Privacy, honoured.
Last updated 2 July 2026
What we collect, how we use it, who we share it with, and how you can delete it. Questions: support@oneita.id.
What we collect
- Account identity. When you sign in with Apple or Google, we receive your email address and a stable user identifier. With Sign in with Apple you may choose to hide your email, in which case we receive Apple's private relay address.
- Your device calendar. Optional. If you grant calendar access, oneita reads the events of the day on your phone so her plans do not collide with what you already have on. It stays on your device and in your own account, never anyone else’s.
- Content you create. Chat messages, and the information you enter in the app: menstrual cycle details, workouts, fasting, mood, rest, activities, and spending.
- Technical data. A device key used to secure the connection, and basic connection logs (timestamps, error reasons) that contain neither your message content nor your tokens.
How we use it
- To provide oneita and the in-app trackers.
- To adapt guidance (workouts, fasting, mood, rest) to your cycle.
- To keep your data available across your devices.
We do not sell your data, and we do not use your health, cycle, or calendar data for advertising or data mining. Google and Apple are used for sign-in only.
AI processing
Your messages and the trusted context the app attaches, such as your current cycle phase, are processed by our AI model provider to generate replies. They are not used to train third party models.
Who we share it with
- Our AI model provider, only to generate your replies.
- Apple and Google, only for authentication and, if you connect Google, to fetch the data you authorized.
- A friend you pair with, and only her: if you hand someone your one-time pairing code, she sees which phase of your cycle you are on and which day, and you see the same of hers. No dates, no symptoms, no notes, no chats. Either of you can unpair at any time, and the sharing stops immediately.
We do not share your data with any other third parties.
Storage & retention
Your data is stored on our private server, isolated per user. Google access tokens are stored server side only to fulfil your requests, and are deleted when you disconnect the account or delete your account. We retain your data until you delete it.
Your controls
- Delete everything. Settings → Account → "Delete account & data" permanently erases your account, chats, and tracker data, disconnects your Google accounts, and wipes all local data on your device. This cannot be undone.
- Sign out. Settings → Account → "Sign out".
- Report content. Press and hold any message and choose Report, or email support@oneita.id.
Health disclaimer
oneita provides general wellness guidance, not medical advice. Always consult a qualified professional for health concerns.
Children
oneita is not directed to children under 13, or the minimum age of digital consent in your region.
Changes
We may update this policy. Material changes will be noted here with a new date.