The Fine Print
Last updated · 18 June 2026
One Life Company ("One Life", "we", "us") is built on a simple idea: your data belongs to you. We are local-first, we collect as little as possible, and we never sell your personal information. This Privacy Policy explains what we collect, why, how we handle it, and the rights and choices you have.
This policy applies to all One Life apps and services, including Luten and future apps such as Spend, Still and Move, and to our websites (together, the "Services"). Where a specific app provides its own privacy notice, that notice adds to or, where it conflicts, takes precedence over this one for that app.
One Life Company is the controller of the personal data described here. For some processing carried out through a Platform, such as payments, the Platform may be an independent controller under its own policy.
"Personal data" or "personal information" means information that identifies or relates to an identifiable person. "Processing" means any operation performed on personal data. "Sensitive data" includes health information, which we handle with extra care and only with your consent.
We collect information you choose to give us, such as your name and email when you create an Account or contact us, the contents of your messages, and your preferences and settings.
As you use the Services we collect limited information automatically, such as your interactions, the features you use, in-app events, and approximate, privacy-respecting usage statistics that help us understand what works.
We collect device information needed to deliver audio and run the app reliably, such as device model, operating-system version, language, time zone, and basic network information, and identifiers needed for crash reporting and core functionality.
We collect diagnostics, performance, and crash reports to find and fix problems and improve quality and stability. We aim to keep these aggregated or pseudonymised wherever possible.
When you buy a Subscription, we receive limited information from your app store, such as which plan you hold and its status. We do not receive or store your full payment-card number.
Some features can read health data, such as sleep, from sources like Apple Health, only after you grant explicit permission, which you can revoke at any time in your device settings. This data is used solely to provide the feature you asked for, such as an honest sleep score. It is processed on your device wherever possible, is never sold, is never used for advertising, and is never shared except as strictly needed to provide the feature you enabled.
We may receive limited information from service providers and Platforms that help us operate the Services, such as confirmation of a purchase or aggregated analytics, always consistent with this policy and their terms.
Our website may use a minimal set of cookies or similar technologies that are necessary for it to function and, where you allow it, privacy-respecting analytics. You can control cookies through your browser settings. Our apps do not use third-party advertising cookies.
We use information to provide, maintain, personalise, secure, and improve the Services; to deliver soundscapes, sessions, and features such as sleep scoring; to process Subscriptions through your app store; to provide support and respond to you; to detect and prevent fraud, abuse, and security incidents; to comply with legal obligations; and to send important service communications.
We do not use your data to manipulate your attention or maximise screen time, we do not run third-party advertising in our apps, and we do not sell or rent your personal information.
Where the GDPR or similar laws apply, we process personal data to perform our contract with you (to provide the Services); on the basis of your consent, for example for health data or optional features, which you can withdraw at any time; for our legitimate interests in operating, securing, and improving the Services in a way that does not override your rights; and to comply with our legal obligations.
Where we rely on consent, you may withdraw it at any time, which does not affect processing already carried out. You can manage many permissions, such as health access, directly in your device settings.
We do not sell or rent your personal information. We share it only in the limited situations described below, and always with appropriate protections.
We use trusted service providers and processors for hosting, crash reporting, analytics, and customer support. They act on our instructions under contracts that require them to protect your data and use it only to provide services to us.
Your purchases are processed by the app store or Platform, which handles your payment and billing under its own policy. We share only what is needed to deliver and support your Subscription.
We may disclose information where required by law, regulation, legal process, or governmental request, or where we believe in good faith it is necessary to protect the rights, property, safety, or security of users, the public, or One Life, or to detect, prevent, or address fraud, abuse, or technical issues.
If One Life is involved in a merger, acquisition, financing, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honour this policy and will notify you of any material change.
We may process and store information in countries other than where you live, including where our service providers operate. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, to protect it in line with applicable law.
We keep personal data only for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or anonymise it. Much of your data stays on your device and is removed when you delete the app or your Account.
We use technical and organisational measures designed to protect your information, including encryption in transit, access controls, and a local-first architecture that isolates data per family member. No method of storage or transmission is perfectly secure, but we work continuously to safeguard your data and to respond quickly to any incident.
If a breach affecting your personal data occurs, we will assess it promptly and, where required by law, notify you and the relevant authorities without undue delay.
If you are in the European Economic Area or the United Kingdom, you have the right under the GDPR to access, correct, update, delete, restrict, or object to the processing of your personal data; to receive a portable copy; and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; to access, correct, and delete it; and to opt out of any sale or sharing, which we do not do. We will not discriminate against you for exercising your rights.
If you live in another US state with a privacy law, you may have similar rights to access, correct, delete, and obtain a copy of your data, and to opt out of targeted advertising, sale, or certain profiling. We honour these rights as applicable.
You can exercise your rights through the Contact page or in-app settings. We will respond within the time the law allows and will not charge you or treat you differently for making a request, except as permitted by law.
To protect your privacy, we may need to verify your identity before acting on a request, and we may decline requests that we cannot verify or that the law does not require us to fulfil. Authorised agents may submit requests with proper authorisation.
The Services are not directed to children under 13, or the minimum age in your country, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
We send mainly service-related messages. Where we send optional updates, you can opt out at any time using the unsubscribe link or your settings. You may still receive essential messages about your Account.
We honour recognised browser privacy signals, such as Global Privacy Control, where required by law. We do not track you across third-party apps and websites for advertising.
The Services may link to or rely on third parties, such as app stores or Apple Health. Their use of your information is governed by their own privacy policies, which we encourage you to review. We are not responsible for the practices of third parties.
We may update this policy as our products and the law evolve. When we make material changes we will update the date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect means you accept the updated policy.
If you have a concern about how we handle your data, please contact us first so we can try to resolve it. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.
For any privacy question or request, or to reach our data protection contact, use the Contact page on this site.