Privacy Policy
Last updated: October 15, 2026
One Connected Life is operated from the Netherlands. We believe your data is yours. This policy explains what we collect, why, and what you can do about it.
What we collect
Account data. Your name, email address, and timezone — the basics needed to give you an account.
What you create. Actions, promises, and other content you enter in the app. This is the whole point — we store it so you can use it.
Health data. Only if you switch it on, one module at a time: sleep and wake times, weight and daily notes in the Morning Ritual; meals, fasting and digestion in Eat; mood check-ins in Welcome. Each needs your explicit consent, and switching it off leaves the rest of the module working. The full list is on Health data at OCL.
Phone number. Only if you connect a WhatsApp or text number. It gets check-ins and reminders, promise reminders included, each one switchable in Settings → Notifications. We keep your number and your replies.
Messages. What you write in group chats, event and coaching threads, and your private chat with OCL, including any photos, videos or files you attach.
Voice notes. When you record an action review by voice, we keep the recording for 48 hours so you can replay it or redo the text, then delete it. The text stays with your review.
Google sign-in. If you sign in with Google, we receive your name and email. We don't touch your contacts or any other Google data beyond what's listed here.
Google Calendar. If you opt in to Calendar sync, we create a dedicated "OCL Actions" calendar in your Google account and write your Actions there as events, live — when you create them and when you complete them. We cannot read or modify any of your other calendars (we use a narrow scope that only lets us manage the calendar we created). You can also use the manual import/export flow to move a day of actions at a time. We don't store your Google calendar data on our servers beyond the events we write. You grant this access explicitly, and you can disconnect from settings or revoke anytime from your Google Account permissions.
Server logs. IP address and browser type, kept for security. Deleted after 90 days.
Why we collect it
To provide the service you signed up for. That's it. For health data, we ask for your explicit consent first. Under the GDPR, this is "performance of a contract" (Art. 6(1)(b)). Server logs fall under our legitimate interest in keeping things secure (Art. 6(1)(f)).
Where your data lives
On servers in Germany (Hetzner Cloud). We don't transfer data outside the European Economic Area, except for third-party services like Google authentication and some of the services listed below, which are covered by appropriate safeguards.
How long we keep it
As long as your account is active. Delete your account, and most of your personal data goes with it. Your messages and comments, and your payment records, stay, with your name replaced by “Deleted user”; payment records are kept because Dutch bookkeeping law requires it. Server logs are kept for up to 90 days. We keep backup copies of the database for 72 hours, so anything you delete is gone from backups within three days.
Your rights
Under the GDPR, you can:
- — Access your personal data
- — Correct anything that's wrong
- — Delete your account (see “Delete your One Connected Life account” for what stays)
- — Export your data in a portable format
- — Object to how we process your data
- — File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
Delete your One Connected Life account
You can delete your account yourself, on the web or in the app. Sign in, go to Settings, open the General tab, and under Privacy & data choose Delete my account. Type your email address to confirm.
Your account is deleted for good 7 days later. Until then, you can cancel from the same place.
If you can't sign in, email privacy@oneconnectedlife.org from the address on your account and ask us to delete it.
What we delete. Your profile and everything you created on your own: actions, rituals, health logs, poems, uploads, and your private chat with One Connected Life.
What stays. Messages you wrote in group chats and other shared threads stay there, shown as "Deleted user", so the conversation still makes sense to everyone else. Promises you made with another member stay on their side, with your name replaced by "Deleted user". Shared things you helped build, such as teams, tools, articles and videos, stay for the people who use them, with your name removed.
Payments. Dutch bookkeeping law requires us to keep payment records, so your payments and invoices stay, under "Deleted user" and with any notes removed. Payments still waiting on you are cancelled, so nobody will ask you to pay them.
Cookies
We use one session cookie to keep you logged in. No tracking cookies. No third-party analytics. No ad networks.
Third-party services
Google — optional sign-in and calendar integration. Calendar access is only requested when you use Calendar sync or import/export. Subject to Google's Privacy Policy.
Hetzner Cloud — hosting provider, servers in Germany.
Twilio — sends verification codes, check-ins and reminders by text and WhatsApp, and receives your replies. Gets your phone number and the messages.
Resend — delivers our emails to you, from its EU region. Gets your email address and the email itself.
Stripe — handles payments. You enter your card details on Stripe's own page; we only keep a customer reference and what you bought.
OpenAI — turns voice notes into text when you record an action review. Gets the recording, which we delete after 48 hours.
Anthropic — powers the AI features: feedback on a promise draft, the Breakdown Retro coach, and the Companion. Gets the text you ask it about.
Apple — delivers push notifications to the iPhone app. Gets a device token and the notification text.
Google Firebase Cloud Messaging — delivers push notifications to the Android app. Gets a device token and the notification text.
Cloudflare — stores our database backups (see "How long we keep it").
Zoom, YouTube and Bunny — we hold Connection Games and coaching calls on Zoom. Recordings are copied to YouTube and Bunny Stream so participants can watch them back.
Questions?
Email privacy@oneconnectedlife.org.