Legal

Privacy Policy

Last updated: 25 July 2026  ·  Version 1.3

1. Who we are

My One Button is a product of K.B.A. Investments Limited, a private limited company registered in England and Wales.

  • Trading name: My One Button
  • Legal entity: K.B.A. Investments Limited
  • Registered office: 129 Marston Road, Stafford, Staffordshire, England, ST16 3BT
  • Companies House number: 03345267
  • Contact: [email protected]

In this policy, "we", "us", and "our" mean K.B.A. Investments Limited trading as My One Button. "You" and "your" mean the person using the My One Button app or website.

K.B.A. Investments Limited is the data controller for personal data processed through My One Button. This means we decide what data is collected and why.

2. What this policy covers

This policy applies to:

  • The My One Button app, available through the Apple App Store and Google Play Store
  • The My One Button website, at https://myonebutton.com and https://myonebutton.co.uk
  • Any communication you have with our support team

If you click a link from our app or website to a third-party service (for example, a payment provider), that service has its own privacy policy. This one only covers what we do.

3. What data we collect and why

We collect only what we need to make the product work. Here is everything we collect, broken down by category.

3.1 Account data

When you sign up, we ask for:

  • A display name, if you choose to set one
  • Your email address
  • A password (stored encrypted; we never see it in plain text)

We use this to create your account, send you transactional emails (such as password resets), and identify you when you sign back in.

3.2 Your captures

When you use My One Button, you can capture text or speak into the microphone. Whatever you say or type is your capture.

You can capture from your phone or your Apple Watch. A watch records the clip and hands it to your phone, which then processes it exactly as described below — the watch is another way in, not a different journey. (Wear OS watch support is on our roadmap; we will update this policy when it ships, before it reaches you.)

We store:

  • The text of every capture (either typed by you or transcribed from your voice)
  • The AI's classification (which of the app's places the capture was filed into — Tasks, Reminders, Shopping List, People, My Notes, or Wins)
  • The timestamp of each capture
  • Any edits you make to a capture

We do not store voice audio. When you speak, your audio is sent to a transcription service (see Section 12), converted to text, and discarded. Only the text is kept.

3.3 Settings and preferences

Anything you set up in Settings — your enabled categories, your reminder preferences, your appearance choices, your notification settings — is stored against your account so the app behaves the way you want it to.

3.4 Device and technical data

To keep the service running safely, we collect:

  • Your IP address in our server logs (to detect fraud and abuse — we don't track precise location)
  • Your device type and operating system (so errors can be traced to the right platform)
  • Errors and crashes, via our error-monitoring service, scrubbed of personal content (so we can fix them)

We do not run advertising trackers or product-analytics trackers, and we do not use this data for advertising or share it with advertisers.

3.5 Apple Health — read on your phone, and it never leaves it

My One Button can connect to Apple Health so your Wins and habit trackers tick themselves from what you have already done. If your phone already knows you walked, you should not have to tell the app.

Nothing is read until you allow it. The first time you open your Wins screen, iOS asks with Apple’s own Health permission screen, and you choose exactly which metrics to allow — or none at all. You can switch the whole connection off (or back on) at any time in Settings → Apple Health inside the app, and change the per-metric grants in the Health app, under Sharing.

If you allow it, the app reads:

  • Activity — steps, active energy, exercise minutes, stand hours and workouts
  • Sleep and mindfulness — sleep analysis and mindful minutes
  • Vitals — resting heart rate, heart rate variability, blood oxygen, respiratory rate, VO₂ max and wrist temperature

This data never leaves your phone. It is read on the device, used on the device to tick a Win or a habit, and that is the end of it. It is never sent to our servers, never sent to any AI, never stored by us, and never sold or shared with anyone. We could not hand it to a third party even if we were asked to, because we never receive it in the first place.

We can only read it. We can never change it. The app asks iOS for read access and nothing else, so it is not capable of adding to, altering or deleting anything in Apple Health — not even by mistake.

Our lawful basis is your consent (UK GDPR Article 6(1)(a)), and because health information is special-category data, we also rely on your explicit consent (Article 9(2)(a)). It carries the strongest protection in law. That is exactly why we have built it this way: opt-in, on-device only, and switched off again in one tap.

Apple Health is an iPhone feature. On Android, no health data is read at all.

3.6 Your calendar — only if you turn sync on

My One Button can put your dated items into your phone's calendar, so a reminder you spoke also appears where you already look.

Calendar sync is off by default. You switch it on in Settings, and your phone asks your permission at that moment.

When it is on:

  • We create a separate calendar of our own, called “My One Button”, and write only into that one. Your own calendars are never written to, so nothing of ours can ever mix into your work or family calendar.
  • We create, update and remove the events we put there, so that when you reschedule or finish something, the calendar follows — rather than filling up with duplicates.
  • We do not read your existing events, and we have no interest in them. iOS grants calendar access as a single permission covering both reading and writing; we ask for it because we have to be able to edit and delete our own events, which write-only access does not allow.
  • Turning sync off removes our calendar cleanly and leaves everything of yours untouched.

Our lawful basis is your consent, given when you switch sync on and withdrawn when you switch it off.

3.7 Payment data

When you subscribe, we collect:

  • Your subscription status
  • Your transaction history (dates and amounts of payments)

We do not see or store your card details. Payment is handled by Apple's App Store or Google Play when you subscribe. They send us the result of the transaction; we never touch the card itself.

3.8 Support correspondence

If you email us at [email protected] or use our in-app feedback form, we keep the conversation so we can help you. This includes your name, email, and the content of the message.

4. How we use your data

We use your data only for these purposes:

  • To provide the service — sign you in, store your captures, classify them, show them back to you, send reminders.
  • To send transactional emails — password resets, payment receipts, important account notices.
  • To support you — respond to your questions, process refunds, fix problems.
  • To prevent fraud and abuse — detect bots, blocked accounts, and misuse.
  • To comply with the law — respond to lawful requests from authorities.

We do not:

  • Sell your data. Ever.
  • Share your data with advertisers.
  • Use your captures to train AI models without your explicit consent.
  • Read your captures except where strictly necessary to operate the service.

5. How long we keep your data

We keep your data only as long as we need to.

DataRetention period
Account dataWhile your account is active, plus 30 days after you delete it
CapturesWhile your account is active, plus 30 days after you delete it
Deleted captures (recoverable)30 days, then permanently deleted
Archived capturesIndefinitely, until you delete them
Payment records7 years (UK tax law requirement)
Support correspondence2 years from the last message
Server logs90 days
Backups30 days, rolling

When you delete your account, we permanently delete all your personal data within 30 days, except for payment records we are legally required to keep.

6. Your rights

Under UK GDPR, you have the following rights:

  • Right to access — get a copy of the data we hold about you.
  • Right to rectification — correct any data that's wrong.
  • Right to erasure ("right to be forgotten") — ask us to delete your data.
  • Right to restrict processing — ask us to pause processing while we sort something out.
  • Right to data portability — get your data in a portable format to take elsewhere.
  • Right to object — object to processing based on legitimate interest.
  • Right to withdraw consent — for anything based on your consent.
  • Right to complain to the ICO — if you're not happy with how we've handled your data.

How to exercise your rights

Email [email protected] with the right you want to exercise. We will respond within one calendar month, free of charge. If your request is unusually complex, we may extend by two months and let you know.

We will ask you to verify your identity before acting on a request, to make sure we're not handing your data to someone pretending to be you.

How to complain

If you believe we have not handled your data properly, please contact us first at [email protected] so we can try to put it right.

If you remain unsatisfied, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

  • Website: https://ico.org.uk
  • Helpline: 0303 123 1113
  • Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

7. Security

We take security seriously. Our practices include:

  • Encryption in transit — all communication between your device and our servers uses TLS (HTTPS).
  • Encryption at rest — data stored in our database is encrypted using AES-256.
  • Row-level security — Supabase RLS policies ensure your data is only accessible to you.
  • Daily backups — automatic, encrypted, retained for 30 days.
  • Access controls — only authorised team members can access production systems, with logging on every access.
  • Two-factor authentication — required for all team members accessing production.

If you discover a security vulnerability, please report it responsibly to [email protected]. We will work with you in good faith and will not take legal action against good-faith security research.

No system is 100% secure. If a breach affecting your data occurs, we will notify you and the ICO within 72 hours, as UK GDPR requires.

Our promise

Encrypted. Private. Only you can see what you capture. We don't sell your data. We never will.

8. Cookies and tracking

The My One Button app uses the minimum number of cookies and storage items needed to make the service work:

  • Strictly necessary cookies — to keep you signed in and remember your preferences. These don't need consent under UK law.
  • Functional storage — your offline captures and unsynced data, stored locally on your device.

We do not use:

  • Tracking cookies for advertising
  • Cross-site tracking
  • Third-party advertising networks
  • Cookies for any purpose other than running the service

We do not run analytics or advertising trackers on the app or the website. Payments happen inside Apple's App Store or Google Play, under their own privacy policies — no payment cookies are set by us.

If we add any non-essential cookies in future, we will ask for your consent before using them.

For more detail, see our Cookie Notice at https://myonebutton.com/cookies.

9. Children

My One Button is not intended for children under 16. Under UK GDPR, online services for children require special protections, and we have not designed the product to meet those.

If you are under 16, please do not use My One Button. If we find out we've collected data from someone under 16, we will delete it.

If you believe a child under 16 has signed up, please email [email protected] and we will investigate.

10. Lawful basis for processing

UK GDPR requires us to have a lawful reason for processing your data. Here are the bases we rely on:

What we processWhyLawful basis (UK GDPR Article 6)
Account data, captures, settingsTo deliver the service you signed up forContract performance (Article 6(1)(b))
Device and usage dataTo keep the service running and fix bugsLegitimate interest (Article 6(1)(f)) — running a reliable paid service
Payment dataTo process subscriptions and meet tax obligationsContract performance + Legal obligation (Articles 6(1)(b) and 6(1)(c))
Marketing emails (if you opt in)To send product updates and offers you've agreed to receiveConsent (Article 6(1)(a))
Fraud preventionTo protect the service from abuseLegitimate interest (Article 6(1)(f))
Apple Health data (only if you allow it)To fill your Wins and habit trackers from what you have already done — read on your phone, never sent to us (section 3.5)Consent (Article 6(1)(a)) + explicit consent for special-category health data (Article 9(2)(a))
Device calendar (only if you switch it on)To show your dated items in your phone’s calendar — we write only to our own “My One Button” calendar (section 3.6)Consent (Article 6(1)(a))

You can withdraw consent at any time for anything based on consent. Withdrawing consent does not affect processing that took place before you withdrew it.

11. Who we share data with (sub-processors)

We use a small number of trusted third parties to operate My One Button. Each one only sees the data they need to do their job, under strict contracts that require them to protect it.

ProviderWhat they doWhat data they seeWhere data is processed
SupabaseDatabase, sign-in, file storageAccount data, captures, settingsEU (Ireland — eu-west-1)
Google Cloud (Cloud Run)Runs our server — every capture passes through it on the way to being sortedCapture text in transit, request logs (IP, device type)EU (Belgium — europe-west1)
OpenAI (Whisper API)Voice-to-text transcriptionVoice audio (discarded after transcription)US (with UK/EU data transfer safeguards)
Google (Gemini API)AI sorting — reads the text of a capture and returns which place it belongs inThe text of each capture (no name, no email attached)US (with UK/EU data transfer safeguards)
Anthropic (Claude API)Standby AI sorter — used only if Google's service is unavailableThe text of each capture (no name, no email attached), only when activeUS (with UK/EU data transfer safeguards)
Apple App Store / Google Play BillingPayment processing for subscriptionsSubscription status, transaction dataManaged by Apple / Google
GoHighLevel (with Mailgun)Our website, its forms (contact and feedback), and our emails to youName, email, the content of messages you send usUS (with UK/EU data transfer safeguards)
Google WorkspaceOur team email (your support emails reach us here)Anything you email usUS (with UK/EU data transfer safeguards)
SentryError monitoring (so crashes get fixed)Technical error reports, scrubbed of personal content — no capturesUS (with UK/EU data transfer safeguards)

International data transfers

Some of our sub-processors are based in the United States. When your data is transferred outside the UK or EU, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office, or
  • UK Adequacy Decisions where the receiving country has been formally recognised as providing adequate protection.

This means your data has the same legal protections wherever it's processed.

12. AI and your captures

This section is important. We use AI in two specific ways, and we want you to know exactly what happens.

12.1 Voice transcription (Whisper)

When you speak into the microphone:

  1. Your voice audio is sent to OpenAI's Whisper API.
  2. Whisper converts it to text and sends the text back.
  3. The audio is discarded immediately.
  4. We store only the transcribed text.

OpenAI does not use Whisper API audio to train its models when accessed through the API. We have confirmed this with their published API terms.

12.2 Sorting (Google Gemini)

After transcription (or when you type), the text of your capture is sent to Google's Gemini API. Gemini reads the text and decides which of the app's places it belongs in — Tasks, Reminders, Shopping List, People, My Notes, or Wins. The result is returned to us and we file the capture accordingly.

If Google's service is ever unavailable, a standby sorter (Anthropic's Claude API) can perform the same task under the same protections. Whichever service does the sorting:

  • Neither Google nor Anthropic uses this data to train their models when accessed through their paid APIs, per their published API terms.
  • The capture is sent without your name, email, or account ID attached. The AI sees only the text.
  • The sorting result is sent back; the capture is then stored in our database against your account.

12.3 What we do not do

  • We do not train AI models on your captures.
  • We do not share your captures with any AI provider for any purpose other than the specific classification task above.
  • We do not allow any AI provider to use your data to improve their own models.

If we ever want to do any of this in the future, we will ask you for explicit consent first. You will always be able to say no.

12.4 The filing is automatic — and you can always overrule it

An AI decides where each capture goes. Nobody at My One Button reads your words in order to file them, and nothing waits for a person to approve it — that is what makes it instant.

It is sometimes wrong. When it is, you move the item wherever you want it, and it stays there. And when the AI is not confident, it does not guess: the capture stays on your home screen as a card for you to place yourself.

This filing decides where a note of yours sits inside the app. It has no effect on your money, your rights, or anything outside My One Button. We are telling you plainly because they are your words, not because the law obliges us to.

13. Changes to this policy

We may update this policy from time to time as the product changes or the law changes.

When we make a substantive change (one that affects your rights or how we use your data), we will:

  • Update the "Last updated" date at the top.
  • Email you to let you know what's changed.
  • Give you at least 30 days' notice before the change takes effect.

When we make a minor change (typos, clarifications, restructuring), we will update the date at the top but not necessarily email you.

The current version of this policy is always available at https://myonebutton.com/privacy.

14. How to contact us

For any privacy question, request, or complaint:

  • All privacy enquiries, rights requests, and security disclosures: [email protected]
  • Post: K.B.A. Investments Limited, 129 Marston Road, Stafford, Staffordshire, England, ST16 3BT

We aim to respond to all privacy enquiries within 5 working days, and to formal UK GDPR rights requests within one calendar month as the law requires.

This policy was prepared in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003.

K.B.A. Investments Limited (Companies House number 03345267), trading as My One Button.
Last updated: 25 July 2026. Version 1.3.

My One Button
Privacy Policy Terms of Service Cookie Notice Security Support Contact

[email protected]