‹ Back
Legal

Privacy Policy

Last updated: February 24, 2026 · Effective: February 24, 2026

Just One is designed with privacy at its core. We do not collect personal data, create user accounts, or track your behaviour. Your tasks live on your device and, optionally, sync to a private cloud database powered by Supabase — accessible only by you.

1. Who We Are

Just One is developed and published by SmartAI Forge S.L., a company incorporated in Spain.

SmartAI Forge S.L. acts as the data controller within the meaning of the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

2. What Data Just One Uses

Just One stores the following data on your device and, optionally, in a private cloud database:

Data Purpose Where stored
Your task text (what you type each day) Core app functionality — displaying and tracking your One Thing Device + Supabase (private)
Task status (active / completed / failed) Track daily outcomes and compute streak Device + Supabase (private)
Focus time used per session Record how long you spent in Focus Mode Device + Supabase (private)
Task date Organise history and prevent duplicate entries Device + Supabase (private)
Appearance preference (dark/light/system) Remember your display preference Device only (UserDefaults)

We never collect your name, email address, location, contacts, photos, health data, advertising identifiers, or any other personal information. The app does not include analytics SDKs, advertising SDKs, or crash-reporting services.

3. Cloud Sync (Supabase)

Just One syncs your task data to a private cloud database powered by Supabase. This means:

If you disable cloud sync, data is stored only on your local device.

4. Purchases & Subscriptions (StoreKit 2)

Just One offers an optional "Just One Premium" subscription processed through Apple's App Store using StoreKit 2 — Apple's native in-app purchase framework. No third-party purchase management service is used.

Subscription status is validated directly with Apple via StoreKit 2's on-device and server-side receipt verification. This means:

All payment processing (card data, Apple ID) is handled exclusively by Apple — we never see or store payment information.

5. Notifications

Just One may request permission to send local notifications to alert you when a Focus Mode session ends. These notifications are:

You can revoke notification permission at any time in iOS Settings → Just One → Notifications.

6. Home Screen Widget

The Just One widget displays your current task and streak directly on your home screen. Widget data is shared between the app and the widget extension via an App Group (group.com.justone.app) stored locally on your device. No data leaves your device for widget functionality.

7. Legal Basis for Processing (GDPR)

Processing activity Legal basis
Storing and syncing task data via Supabase Performance of the service you requested (Art. 6(1)(b) GDPR)
Managing subscription status via StoreKit 2 / Apple Performance of a contract (Art. 6(1)(b) GDPR)
Sending local notifications Your explicit consent (Art. 6(1)(a) GDPR), withdrawable at any time

8. Data Retention

Task data is retained on your device and in Supabase for as long as you keep the app installed or until you delete it through the app. You can permanently delete all your data at any time by going to Settings → Delete Account within the app, which will also remove your data from Supabase.

Subscription records are managed exclusively by Apple and are subject to Apple's data retention policies.

9. Data Transfers Outside the EEA

Supabase may store data on servers located outside the European Economic Area (EEA) depending on your region. Supabase relies on Standard Contractual Clauses approved by the European Commission for such transfers. Please review Supabase's Privacy Policy for details.

Subscription data is processed by Apple as part of the App Store infrastructure, subject to Apple's privacy terms.

10. Children's Privacy

Just One does not knowingly collect any data from children under 13 (or the applicable age in your jurisdiction). The app does not contain advertising or social features. If you believe a child has provided personal data, please contact us at smartaiforge@gmail.com.

11. Your Rights Under GDPR

If you are located in the EU/EEA or UK, you have the following rights regarding your personal data:

You can exercise most of these rights directly within the app (Settings → Delete Account), which will also delete your data from Supabase. For any additional requests, contact us at smartaiforge@gmail.com.

You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD): www.aepd.es.

12. Security

We take the security of your data seriously. Your task data is protected by iOS device encryption and, when synced, by TLS encryption in transit and at-rest encryption on Supabase's infrastructure. Access to your Supabase data is restricted to your authenticated session only.

13. Third-Party Links

Just One does not contain any in-app links to third-party websites or services other than those described in this policy (Supabase and Apple App Store / StoreKit 2). We are not responsible for the privacy practices of external sites.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, applicable law, or our practices. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will update the app as well. Continued use of Just One after changes take effect constitutes your acceptance of the revised policy.

15. Contact Us

For any questions, requests, or complaints regarding your privacy or this policy, please contact:

We aim to respond to all enquiries within 30 days.