This Privacy Policy describes how ONELVLUP (“we”, “us”, “our”) handles information
when you use the ONELVLUP mobile application for Android (package name
com.onelvlup.app, the “App”). By using the App, you agree to this policy.
1. Who we are
ONELVLUP is a productivity and habit-tracking application. For privacy questions or data requests, contact: onelvlup.support@gmail.com.
2. Summary
- Sign-in: Google Sign-In provides your account identity (email, name, profile photo from Google).
- On your phone: Habits, todos, flashcards, notes, XP, and most app data are stored locally on your device.
- Never uploaded: Reminders, alarms, and water-tracking data stay on your device only — even with Premium.
- Premium cloud backup: If you subscribe to Premium, selected quest data and profile fields sync to Google Firebase (Firestore) under your account.
- Payments: Subscriptions are processed by Google Play; we do not receive your full payment card details.
- No ads: The App does not show third-party advertising.
3. Information we collect
3.1 Account information (Google Sign-In)
When you sign in with Google, we receive and store:
- Firebase user ID (UID)
- Email address
- Display name and profile photo URL (as provided by Google)
Authentication is handled by Firebase Authentication and Google. See Google’s Privacy Policy.
3.2 App data you create
Depending on how you use the App, this may include:
- Habits, completion history, streaks, and schedules
- Todos and task lists
- Flashcard decks and cards
- Notes
- XP, level, rank, hero profile, skills, and related game progress
- Theme and display preferences stored on device
3.3 Data that stays on your device
The following is not uploaded to our cloud servers:
- Reminder and alarm content, schedules, and notification settings
- Water intake logs and goals
- Local notification permission and device alarm state
This is intentional (“privacy by design”) and applies to Free and Premium users.
3.4 Premium cloud backup (Firestore)
If you have an active Premium subscription (or are in the post-expiration backup grace window described in the App), we may store encrypted copies of:
- Habits and completions
- Todos
- Flashcard decks and cards
- Notes
- Profile fields such as email, username, XP, level, and Premium status metadata
Quest content in the cloud is encrypted before upload. Some profile fields (such as email and Premium flags) are stored in plain form for account and billing operations.
3.5 Subscription and billing data
For Premium subscribers, we store subscription-related metadata such as:
- Whether Premium is active
- Subscription source (Google Play or manual grant)
- Product ID, verification timestamps, and expiration information returned by Google Play
- Purchase token references used to verify subscriptions with Google Play
Payment processing is performed by Google Play. We do not collect or store your credit or debit card numbers.
3.6 Device and technical data
The App may use:
- Network connectivity status (to decide when cloud sync can run)
- Android permissions you approve (notifications, exact alarms, battery optimization exemption) to deliver reminders locally
- Standard Firebase / Google Cloud service logs (errors, security events) when you use sign-in or Premium verification
We do not sell your personal information.
4. How we use information
- Provide core App features (habits, todos, study tools, XP, heroes)
- Authenticate you and keep your session secure
- Verify Premium subscriptions and prevent abuse
- Back up and restore quest data for Premium users
- Respond to support requests
- Maintain, secure, and improve the App
5. Legal bases (where applicable)
Depending on your region, we rely on:
- Contract: to provide the App and Premium features you request
- Legitimate interests: security, fraud prevention, and service improvement
- Consent: where required for optional permissions (e.g. notifications)
6. Third-party services
We use services operated by third parties, including:
- Google Firebase — Authentication and Firestore database (Firebase Privacy)
- Google Sign-In — account login
- Google Play Billing — in-app subscriptions (Google Play Terms)
- Google Cloud Functions — server-side subscription verification
These providers process data under their own policies and our instructions where applicable.
7. Data retention
- Local data remains on your device until you clear app storage, uninstall, or delete it in the App.
- Cloud backup is kept while Premium is active. When a Play-billed subscription ends, the App may download your cloud data to your device and remove the cloud copy after a grace period (currently 7 days), as described in the App.
- Manual Premium grants (if any) do not automatically delete cloud data when revoked.
- Account data is retained while your Firebase account exists unless you request deletion.
8. Security
We use industry-standard measures including encrypted local storage, encrypted cloud payloads for quest data, Firebase security rules, and server-side subscription verification. No method of transmission or storage is 100% secure.
9. Your choices and rights
You can:
- Export data: Settings → Export my data (encrypted backup file)
- Import data: Settings → Import (same Google account)
- Sign out: ends the active session on your device; Premium users may sync once on sign-out
- Revoke permissions: Android system settings for notifications, alarms, etc.
- Cancel Premium: Google Play → Subscriptions (access continues until the end of the paid period)
- Request deletion: email onelvlup.support@gmail.com from your signed-in Google account address. We will delete or anonymize your Firebase profile and cloud data within a reasonable period, subject to legal retention requirements.
Depending on your country, you may have additional rights (access, correction, portability, objection). Contact us to exercise them.
10. Children
The App is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data.
11. International transfers
Data may be processed on servers operated by Google in countries where Firebase and Google Cloud operate. Google provides appropriate safeguards as described in their documentation.
12. Changes to this policy
We may update this Privacy Policy. We will post the new version on this page and update the “Last updated” date. Continued use of the App after changes means you accept the updated policy.
13. Contact
Email: onelvlup.support@gmail.com
App: ONELVLUP · com.onelvlup.app