One More Day

This Privacy Policy explains what information One More Day collects, where it's kept, who it's shared with and the choices you have. We've tried to write it plainly.

Who operates One More Day. One More Day is currently operated by Ra'Mar Wilson, an individual. It is not currently a separate company, corporation, LLC, nonprofit or other legal entity. In this policy, "One More Day," "we," "us" and "our" mean Ra'Mar Wilson, operating One More Day from the United States. Email us about anything in this policy at onemoredayapp@gmail.com. If who operates One More Day ever changes, we'll update this policy and tell you in the app.

The short version

Your Journal entries are never sent to OpenAI or any other AI service. The crisis check on your Journal runs on your own device.
Your check-in notes are never sent to OpenAI or any other AI service either. They're checked on our servers against a list of words. That's word matching, not AI.
Stories and comments are public, so they're treated differently: they're checked by our word lists and may also be sent to OpenAI's moderation service before they appear.
Stories and comments are shown to other members without your name.
We don't show ads, and we never use your moods, check-ins or Journal to sell you anything.
We don't sell your personal information.
You can buy from the shop without a One More Day account.
One More Day is for people 13 and older.

If you live somewhere with a consumer health data law, our Consumer Health Data Privacy Policy explains how that law applies to your wellbeing information.

1. Information we keep on our servers

Your account. Your email address. If you sign in with Google or Apple, the name and profile picture they share with us, plus the sign-in tokens that keep you signed in. Your name from Google may become your profile name inside your account, but it's never shown with your Stories or comments. If you choose to set a password, we store a scrambled (hashed) version of it, never the password itself.

Sign-in and security records. When you sign in, our sign-in system (Better Auth) records the session. That record includes your IP address and your user agent, which is the line your browser sends describing itself, such as the browser and device type. It's there so we can keep your account secure. One-time sign-in codes expire after 10 minutes.

Your date of birth. We ask once, to check that you're 13 or older. It's used for that and nothing else.

Your private wellbeing information. Your check-ins (the mood you pick, the feeling tags you choose and any short note you add), your Journal entries (title, text, and the mood, tags or prompt attached to them), your Reasons to Stay, and your badges, streaks and progress. This is private to your account. Other members never see it.

Journal entries are stored on our servers. They are not end-to-end encrypted, which means our systems can technically reach them. We treat them as yours: they're never shown to other members, never sent to an AI service, and never used for anything outside what this policy describes. But we're not going to claim protection we haven't built.

Your settings. Your timezone, theme and font size, your reminder time and how often you want reminders, and your email preferences, including whether email notifications are on and, if they are, when you turned them on. Your answers about suggestions ("Helpful," "Not for me," "Maybe later") are not kept on our servers. They stay on your device. See Section 2.

Your support topics. Choosing support topics is optional. If you do, we save your choices to your account so they work on any device you sign in on: the topics you'd like suggestions about, the topics you've asked us never to suggest, and the kinds of support you said you'd find useful. They're saved as labels from a fixed list, never anything you wrote. We don't work them out from your Journal, your check-ins, your Reasons to Stay or anything else you do in the app.

Asking us not to suggest a topic only stops those suggestions. It isn't a record that the topic is part of your life, and most of the time it just means "not for me." Some of the more private topics can be switched off this way, but we never save them as topics you want suggestions about. If you pick one of those as a starting point in the Journal, that choice stays on your device.

You can change or clear your support topics at any time in Settings, and they're deleted with your account. We use them only to choose what to suggest to you, never for advertising, fundraising or anything we sell.

What you share with the community. Your Stories, comments and reactions. Other members see the text and the time and nothing that identifies you. On our side we keep the link between the content and your account, because that's what makes it possible to moderate the community, answer a report and remove content if we have to. We also store a coded value made from your network address and browser (a hash, which can't be turned back into either) so the same person can be recognized across posts when we're stopping abuse. Our public feeds never hand out another member's email address, name or account id.

Moderation records. Reports about content, and the moderation actions taken on an account.

Feedback and prompt suggestions. Feedback you send us, with your email address, and any Journal prompt you submit. Submitted prompts are reviewed and are never published with your name on them.

Legal records. Which version of the Terms and of this Privacy Policy your account has acknowledged, and when.

Shop orders. A small record of each order: the items, the totals, the order status and reference numbers from Stripe and Printful. If you were signed in, the order is linked to your account so a supporter badge can be awarded. We don't store your name, email address, shipping address or payment details. See Section 5.

Admin access. One More Day's admins and moderators can see member email addresses and profile names in the admin tools, and can see which account a Story or comment belongs to. That's how moderation, safety and support work. Internal reporting only ever counts things like accounts, orders and badges. It never counts or charts journals, check-ins, moods, crisis detections, Reasons to Stay or support topics, and small numbers are hidden so nobody can be picked out of a total. The admin tools don't show anyone's support topics.

2. Information that stays on your device

Journal writing you haven't saved yet. It's encrypted on your device using AES-GCM and kept in your browser's IndexedDB storage. The key belongs to your account and is loaded as a non-extractable Web Crypto key, so the browser can use it to encrypt and decrypt but the page can never read the key out. Every record is tied to its own slot, so records can't be swapped between slots or between people. There is no plaintext fallback, ever: if the key, Web Crypto or IndexedDB isn't available, the editor keeps your writing in memory only and tells you so. Unsaved writing expires 7 days after it was last saved.

Your prompt and suggestion history. Which Journal prompts you've recently been shown or used, which post-check-in suggestions you've been shown or used along with your "Helpful," "Not for me" and "Maybe later" answers, and which OMD Button cards you've been shown, are kept in that same encrypted storage on your device. Only ids, the kind of event and a time are stored, never anything you wrote. Entries older than 30 days are dropped, the lists are capped in length, and the record itself expires 7 days after it was last written.

Suggestion signals. Which suggestions you see after a check-in or from the OMD Button are decided on your device, using simple things like the mood and feelings you picked. Those signals aren't sent to our servers for that purpose, and suggestions never read what you write. Saved support topics are the exception: they are kept on our servers so your choices can work across devices, as Section 1 explains.

Things that last only as long as your browser tab. The mood and feelings handed from a check-in to the Journal, a marker that your latest check-in may need extra care (for up to an hour), and your shop cart. Closing the tab clears them.

Small browser storage. Your sign-in cookie, a short-lived cookie that caches your session for five minutes, a shop cookie that proves this browser made a purchase so a supporter badge can be claimed later, your theme choice, and simple flags like whether you've already seen the welcome message.

3. How we use information

To run the app: your account, check-ins, Journal, Stories, suggestions, badges and settings.
To keep the community safe and to enforce our Terms.
To show crisis resources when something you write sounds like a crisis. See Section 4.
To send you sign-in codes and password reset emails. These don't depend on your email notification setting.
To send automated emails, like reminders or a note that someone commented on your Story, but only after you turn email notifications on in Settings. You can turn them off there at any time, or use the unsubscribe link in any of those emails.
To choose which suggestions to show you, from the support topics you picked. See Section 1.
To fulfill shop orders.
To improve One More Day from the feedback you send.
To meet legal obligations.

We don't use your wellbeing information to advertise to you, and we don't use it to decide what to sell you or when.

4. Crisis checks, moderation and AI

This is the part people ask about most, so here it is exactly.

Journal entries: on your device only. The crisis check on your Journal runs in your browser, on your device. Your Journal writing is never sent to OpenAI or to any other AI service, and it isn't sent to our servers for that check. If it finds crisis wording, your device shows you crisis resources. Nothing about that is reported to us.

Check-in notes: on our servers, but not AI. When you save a check-in note, our server compares it against a list of words and phrases. It's word matching. Your note is not sent to OpenAI or to any other AI service.

Stories and comments: public, so they're checked before they appear. Stories and comments are written for other people to read. Before one appears, it goes through our word lists, and it may also be sent to OpenAI's moderation service, which answers with categories like harassment or sexual content. Public Stories and comments are the only text One More Day sends to OpenAI.

No check catches everything. Some things get through, and some things get stopped that shouldn't have been. Moderation is done by software and by people, and neither is perfect. Nobody is watching your writing in real time, and showing you crisis resources is not the same as someone coming to help.

We use a small number of service providers to run One More Day. They may only use your information to provide their service to us.

Vercel, which hosts One More Day and keeps request logs. Those logs include IP addresses.
Neon, which runs our database.
Resend, which delivers our emails, such as sign-in codes.
Google and Apple, if you choose to sign in with them.
OpenAI, which checks public Stories and comments for harmful content. It never receives your Journal, your check-ins or any other private writing.
Stripe, which runs shop checkout and collects your payment details, email address and shipping address.
Printful, which prints and ships your order and receives the recipient's name and address.
Ko-fi, if you choose to contribute. That's a link out; you deal with Ko-fi directly.

About the shop. You don't need a One More Day account to browse, to see prices, to add to your cart, to buy, or to get your order and shipping updates. We never create a One More Day account out of a purchase, an email address, or anything Stripe, Printful or a shipper tells us. If you were signed in when you bought something, or you come back and claim it afterwards, a purchase can unlock a cosmetic supporter badge. That's a decoration. Buying something never unlocks, speeds up, improves or changes any support feature, and it never affects your growth, moderation or crisis handling.

We may also share information if the law requires it, to protect someone's safety, or as part of a reorganization or sale of One More Day, with notice to you.

Crisis lines and support organizations we link to, such as 988 and Crisis Text Line, are independent. They have their own privacy practices, and this policy doesn't cover them.

6. What we don't do

We don't send your Journal entries or check-in notes to OpenAI or any other AI service.
We don't show ads. There are no advertising trackers and no third-party analytics trackers in the app.
We don't sell your personal information, including anything about your wellbeing, and we don't hand it over for anyone else's advertising.
We don't use your moods, check-ins, Journal, Reasons to Stay, support topics or crisis state to advertise, or to target, time or personalize anything we sell.
We don't put anything for sale inside a crisis screen.
We don't put any support feature behind a payment.

7. How long we keep information, and what deletion does

We don't publish exact retention periods we haven't actually built. Here's how we decide instead.

While you have an account, we keep your account information and what you've recorded in the app, because that's the app: your check-ins, Journal, Reasons to Stay and progress are there for you to come back to.

When you delete your account, in Settings, we delete your check-ins, Journal entries, your Stories, comments and reactions, your feedback, your streaks and your preferences. Then we delete your account record, which also removes your profile, your Reasons to Stay, your support topics, your badges, your prompt submissions, the moderation actions recorded against you and your legal acknowledgements. Then we delete your sign-in identity, which removes your sessions and any connected Google or Apple account.

Two things deliberately stay, with the link to you removed: reports you filed about someone else's content, so moderation history stays intact, and shop order records, which we need for order and accounting obligations.

Deletion runs as a series of steps rather than one all-or-nothing operation. If a step fails partway through, some information can be left behind. If you delete your account and want us to check, email onemoredayapp@gmail.com.

Some records stay longer than the account, kept only as long as there's a reason: order and accounting obligations, fraud prevention and security, and anything the law requires us to keep.

Sign-in codes expire after 10 minutes. Expired sessions and codes are cleared out by our sign-in system on its own schedule.

Request logs at our hosting provider are kept for a limited time on their schedule, not ours.

Backups. Our database provider keeps routine backups so the app can be restored after a failure. Those backups roll over on their own cycle, which means something you deleted can still sit in a backup for a while after it's gone from the live app. We aren't going to claim deletion from backups is immediate, because it isn't.

On your device, encrypted Journal drafts expire 7 days after they were last saved, and history entries age out after 30 days. Once your account is gone, anything still on the device can't be decrypted, because the key belonged to the account.

8. Your choices

Delete your account at any time, in Settings. See Section 7 for what that removes.
Choose, change or clear your support topics in Settings, whenever you like. Clearing them puts things back to how they were before you chose any.
Turn email notifications on or off in Settings. They're off unless you turn them on. The unsubscribe link in any automated email turns them off too, and none will be sent again until you turn them back on in Settings.
Change your other settings in the app: your theme, reminder time and timezone.
Export what you've recorded. You can export your check-ins, with the mood, feeling tags, notes and dates, from your stats.
Ask us anything about your information. Email onemoredayapp@gmail.com. That's where privacy questions and requests go, and it's the only address you need.

Depending on where you live, local law may give you extra rights over your information, such as asking for a copy of it or asking us to delete it. Email us and we'll do what we can.

9. Children and teens

One More Day is for people 13 and older. Anyone under 13 isn't permitted to use it, and the age check at sign-up runs on our servers, before an account exists. We don't knowingly collect information from anyone under 13.

We don't collect parental permission, because that isn't our model. We simply don't admit anyone under 13.

If we learn that a child under 13 created an account anyway, we'll handle and delete that information as the law requires. If you believe a child under 13 is using One More Day, email onemoredayapp@gmail.com and tell us.

If you're 13 to 17, you're exactly who this was built for. The same rules in this policy apply to you: no ads, no selling your information, and nothing about your moods, Journal or check-ins used to market anything to you.

10. Security

We use encrypted connections (HTTPS). Unsaved Journal writing is encrypted on your device. Access to our systems is limited to the people who need it. If you set a password, it's stored scrambled, never as the password itself.

No system is perfectly secure, and we won't tell you otherwise. Please use a sign-in method you trust and keep your own device protected.

11. Where information is processed

One More Day is operated from the United States, and your information is processed in the United States. If you use One More Day from another country, your information is sent to and handled in the United States, under United States law. We aren't set up to meet every country's privacy law, and we don't claim to be.

12. Changes to this policy

Every version of this policy has a version number and an effective date. If we make an important change, we'll tell you in the app and, where required, ask you to acknowledge it.

13. Contact

Questions about privacy? Email onemoredayapp@gmail.com. We don't publish a mailing address.

Privacy Policy