Privacy Policy

This Privacy Policy describes how onelane (“onelane,” “we,” “us”) collects, uses, and protects your information when you use the onelane mobile app (iOS and Android) and the website at onelane.app (together, the “Service”). By using the Service, you agree to this policy.

The short version

• We collect the account details you sign in with and the content you create in the app (your lanes, plans, focus sessions, notes, and parked thoughts).
• onelane is self-report. We do not monitor your device activity, track which other apps you use, read your screen, or run background surveillance.
• We never sell your data and we don’t use it for third-party advertising.
• You can delete your account and all associated data at any time, from inside the app.

Information we collect

Account information

When you create an account, we collect your email address. If you sign in with Google, we also receive the name and profile photo associated with that Google account. Authentication is handled by Google Firebase Authentication; we never see or store your Google password, and for email/password accounts your password is managed (hashed) by Firebase, not stored by us in readable form.

Content you create

The Service stores the productivity data you enter so it can sync across your devices, including:

• Your lanes (life domains) — names, colors, and weekly hour budgets.
• Your weekly plans, targets, and reflection answers.
• Your focus sessions — the intended outcome you set, start/stop timestamps, closure notes (what you got done), and any check-in responses.
• Your parking lot items — the text of distractions you capture.
• Your settings — e.g. week start, time zone, and quiet hours.

Information collected automatically

Our website (onelane.app) uses Vercel Web Analytics, which collects aggregate, privacy-friendly usage metrics (such as page views and referrers) without cookies and without building a profile of you. Our infrastructure providers also process basic technical data (such as IP address and device/app version) as a normal part of delivering and securing the Service. We do not use this to track you across other apps or websites.

What we do NOT collect

• We do not monitor your device, your location, or your activity in other apps.
• We do not access your contacts, photos, microphone, or camera.
• We do not run third-party advertising or sell your data to data brokers.

How we use your information

• To provide the Service — sign you in, store your plan and progress, and sync them across your devices.
• To send local reminders/check-ins that you enable (these are scheduled on your device — see “Notifications” below).
• To maintain, secure, and improve the Service and fix problems.
• To respond to you when you contact support.
• To comply with the law and enforce our terms.

Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process your data to perform our contract with you (providing the app), based on our legitimate interests (keeping the Service secure and improving it), to comply with legal obligations, and with your consent where required (for example, optional notifications).

How your data is stored and who processes it

Your account and app data are stored in Google Firebase (Firebase Authentication and Cloud Firestore), running on Google Cloud infrastructure. Our website is hosted by Vercel. These providers act as our processors/sub-processors and are bound to protect your data. Access to your app data is restricted by security rules so that only your authenticated account can read or write it.

Sharing and disclosure

We do not sell your personal information. We share data only with the service providers above who help us run the Service, and only as needed to do so. We may disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer (e.g. a merger), in which case we’ll notify you.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time in the app under Profile → Danger zone → Delete account. This permanently removes your profile and all of your lanes, weeks, sessions, and parking-lot items, and cannot be undone. If you can’t access the app, email us at support@onelane.app and we will delete your data on request.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app, or contact us at support@onelane.app and we’ll respond within a reasonable time. We will not discriminate against you for exercising these rights.

Security

We rely on industry-standard infrastructure (Google Firebase / Google Cloud), encryption in transit, and per-account access rules to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and limit access to it.

Notifications

onelane’s reminders and check-ins are local notifications scheduled on your own device. We do not operate a server that pushes notifications to you, and you can turn them off in the app or your device settings at any time.

Children’s privacy

onelane is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we’ll delete it.

International transfers

Your data may be processed in countries other than your own, including the United States, where our providers operate. Where required, we rely on appropriate safeguards for these transfers.

Changes to this policy

We may update this policy from time to time. We’ll change the “Last updated” date above and, for material changes, provide a more prominent notice.

Contact us

Questions about this policy or your data? Email support@onelane.app.