Privacy.

Effective September 27, 2026 · 1+1 is made by Timeloop Inc. (Artefaktx)

The short version. We keep what the app needs to work — your address, your name, your photos, your plans and who you made them with — and nothing we can sell. Your selfie is compared, never shown. Your location is measured on your phone and shared only when both of you are already at the place. You can delete everything from inside the app.

What we collect

Account: your email address (to sign you in with a code), your name, handle, city, a line about you, your vibe tags and when you're usually out.
Photos: up to three portraits you add, and a cut-out version of each (the person lifted off the backdrop) that we make so your poster prints well.
Selfie (optional): one selfie, taken once, stored privately. It is used only to check that photos you add are of you (a similarity score) and to screen every photo for explicit content. It is never displayed, never shared, and is deleted with your account.
ID check (optional): if you choose to check your ID, Stripe collects a photo of a government ID and a live selfie and matches them. We receive only whether it passed and the date of birth on the ID, which replaces the birthday you typed. Stripe's copy of the images and details is deleted once we have the result. We never see or store the ID image.
Plans: what you post, who's in, the room's button-presses, and the morning-after wrap (a few words, and whether you'd go again). Words others leave about you are shown as counts.
Location: around a linked plan, your phone measures its own distance to the place and reports only a state (far, on the way, close, here). Coordinates are shared with the other person only when you are both within a few hundred meters of the place you both chose, for a short window, and are deleted within minutes afterward.
Safety (optional): up to three trusted contacts you add (a name, and a phone number and/or email). Each is told once, when added, that you chose them. If you hold SOS during a plan, they get a private link showing who you're meeting, where, and your position while the alert is open; the person you're meeting is not told. The link goes dark a day after you say you're safe, and the position is erased 30 days after the alert ends. Our team gets a copy of each alert so we can follow up.
Calls: the in-app line carries voice between the two of you; we don't record it. No phone numbers are exchanged.
Device: a push token so the app can tell you when something happens.
Crashes and usage (phone apps only): if the app crashes, a crash report with the device model, system version and an install id. We also count which screens are opened and a few actions, with an app-install id and a rough location Google derives from the network. None of this is tied to your account, no advertising id is read, and nothing is used for ads or shared with data brokers. The web app sends neither.

Memories and photos of places

A photo you add to a plan's memory is checked for explicit content and sorted. A photo of the place goes on the front of the plan's postcard and joins the place's pictures in the app, credited with your first name and the hour you took it. A photo of people goes on the back of the postcard, which only the two of you on the plan can see; it is never used as a picture of the place.
Location and camera data are removed. Before any photo is stored, we read its location and time only to confirm it was taken at the place during the plan, then strip that data (and the camera's other details) from the file.
Postcards are private to the two people on the plan. One shows on your page only when both of you choose to show it.
You can take down a place photo you added (tap its credit), and anyone can flag one that isn't the place.
Some place pictures are openly licensed photos from Wikimedia Commons, shown with their credit and license.

Venue accounts

If you claim a place at oneplusone.page/venues, we keep your email, the place, how you proved it's yours, and the photos you add. To check a claim we read the place's public website (and any email address published on it) at that moment; we don't store them. A document you send for review is seen only by the person who reviews it and is deleted once the claim is decided. Payments are handled by Stripe; we never see your card.

What we don't do

No ad networks, no ad tracking, no selling or renting your data. Venues can pay to be featured in place search; a featured place is labeled Sponsored, is shown only when it fits what you are looking for, and learns nothing about you.
No contact-list upload, no reading your messages, no background location.
No ratings of people. Ever.

Who we use

Supabase (database, storage, sign-in mail), Vercel (the web app and this site), Resend (mail), LiveKit (voice), Amazon Rekognition (the selfie match and the explicit-content screen — images are sent for the check and not retained by them), Apple and Google (push notifications), Google Firebase (Crashlytics for crash reports, Analytics for screen and action counts), Google Places (place search, hours and some place photos — we keep only a place's ID, and its coordinates for no more than 30 days), Stripe (venue payments, and the optional ID check), Wikimedia Commons (openly licensed place photos). Each processes data only to provide the service.

Your choices

Change or remove photos, tags and hours any time on Me.
Choose which reminders reach you in the drawer.
Block or report anyone from a plan's room.
Delete your account from the drawer → Account. It removes your profile, photos, selfie, plans, links and the record, for good, within minutes.

Age

1+1 is for people 18 and over.

Questions

Write to team@oneplusone.page.