Privacy Policy

Effective October 4, 2026

OneThing helps two people communicate what they need and show up for one another. Because that can involve personal and emotionally sensitive information, privacy is part of how the product is designed.

This Privacy Policy explains how The Bare Group, LLC (“OneThing,” “we,” “us,” or “our”) collects, uses, discloses, retains and deletes information when you use OneThing.

OneThing is intended for adults age 18 and older.

Information we collect

Account information

We collect information needed to create and maintain your account, including your name, email address, authentication information, user ID, invite code, partner relationship, notification settings and related account information.

Check-ins and relationship content

When you use OneThing, we collect information you choose to provide or create through the service, including:

• moods or feelings you select;
• free-text context;
• needs or asks you type or select;
• check-ins you submit;
• suggestions you select or edit;
• notes and responses;
• whether asks are opened, acted on, acknowledged or completed; and
• information needed to maintain those relationship interactions.

Invitations and preferences

If you invite someone, we may collect the invitee's first name, an optional note, invite status and related information.

Where available, your account may contain preferences you choose to provide, such as favorite restaurants or cuisines, sizes, or things you prefer to avoid.

Usage and technical information

We collect information needed to operate and understand the service, including app interactions, feature events, user and account identifiers, installation identifiers, push tokens, platform information, notification interactions, and technical and update information.

How we use information

We use information to:

• operate accounts and pairing;
• deliver check-ins and relationship interactions;
• provide and personalize suggestions;
• provide optional AI assistance;
• send requested notifications;
• diagnose and repair product problems;
• secure and maintain the service;
• understand whether product functionality is working;
• process privacy requests; and
• comply with applicable law.

Authorized personnel may access user content only when reasonably necessary to operate, support, secure, diagnose or repair the service.

At launch, OneThing does not maintain a secondary corpus of users' check-in text for model training, model evaluation, marketing-copy generation or similar secondary uses.

If we introduce an optional secondary use requiring permission in the future, we will provide the applicable disclosure and obtain the required permission first.

AI assistance

OneThing offers optional AI assistance powered by Anthropic's Claude.

If you enable AI assistance, OneThing may send Anthropic:

• your selected mood or feeling;
• context you type;
• asks you type or select; and
• text needed to generate or evaluate suggestions for your current AI-assisted check-in.

OneThing does not send the text you type in a check-in to Anthropic simply because you are composing it.

When AI assistance is turned on, information is sent to Anthropic only when you take an action that uses AI, such as asking OneThing to help you find the words, or when you submit a check-in that uses AI processing.

If you abandon a draft without taking an AI action or sending the check-in, that draft is not sent to Anthropic.

OneThing doesn't add your name, your email, your account ID, your device ID, or your partner's name to the request. What you type is sent as you wrote it, so if you include a name or other identifying information, Anthropic receives that too.

OneThing also does not inject your partner's stored profile, check-in history, mood history or other partner-originated account data into your AI request.

You may use the manual check-in path without sending your draft to Anthropic.

Anthropic's commercial terms state that Customer Content submitted through its commercial service is not used to train Anthropic's models. Standard API inputs and outputs are generally deleted within 30 days, subject to Anthropic's applicable safety, legal and other permitted exceptions.

What your partner receives

Information you intentionally submit as a partner-facing check-in, ask, note or response is provided to the partner with whom you are paired.

Your partner does not automatically receive drafts that you abandon before submission.

Service providers

OneThing uses service providers to operate the app.

Supabase provides database, authentication and backend infrastructure.

Anthropic processes information used in AI-assisted features when you have enabled AI assistance.

Expo and Apple provide application-update and push-notification infrastructure.

Push-notification content generated by OneThing is generic and does not include the substance of your check-in or ask.

External links

OneThing may provide links to retailers, restaurants or other services.

When you choose to open an external service, that company's privacy practices apply.

The launch version of OneThing does not append your mood, check-in text, ask, email, account ID or OneThing device identifier to its retailer links.

Selling, advertising and tracking

OneThing does not sell personal information or consumer health data.

The launch version does not use OneThing data for cross-context behavioral advertising and does not contain third-party advertising SDKs that track users across other companies' apps or websites.

Retention and deletion

We retain information only as reasonably necessary to provide and maintain OneThing, fulfill the purposes described here, comply with applicable law and protect the service.

You can request account deletion from within OneThing.

Our deletion process removes the deleting user's authored content, including moods, check-in context and asks, subject to applicable legal and technical limitations.

Material independently created by the other partner may remain. Where necessary to retain that partner-created material, OneThing may preserve a contentless record that an interaction occurred without retaining the deleting person's words, asks, mood or identity merely to preserve the history.

Processors and backups may require additional time to complete deletion as permitted by applicable law.

Privacy rights

Depending upon where you live, you may have rights to access or delete information and to exercise other privacy choices.

Washington consumers have additional rights described in the OneThing Washington Consumer Health Data Privacy Notice.

Requests may be submitted to info@thebaregroup.com.

Security

We use administrative, technical and organizational safeguards designed to protect information from unauthorized access, use, alteration or disclosure.

No system can guarantee absolute security.

Children

OneThing is intended for adults age 18 and older.

Changes

We may update this Policy as OneThing changes. Where applicable law requires additional notice or permission before a material new sensitive-data practice begins, we will provide that notice or obtain that permission before beginning the practice.

Contact

The Bare Group, LLC
info@thebaregroup.com