Privacy notice
Version 2026-10-22
onetype is a logbook for people with Type-1 diabetes. What you log is health data, a special category under the GDPR, so we collect as little as we can, keep it in the EU wherever possible, and give you control over all of it. This notice explains what we do, in plain words.
Who we are
onetype is responsible for your data (the “controller”). For anything about privacy, write to privacy@onetype.org. For help with the app, write to support@onetype.org. We answer privacy requests within one month.
What we keep
- Your account: your email address, the name you gave us (if any), when you signed in, and the passkeys you added (only their public part).
- What you log: insulin, glucose, food, lows and notes, with the time and time zone. If you type or speak an entry, we keep the text you confirmed.
- Your settings and choices: units, insulins, reminders, quiet hours, and every consent you give or withdraw, with the date and the version of this notice.
- Things you turn on: readings from a device you connect, readings and entries from a Dexcom Clarity or LibreView export file you import (the file itself is read on your device and not uploaded), people you share with (their name and email address), report links you create, and the address your browser gives us for notifications.
- Security records: sign-ins, data downloads and similar account events; short-lived counters that limit how often costly or email-sending actions can be used (these hold your account id, or for the waitlist and contact form, your IP address); and error reports that say which kind of page failed and in which browser, never what was on it.
- Before you have an account: your email address and name if you join the waitlist, and your message if you use the contact form.
We never collect your location, contacts, photos or anything from other apps.
Why, and on what legal basis
- Keeping your log and showing it back to you: your explicit consent to process health data (GDPR Art. 6(1)(a) and 9(2)(a)), given when you start. You can withdraw it at any time by deleting your account.
- Your account, sign-in emails and the features you use: providing the service you asked for (Art. 6(1)(b)).
- Reading entries with AI, and voice: a separate consent you can turn off at any time. Off means the app reads entries with simple rules on our own server, and nothing goes to an AI service.
- Usage statistics and occasional news emails: only with your consent, off unless you turn them on. Statistics are page counts from Vercel Web Analytics, with no cookies; they never include ids, dates, searches, or report and invite links.
- Keeping onetype secure and working: sign-in records, rate limits and error reports, based on our legitimate interest in protecting your data and the service (Art. 6(1)(f)). You can object to this; write to us.
- Answering you: waitlist and contact form messages, to reply to you (Art. 6(1)(b) and (f)).
onetype doesn't make decisions about you automatically. AI only suggests how to file what you typed or said; nothing is saved until you confirm it, and onetype never suggests doses.
You need an email address to have an account, and the health-data consent to use the log. Everything else is optional.
Who receives it
We don't sell your data or show you ads. These services process data for us, under data processing agreements, and only to run onetype:
- Vercel: hosting in Frankfurt (EU), server logs, the AI Gateway, and usage statistics if you turned them on.
- Neon: the database, in Frankfurt (EU), encrypted at rest.
- Cloudflare: stores our nightly database backups (R2, EU), encrypted by us before they arrive, so Cloudflare can't read them. It also runs the timer that tells onetype when to send reminders, which handles no personal data.
- Resend: sends sign-in codes and invitations (servers in Ireland, EU).
- Anthropic (Claude): reads the text of an entry if you chose AI reading. It gets the text only, never your name or email, and keeps nothing after answering.
- xAI (SpaceX AI): turns a voice recording into text if you use voice. It keeps nothing after answering, and we never store the recording.
- Slack: contact form messages reach our team there.
- Apple, Google or Mozilla: your browser maker's push service delivers notifications. They're encrypted so only your device can read them.
Data also goes where you send it: to people you invite (the parts of your log you choose), to anyone you give a report link, and to Dexcom or your Nightscout site when you connect them. We only read readings, unless you turn on sending your entries to Nightscout, which adds what you log in onetype to your own Nightscout site.
Outside the EU
Your log is stored in the EU. Some of the services above are US companies, and AI reading, voice transcription and Slack may process data in the United States. For those transfers we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. Ask us at privacy@onetype.org for a copy of the safeguards. With AI reading and voice off, nothing from your log leaves the EU.
How long we keep it
- Your account, log and settings: until you delete your account. Deleting removes them straight away.
- An entry you delete: kept 30 days (so it can be undone and doesn't reappear from another device), then removed for good.
- Sign-in codes: valid for 10 minutes, removed within a day.
- Invitations: work for 7 days; unused ones are removed 30 days after that. When sharing stops or an invite is cancelled, the other person's name and email and that share's access history are removed 30 days later. Report links work for 7 days or until you turn them off.
- Rate-limit counters: removed after 2 days. Server logs and error reports: kept by Vercel for a short time for troubleshooting, then deleted automatically.
- Device tokens: deleted as soon as you disconnect. Notification addresses: deleted when you turn notifications off on a device or sign out of it.
- Waitlist: until you create an account or ask us to remove you. Contact messages: as long as needed to answer you.
- Backups: our database keeps short-term backups for recovery, and we keep an encrypted copy of it from each night for 35 days, to restore onetype if something goes wrong. Deleted data disappears from them as they roll over, within 35 days. We only use a backup to restore the service. If we ever have to, we delete again every account deleted since that backup was made, using a list of deleted account numbers (no names or email addresses) that we keep for 40 days.
Cookies and storage on your device
onetype uses one cookie, to keep you signed in. It's essential, so there's no cookie banner, and there are no tracking or advertising cookies. On your device, the app also keeps: entries you logged that haven't uploaded yet (so logging works offline), recent pages for offline use, and your accessibility settings. Signing out removes the saved pages and entries waiting to upload from that device.
How we protect it
Everything travels encrypted (HTTPS) and is stored encrypted. Device sign-in tokens are encrypted again before we store them. Report and invite links are stored only as a fingerprint, so a copy of our database couldn't open them. Only a very small number of people can reach the database, and only to keep onetype running.
People you share with
If you invite someone, they can see only the parts of your log you choose, and they can never change or delete anything. If you allow it, they can add entries for you (for example at school); those show who added them, and only you can change or delete them. You can also leave a short handover note that everyone you share with sees; people who can add entries can update it. Invitations work for 7 days and only for the email address you entered. You can see when they looked, change what they see, or stop sharing at any time, and they lose access straight away. If you choose, they get a notification when you log a low yourself. That's a message, not a glucose alarm.
Reminders
Notifications show on your screen, including the lock screen, with the text you chose, so pick wording you're comfortable with.
Your rights
You have the right to:
- see and get a copy of your data (access and portability);
- correct it;
- delete it;
- restrict how we use it;
- object to processing based on our legitimate interests;
- withdraw any consent at any time. This doesn't affect what we did before you withdrew it.
Most of this you can do yourself in the app, under Settings → Privacy & your data: download everything (JSON, or your log as CSV), see your consent history, change your choices, and delete your account. For anything else, write to privacy@onetype.org.
You can also complain to a data protection authority, in particular the one where you live or work. In Germany, that's the authority of your federal state.
Age
You need to be 16 or older to create an account. Younger people can be supported by a parent or carer, who keeps their own log or is invited to see one.
Changes to this notice
The version at the top changes whenever this notice does. If a change affects what we do with your data, we'll tell you in the app before it applies, and ask again where your consent is needed.