One AIPrivacy Policy
One AI (“the App”) is published by DOXUTOSTUDIO Trend Limited (“DOXUTOSTUDIO”, “we”, “us”). This policy explains what the App collects, why, who processes it, how long we keep it and the choices you have. It applies to One AI for iPhone, iPad, Apple Watch, Android and Wear OS, to the share pages we host, and to this website.
1. What we collect and why
| Data | Why | Processed by |
|---|---|---|
| Account: email address, name, profile photo (from Sign in with Apple or Google) | Sign-in and account management | Firebase Authentication (Google) |
| Audio you record or import, PDFs you upload — including recordings made on Apple Watch or Wear OS | The core feature: transcription and notes | Firebase Storage (Google); speech-to-text by ElevenLabs, or Google Gemini as a fallback |
| Transcripts, notes, summaries, AI answers and chat, mind maps, flashcards, quizzes, translations, tags, glossary terms | Showing your notes and answering your questions | Cloud Firestore (Google); language models by Google Gemini (or OpenAI as an alternative provider) |
| Cloud live captions audio stream (Premium, only for languages your phone cannot caption itself) | Live captions while recording | ElevenLabs (real-time speech-to-text); not stored by us |
| Subscription status and purchase history | Unlocking Premium, restoring purchases | Apple App Store / Google Play; RevenueCat |
| User ID, push notification token, app language and time zone | “Your note is ready” notifications, account functions | Cloud Firestore, Firebase Cloud Messaging |
| Usage events (screens viewed, features used), app version, device model | Understanding and improving the app | Google Analytics for Firebase |
| Crash reports and performance data (device model, OS, app version) | Fixing crashes | Sentry (no name or email attached) |
| Advertising identifier (IDFA on iOS only if you allow tracking; Android advertising ID), ad interactions, approximate location from IP derived by the ad network | Showing ads on the free plan | Google AdMob, Google User Messaging Platform |
Legal bases (where GDPR applies): performing our contract with you (account, notes, purchases), our legitimate interests (security, crash fixing, product analytics) and your consent (personalized ads, notifications). We do not collect your precise location, contacts, photos, health or fitness data, or payment card numbers (the app stores handle payment).
2. What stays on your device
- On-device live captions use your phone's own speech recognition (Apple Speech / Android). The live draft is not uploaded; only the finished recording is sent for transcription.
- Calendar: “Add to calendar” opens your phone's event editor; we do not read your calendar or contacts.
- Watch apps keep a short list of your recent note titles and summaries to show on the watch, and upload recordings to your account through your phone or a short-lived sign-in token.
- Cached copies of your notes are stored on the device for offline viewing and removed when you sign out.
3. How AI processing works
Audio and text are sent to the providers listed above only to produce your transcript, notes and answers. Under our agreements with them, your content is not used to train their models. Results are generated automatically and may contain mistakes — check important details against the recording.
4. Ads and tracking
- The free plan shows ads from Google AdMob. Premium has no ads. We do not offer rewarded ads and we never sell your personal data.
- In the EEA, UK and Switzerland we ask for your consent through Google's consent message before any ad is loaded. You can change your choice any time in Settings → Privacy options.
- iOS: the App never asks for tracking on its own. Ads are non-personalized unless you turn on Settings → Permissions → Personalized ads, which shows Apple's App Tracking Transparency prompt. You can turn it off in iOS Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in Android Settings → Privacy → Ads.
5. Sharing
We share data only with the service providers listed above, who process it on our behalf under contracts that limit them to providing the service, and when the law requires it. A note becomes visible to other people only when you create a share link or export it. Share links can be revoked at any time.
6. How long we keep data
- Original audio and PDF files: deleted automatically 7 days after processing on the free plan and 90 days on Premium. Your transcript and notes remain.
- Notes, transcripts and chat: kept until you delete the note or your account.
- Share links: active until you revoke them or delete the note.
- Account deletion removes your profile, notes, audio, transcripts, chat history, glossary and device tokens immediately; backups are purged within 30 days. Purchase records stay with Apple, Google and RevenueCat as required for accounting.
- Crash reports and analytics are kept in aggregated or pseudonymous form for up to 14 months.
7. Your rights and choices
- Access and portability: export any note as PDF or text, or all notes at once in Settings → Your data → Export all notes (.zip).
- Deletion: delete a note, or your whole account in Settings → Delete account. See how to delete your account.
- Notifications, microphone, personalized ads: manage them in Settings → Permissions or in your phone's settings.
- Depending on where you live (for example the EU/UK GDPR, the California CCPA/CPRA, or Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP) you may also request correction, restriction or objection, withdraw consent, or complain to your data protection authority. Email contact@doxutostudio.top; we reply within 30 days. We do not sell or “share” personal information for cross-context behavioral advertising as defined by the CCPA.
8. Security
Data is encrypted in transit (TLS) and at rest by Google Cloud. Our servers accept requests only from genuine copies of the App (Firebase App Check). Access to production data is restricted and logged. Share links use unguessable tokens.
9. International transfers
Our backend runs on Google Cloud (Firebase) in the United States, and our AI providers may process data in the United States or other countries. Transfers are protected by the providers' standard contractual clauses and equivalent safeguards.
10. Children
One AI is intended for adults and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect their data; if you believe a child has given us data, contact us and we will delete it.
11. Changes
We will post changes on this page and update the date above. For material changes we will also notify you in the App before they take effect.
12. Contact
DOXUTOSTUDIO Trend Limited
Email: contact@doxutostudio.top
Website: minutesai-6715a.web.app