Privacy Policy
Last updated: June 2026
One on One takes your privacy seriously. This policy explains what data we collect, why we collect it, who we share it with, and how you can control it.
1. What We Collect
- Account information: your full name, work email address, and a hashed password stored via Supabase Auth. Optionally, you may add a job title, LinkedIn profile URL, and date of birth from your account settings. These are voluntary and used only to personalise your experience.
- Work entries: the content you log, titles, descriptions, categories, dates, goal tags, and any file attachments (uploaded to Supabase Storage). Managers may write private notes on entries; these are never visible to the team member they refer to.
- Board activity: announcements posted by managers, emoji reactions from team members, review dates, and board membership records.
- Subscription and billing: your plan tier (Free, Pro, or Pro+), billing cycle, subscription status, and a Dodo Payments customer identifier. We do not store card numbers. All payment data is held by Dodo Payments.
- Usage events: timestamps of billable actions (such as bulk PDF exports) used to enforce quarterly quotas. Funnel analytics (signup, board creation, first entry, AI summary use) are sent to PostHog in aggregated form when PostHog is configured.
- Session data: an authentication cookie that keeps you logged in. No advertising cookies. No cross-site tracking.