ONE ACTION

Privacy, in plain language.

One Action is designed to work without an account. The basic app stores your journey, check-ins, swaps and preferences in your browser’s localStorage on the device you are using.

If you do not register

Your personal journey data stays on that browser/device. A custom theme URL can tell the app which public theme to load, but it does not identify who you are.

If you register

Your email address and a password hash are stored in the configured One Action D1 database, together with the journey state you choose to sync. The app also keeps a local copy for speed and offline use.

Organisation themes

A school, community, retirement village or other organisation can give participants a theme link or QR code. The theme identifies the program, not the participant. Unless cloud registration is used, individual progress remains local to the participant’s device.

Marketing enquiries

If you submit a pilot enquiry, One Action stores the name, email, organisation, audience category, message and source page so the enquiry can be answered. The form is not intended for sensitive personal information.

Anonymous product analytics

One Action may send small first-party usage events to the One Action API so the operator can understand which public themes are opened and how far people progress. These events use a random browser identifier and can include the theme, week number, action identifier, check-in event, related-source opens, and campaign parameters from the link you opened. The analytics code does not send your action notes, swap reason, email address, exact location or browser fingerprint. If your browser sends Global Privacy Control or Do Not Track, this analytics code does not send events.

What is not included yet

This MVP does not include advertising trackers, cross-site tracking, social login, email marketing automation, or organisation access to individual participant histories. If those are added later, this page should be updated before they are enabled.

Important

This is a product privacy explanation, not a substitute for legal advice or a final production privacy policy. Before a broad public launch — especially in schools, health-related settings or large organisations — review the data handling and legal requirements that apply to the deployment.