Privacy Policy

Effective: October 1, 2026

One Concept is operated by Coding Moves. This policy explains the data used to provide the app and how to contact us about it.

Information used to provide the app

• Account information: your email address and authentication session are handled by Supabase Auth. The app uses the verified account identity to keep your data separate from other users.
• Profile and learning information: a display name, timezone, followed topics, daily assignments, completed lessons and reviews, streaks, likes, saved concepts, and reminder preferences.
• Notification information: if you grant notification permission, the app sends an Expo push token and your device platform to our server so it can deliver the reminder times you choose.
• Device-local information: encrypted authentication data and app caches may be stored on your device so the app can reopen and show recent learning content while offline.

How we use information

We use this information to sign you in, select and remember daily learning, calculate streaks, keep your saved and liked content, and send reminders when you enable them. We do not use the app for advertising, and the app does not include behavioural analytics or crash-reporting SDKs.

Optional public profile

Profile sharing is off by default. If you enable it, anyone with your link or QR code can view only the display name, streaks, learned-concept count and individual achievements you select. Email addresses, saved concepts, account identifiers and private activity are not included. You can change these choices or turn sharing off in the app. Turning it off revokes the old link, including after you enable sharing again, but cannot erase screenshots or copies already made by a visitor.

Optional Connections

If you use Connections, we store requests, accepted relationships and blocks to provide your private lists and prevent unwanted invitations. Receiving new requests is off by default. The other learner sees only the profile information you currently choose to share. You can decline, cancel, remove or block a connection. Blocking stops connection requests; it does not make an otherwise public profile link private. Turn off sharing to revoke that link. We keep limited request-event timestamps to enforce invitation limits.

Service providers

We use Supabase to provide authentication and database infrastructure. We use Expo's push-notification service to deliver reminders when enabled. These providers process the information needed to operate those services. Our backend hosting provider processes requests needed to run the app.

Choices and retention

You can turn reminders off in the app. Signing out removes account-scoped app caches and attempts to deregister the current device from reminders while it is online. Account and learning data remain associated with your account until you ask us to delete them or we no longer need them to run the service.

Security

Private application requests use a verified account token, and access controls are designed to limit data access to the signed-in account. No method of internet transmission or storage is completely secure.

Your requests and contact

You can request access to, correction of, or deletion of your account data by emailing contactmuawia@gmail.com from the address associated with your account. We may need to verify the request before acting on it.

Changes to this policy

We may update this policy when the app or its data practices change. The current version is published at this address, with its effective date.