Privacy policy
First published: September 24, 2026
1. Policy and contact
This policy applies to One Earthling. For privacy questions and data requests, contact oneearthling666@gmail.com.
This policy explains information processing when you use the App or send us related feedback. The App provides Today, Notes and sealed notes, Farewell, Fate, and personal settings. It does not provide App account registration, a public content community, or direct messaging.
2. Information and its purposes
| Feature | Information and purpose | Where it is processed or received |
|---|---|---|
| Profile | Your nickname and the date you arrived on Earth, to address you and calculate your days on Earth. Your nickname need not be your real name. The date is not used to verify identity or age. | On your device; within the corresponding iCloud scope when content sync is on |
| Today | Daily ideas, your selections, your own writing, and dates, to display and restore daily state | On your device; in iCloud when content sync is on |
| Notes and sealed notes | Your text, selected or captured photos, creation and editing times, sealing dates, opening times and status, to save, read, edit, and open notes at the agreed time | On your device; submitted notes and associated media in iCloud when content sync is on |
| Local drafts | Unsubmitted text, photos, dates, and recovery copies of edits to existing notes, to resume interrupted work | On your device, not uploaded as submitted notes; the relevant recovery content is cleared after successful submission or an explicit decision to discard it |
| Farewell | Text entered for the current paper-plane interaction; no semantic analysis or history of completed farewells | On your device, not synced to iCloud; see section 5 for unfinished or interrupted use |
| Fate | The current coin result and short-lived interaction state, to display the result and response | On your device; no stored or synced result history or long-term statistics |
| Settings and sync | Language and sync preferences, data-scope and record identifiers, versions, and sync and deletion state, to retain preferences, separate account content, and prevent duplicate or incorrect restoration | Settings stay on your device; necessary identifiers and sync state are processed through the relevant Apple service |
| Trial and purchases | First-open time, trial attribution and recovery evidence; product and transaction identifiers, purchase and expiry information, renewal, refund and revocation information returned by Apple, to determine access | On your device and through Apple's iCloud and StoreKit services; we do not receive your payment card number or Apple Account password |
| Feedback you send | Your email address, message, correspondence, and attachments you choose, to reply, investigate problems, and handle data requests | Received by us and our actual email provider; note or Farewell text is not attached automatically |
The App has no advertising, cross-app advertising tracking, or feature that sends your writing to third-party AI. It does not build advertising profiles from private writing. We do not sell or rent your personal information. Material you choose to send in feedback can be read by the people handling your request; please leave out private records unrelated to the issue.
3. Photos and device permissions
You can select photos through the system photo picker; this does not give the App access to your entire library. The camera is used when you choose to take and add a photo. Capturing a Live Photo with sound may require microphone permission to retain that sound. Importing an existing Live Photo is a separate action and does not mean the microphone is recording. Denying camera or microphone permission does not prevent text notes, although the corresponding capture function may be limited.
A Live Photo can contain a still image, paired video, and sound. Files retained to preserve your selected resources may also contain existing metadata such as capture time or location. Location embedded in a photo is different from the App requesting your device's location. Consider whether the photo and its information are suitable to save or sync. You can manage granted permissions in iOS Settings; revoking permission does not automatically delete content already saved.
4. Local storage, iCloud, and Apple purchases
Content is saved locally first. When you are signed in to iCloud, the system allows it, and you have not explicitly disabled content sync, the App automatically syncs eligible submitted content with that account. The same rule applies when you later sign in or service resumes. You can turn content sync off under Me → iCloud Sync.
Turning the switch off stops subsequent content sync. It does not delete existing local or cloud content or recall requests already accepted by the service. The switch does not control Apple purchase verification or the separate recovery of the original trial record. It does not stop all communication with Apple services or restart your trial. Recovering trial evidence does not require uploading your nickname, date, or private writing as proof of access.
Switching iCloud accounts does not automatically mix the previous account's content into the new account. Local content belonging to the previous account may remain and become available when you switch back. Your purchasing Apple Account may differ from your iCloud account.
A successful local save does not mean the cloud and all photos have finished syncing. Account availability, network access, iCloud capacity, and other system conditions affect sync. App content sync and iOS device backups are separate features. We do not operate a separate content server to receive private notes.
The external services involved are Apple's iCloud (eligible submitted content and separate trial-recovery information) and App Store / StoreKit (purchases and access verification); Google Gmail when you email us (your address, message, attachments, and correspondence); and Alibaba Cloud's server in Shenzhen, China, which hosts this website. The web server may log your IP address, access time, requested path, and browser information to serve pages and troubleshoot problems; the website does not receive private App notes. Apple and Google may process information in different regions under your relationship with their services. See Apple's Privacy Policy and Google's Privacy Policy. We remain responsible for our own handling and will check actual international transfers and any required notice or consent before the relevant features are released.
5. Retention and deletion
- Submitted notes are kept for your use. Expiry of paid or trial access does not delete your content. You can delete ordinary notes, sealed notes that are not yet due, and due sealed notes without paying.
- Deletion requires confirmation. There is no in-app trash or undo recovery. Local deletion removes the corresponding text, photo references, and associated drafts or edit recovery. Media files are cleaned up after relevant references are released; failed cleanup must be retried.
- Deletion markers without note text or photos may be retained to prevent an older device from bringing deleted content back. Offline deletions must wait for sync to resume before propagating. Local deletion alone does not establish completed cloud deletion. System backups and Apple service copies follow their respective mechanisms.
- Draft recovery is not promised across devices or after reinstallation. Sealing is an in-app time-based viewing restriction, not an encrypted vault or an evidence-preservation service.
- Completed farewells have no retained text history, iCloud sync, or recovery. For an unfinished or interrupted interaction, do not assume the text has already been cleared or will be recoverable next time. The exact behavior on exit, backgrounding, and interruption will be checked and updated before release.
- Necessary trial and transaction evidence is retained while it is needed to identify the original trial and verify existing access. Deletion markers and sync state are retained while needed to prevent an older device from restoring deleted content and to complete cross-device synchronization; they are cleaned up when no longer needed and when doing so will not break sync consistency. Data held by Apple follows its service policies.
- Feedback email and attachments are retained while needed to reply, investigate, handle a data request, and perform necessary follow-up. When no longer needed, we delete messages and attachments under our control. Material legally required to be kept is limited to that purpose and handled when the requirement ends; provider backups follow the email provider's mechanisms.
Uninstalling the App does not delete iCloud content or cancel a subscription. Do not uninstall solely to troubleshoot a device that still holds unsynced content.
6. Your choices and rights
You can view your profile and content, manage language, sync and system permissions, and edit or delete content under the App's rules. Paid-feature requirements or locks on already selected ideas do not restrict your ability to make legally available requests to correct or delete personal information.
Contact oneearthling666@gmail.com to request information about, access to, a copy of, correction of, or deletion of personal information we process; withdraw consent-based processing; or exercise applicable restriction, objection, and portability rights. Withdrawal does not affect processing that was lawful before withdrawal. We will verify only what is necessary, without asking for an Apple password or your complete private records, and respond within the period required by applicable law. If we cannot fulfil a request, we will explain why and identify available remedies.
Data on your device or in iCloud must be handled separately from email we actually receive. We first clarify your request and verify only the information necessary to handle it. You can view, correct, or delete local content in the App; deletion of synced content must propagate when the relevant iCloud account and sync service are available. An email alone does not give us remote access to or control over your private notes. We can handle feedback email we actually received and explain the steps you need to take on your device or through Apple, including any offline limitations. You may also complain to the relevant data protection or consumer authority.
Saving content you choose, syncing it under your settings, and verifying access are needed to provide the corresponding features. We process email you choose to send to respond to your request; limited website access records help serve and troubleshoot the site. Information required by law is processed only within that obligation. Where applicable law requires consent or separate consent, we will obtain it before the relevant processing. A system permission prompt or reading this policy is not blanket permission for other processing.
7. Security and changes
We protect information in proportion to the risks, restrict access to support material, and maintain necessary security measures. No device, network, or storage method can guarantee absolute security. We will handle and notify reportable incidents as required by law. Please protect your device and Apple Account.
Updates will be published at Privacy policy with a date. Material changes affecting your rights will be communicated appropriately; where renewed consent is required, publishing a new policy alone will not replace it. For privacy questions, contact oneearthling666@gmail.com.