Privacy Policy

01Introduction

OneCharge Solution Co., Ltd., company registration no. 0135565004330 (“the Company”, “we”), as data controller, provides the OneDay iPhone app and the website onedaytask.com (together, “the Service”). This policy explains how we collect, use and disclose personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

It applies to everyone who uses the Service, with or without an account.

02Personal data we collect

• Account data: the email address or phone number you sign in with, your display name, sign-up date and last sign-in time.
• Content you create: tasks, appointments, subtasks, notes, tags and settings, stored on our servers to sync your devices when you are signed in.
• Data about others you enter: names, nicknames and email addresses of team members, and appointment attendees you add to send invitations. You confirm you are entitled to provide it.
• AI assistant usage: how often it is used and whether requests succeed. What you type or say is used only to process the request and is not kept afterwards.
• In-app promotions: views, taps and dismissals of promotion cards, to measure results.
• Technical data: IP address, device type and system logs kept by our hosting providers for security and troubleshooting.

03Data processed on your device

• Calendars (including Google Calendar added to your iPhone): with your permission, the app reads and edits events in the calendars you choose, directly on your device. These events are not stored on our servers, except the title and time of nearby events sent along with an AI assistant request.
• Speech: speech-to-text is performed by Apple’s speech recognition. We do not receive or store your voice recordings.
• Notifications, widgets and Live Activities: calculated and scheduled on your device, including Dee’s nudges, which look for free time in your calendar.

You can withdraw access to calendars, microphone, speech recognition and notifications at any time in the iPhone Settings app.

04Purposes and legal bases

• Performance of a contract (Section 24(3)): creating and authenticating your account, syncing, sending sign-in codes, sending appointment invitations you request, and processing AI assistant requests.
• Legitimate interests (Section 24(5)): security, abuse prevention, troubleshooting, measuring promotions and improving the Service.
• Consent (Section 19): access to calendars, microphone and notifications, which you grant or withdraw in iPhone Settings.
• Legal obligation (Section 24(6)): where required by law or by an order of a competent authority.

05AI assistant

When you use the AI assistant, what you say or type, together with tasks and appointments around that time and the team members relevant to the request, is sent to Anthropic, PBC (provider of the Claude models) to propose changes that you review and confirm before anything is saved. Under the provider’s API terms, this data is not used to train its models.

06Disclosure and data processors

We do not sell, rent or trade your personal data. We share only what is necessary with processors acting on our behalf under contracts that require appropriate safeguards:

• SSupabaseDatabase and sign-in · Singapore
• VVercelWebsite and servers · United States and global edge network
• AAnthropicAI processing · United States
• RResendSign-in and invitation emails · United States
• TTwilioSign-in codes by SMS · United States
• AppleApp Store, TestFlight and iOS system services

Only the Company’s designated administrators can view account data and user content through the back office, to operate the Service and resolve problems. We may also disclose data where required by law or by a competent authority.

07International transfers

Some processors are located outside Thailand. Transfers abroad are made in accordance with Sections 28 and 29 of the PDPA, relying on standard contractual clauses or other appropriate safeguards offered by the providers, or where necessary to perform our contract with you.

08Retention

• Account data and your content are kept for as long as you have an account.
• When you delete your account, all of it is removed from our database immediately; backup copies are removed on the providers’ backup cycle.
• Technical logs are kept for the period set by our hosting providers, for security.

09Security

We use appropriate measures including encryption in transit (HTTPS), per-account access control in the database (Row Level Security), keeping privileged keys on the server only, and restricting back-office access to designated administrators.

10Your rights

Under the PDPA you have the right to:

• access and obtain a copy of your personal data;
• data portability;
• object to collection, use or disclosure;
• have your data deleted or destroyed;
• restrict its use;
• have it corrected and kept up to date;
• withdraw consent at any time;
• lodge a complaint with the Personal Data Protection Committee of Thailand.

Deleting your account: you can delete your account and all its data yourself in the app under Profile › Account › Delete account. For any other request, contact jean@onecharge.co.th. We respond within 30 days of receiving your request.

11Children

The Service is not directed at children under 13. If we learn that we have collected a child’s data without the consent required by law, we will delete it promptly.

12Changes to this policy

We may update this policy from time to time. We will announce significant changes in the app or on the website before they take effect. The current effective date is shown at the top of this page.

13Contact us