minimal record where needed to demonstrate that a rights request was completed.
6. Security
We use reasonable technical and organisational measures designed to protect information, including encrypted transport, restricted service access, pseudonymous usage controls and avoiding intentional logging of reflection bodies. No service can promise absolute security.
7. Adults and children's privacy
Perspective and Already. are intended for adults aged 18 or over. Perspective asks the user to confirm this before AI processing. They are not directed to children.
Being Books is designed to be used by families through an adult. A parent or guardian should supervise a child's use and should not submit unnecessary information about a child. If you believe a child has provided personal information contrary to this policy, contact us so that we can investigate and remove it where appropriate.
8. Your rights
Under UK data-protection law, you may have rights to access, correct or erase personal information, restrict or object to processing, receive certain information in a portable form, and withdraw consent where consent is relied upon. Withdrawing consent does not affect earlier lawful processing.
To exercise a right, email hello@theoneflow.life. We may need enough information to verify the request. You may also complain to the UK Information Commissioner's Office at ico.org.uk, although we would welcome the opportunity to address your concern first.
9. External support services and links
The Services may show links or contact routes for independent support organisations. Those organisations are separate controllers of any information you give them. Their appearance does not imply a partnership or endorsement, and their own terms and privacy policies apply.
10. Changes
We may update this policy when the Services, providers or law change. The current version and effective date will be published on this page. Material changes will be highlighted where reasonably possible.
11. Contact
OneFlow Collective Ltd
Company number 16747266
5 High Street, Congleton, England, CW12 1BN
hello@theoneflow.life