# OnceKit Privacy Policy

Last updated: June 7, 2026

This Privacy Policy explains how OnceKit collects, uses, stores, shares, and protects your information. By using the OnceKit app, website, backend services, or related features, you acknowledge the data practices described in this policy.

OnceKit is provided by ZAADN INFORMATION CO., LTD. If you have questions about this policy, data deletion, or privacy rights, contact us at hello@oncekit.app.

## 1. Scope

This policy applies to the OnceKit app, OnceKit website, backend API, AI recognition features, friend interactions, subscription entitlement sync, and related services.

This policy does not apply to third-party websites, stores, or service providers acting under their own privacy policies. When you use Apple, Google, RevenueCat, Firebase, or other third-party services, those providers may process your data under their own policies.

## 2. Information We Collect

OnceKit collects information depending on the features you use.

### 2.1 Account and Login Information

- Email address, display name, user ID, and OnceKit ID.
- Login method, provider identifiers, and verification status.
- Account creation time, update time, language, and region preferences.

### 2.2 Content You Enter, Upload, or Import

- Text records, diary entries, life events, tags, summaries, timestamps, locations, amounts, health-related fields, and workout-related fields.
- Photos, image content, screenshots, and recognition results used for camera recognition, album import, or screenshot import.
- EventCards, goals, weekly reports, overviews, friend shares, and chat-related content that you choose to save or share.

### 2.3 Location and Context Information

- Location information you provide or allow OnceKit to access.
- Place names, addresses, coordinates, or nearby place information associated with your records.

### 2.4 Subscription, Payment, and Usage Quota Information

- OnceKit Prime subscription status, product IDs, purchase or restore results, and entitlement status.
- Monthly free quota usage, image recognition quota usage, record creation counts, and anti-abuse usage data.
- OnceKit does not store full payment card numbers on its own servers. Payments are generally processed by Apple App Store or Google Play, and subscription entitlements are verified and synchronized with help from RevenueCat.

### 2.5 Technical, Device, and Security Information

- Device type, operating system, app version, language settings, and network request information.
- Error logs, diagnostics, security logs, abuse prevention data, and service stability information.

## 3. How We Use Information

We use information to:

- Create, authenticate, verify, and maintain your account.
- Turn your inputs and imports into life records, EventCards, overviews, weekly reports, and personalized reviews.
- Perform AI text parsing, image recognition, classification, summarization, search, and structured extraction.
- Sync, back up, and restore your data across devices or after reinstalling the app.
- Provide friend, sharing, chat, referral, and social interaction features.
- Verify OnceKit Prime subscription status, restore purchases, manage free quotas, and prevent abuse.
- Maintain service security, troubleshoot errors, improve product quality, and send important service notifications.
- Comply with legal, tax, accounting, security, and dispute-resolution obligations.

## 4. AI, Photos, and Screenshots

When you use text input, camera recognition, album image selection, screenshot import, or diary mode, OnceKit may send relevant content to AI service providers for recognition, classification, summarization, field extraction, or structuring.

AI output may be incomplete, inaccurate, or not reflect your actual situation. You should review records, amounts, calories, exercise details, health fields, places, and other AI-generated fields yourself. OnceKit AI output is not medical, legal, financial, tax, or other professional advice.

## 5. How We Share Information

OnceKit does not sell your personal information.

We share or disclose information only in the following situations:

- With cloud hosting, database, storage, AI, notification, analytics, error diagnosis, or security service providers as necessary to provide the service.
- With Apple, Google, RevenueCat, or other store and subscription verification services for payments, subscriptions, purchase restoration, and entitlement synchronization.
- When you actively share an EventCard, public profile, friend invitation, chat content, or other content, recipients may see the information you choose to share.
- When necessary to comply with law, court orders, regulatory requests, protect user safety, investigate abuse, or protect OnceKit rights.

## 6. Third-Party Services

OnceKit may use third-party services such as:

- Cloud hosting and database services for API delivery, synchronization, and storage.
- Firebase or similar services for login, notifications, analytics, or crash diagnostics.
- Apple, Google, and RevenueCat for store payments, subscription verification, and entitlement synchronization.
- AI service providers for text, image, and screenshot recognition and summarization.

Third-party providers may process information under their own policies. OnceKit uses these services only as needed to provide and improve the service.

## 7. Data Retention and Deletion

We retain information for as long as necessary to provide the service, maintain accounts, synchronize data, process subscriptions, comply with legal obligations, resolve disputes, prevent abuse, and maintain security.

You may request account and personal data deletion through the app settings or by contacting hello@oncekit.app. We will process deletion requests within a reasonable period, but some information may be retained when required for legal, accounting, security, dispute-resolution, or anti-abuse purposes.

Deleting your account may prevent you from accessing saved records, EventCards, friend interactions, subscription associations, and personalized data.

## 8. Security

OnceKit uses reasonable technical and administrative measures to protect information, including access controls, database and API security, login verification, error monitoring, and abuse monitoring.

No internet service can guarantee absolute security. You are also responsible for protecting your account, password, device, and login credentials.

## 9. Children and Minors

OnceKit is not designed for children under 13. If your jurisdiction requires a higher minimum age, you must meet that minimum age or use the service with required consent from a parent or legal guardian.

If we learn that a child below the applicable age has provided personal information without required consent, we will take reasonable steps to delete that information.

## 10. International Data Transfers

OnceKit uses cloud hosting, AI, subscription verification, and other service providers that may be located outside your country or region. By using OnceKit, your information may be transferred to, stored in, or processed in other regions as described in this policy.

## 11. Your Rights

Depending on your location, you may have rights to:

- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your account or personal information.
- Object to or restrict certain processing.
- Request a portable copy of your data.
- Withdraw certain consents.

To exercise these rights, contact hello@oncekit.app. We may need to verify your identity before processing requests.

## 12. Policy Updates

We may update this policy from time to time. If changes are material, we will notify you through the app, website, or another reasonable method. Continuing to use OnceKit after an update means you understand the updated policy.

## 13. Contact Us

For questions about this policy, data processing, account deletion, or privacy rights, contact:

ZAADN INFORMATION CO., LTD.  
OnceKit Privacy Contact  
Email: hello@oncekit.app