OneSelf Privacy Policy
Page address: humanitybots.com/oneself/privacy
Effective date: 9 October 2026. Last updated: 9 October 2026.
Who we are and what this covers
OneSelf is made by HumanityBots, Inc., a Texas corporation at 5900 Balcones Drive #32932, Austin, TX 78731 ("HumanityBots", "we", "us"). This policy explains what information OneSelf collects, how we use it, who we share it with, how long we keep it, and the choices you have. It covers the OneSelf mobile app, the OneSelf pages on humanitybots.com, and our support channels.
OneSelf is for adults in the United States who care for someone living with dementia or a similar condition. We built it so that what you record, the questions you ask Cleo, and the posts you share with other caregivers stay private and are used only to run OneSelf for you.
These pages form part of this policy and should be read with it:
- Consumer Health Data Privacy Policy: humanitybots.com/oneself/health-data
- Terms of Service: humanitybots.com/oneself/terms
- Cleo Safety and Crisis Protocol: humanitybots.com/oneself/cleo-safety
- Delete your account: humanitybots.com/oneself/delete-account
The short version
- We collect what you give us (your account, notes, documents, check-ins, messages to Cleo and posts) and a small amount of technical information so the app works.
- We use it to run OneSelf for you. Nothing else.
- We do not sell your information. We do not share it with advertisers. We use no advertising or tracking software in the app.
- Cleo runs on Google's Gemini service under paid business terms that do not allow Google to use your content to train its models.
- You can delete your account and everything in it at any time. Uninstalling the app does not delete your account; see "Deleting your account" below.
- OneSelf is free. We do not collect payment information.
- OneSelf is not covered by HIPAA. It is protected by federal consumer protection law, state privacy laws, and the commitments in this policy.
A note about the person you care for
Much of what you record in OneSelf is about someone else: the person you care for. By entering information about them, you confirm that you are their family member or caregiver and that you are permitted to record it. We treat it as part of your account, we protect it as health information, and we never use it to contact, profile or market to the person you care for. If that person, or their legal representative, asks us to delete information about them, we will work with you and them to do so. See "Requests about someone else" below.
Information we collect
Account information. Your name, email address and password (stored only as a one-way hash), or, if you sign in with Google or Facebook, the name, email address and unique identifier they send us. Your journey stage, the label you choose for the person you care for (for example "Mom" or "my husband"), and your answers to the short onboarding questions.
Information you record in OneSelf.
- Daily mood check-ins.
- Notes, in text or as voice recordings, including the Behavior log about the person you care for.
- Documents and photos you add to the Vault (for example insurance papers, prescriptions, legal documents), the file names you give them, and the summaries Cleo produces from them.
- Tasks, appointments and reminders in your schedule.
- Your journey progress: which steps you have marked done and which you have set aside.
Your conversations with Cleo. The messages you send Cleo, Cleo's replies, and a short automated summary of each conversation (a few words such as "Discussed sleep and guilt") that Cleo uses to pick up where you left off. The app also sends Cleo the current hour in your time zone so Cleo does not guess the time of day.
Community activity. Posts, comments, likes, photos you attach, whether you posted anonymously, reports you make about other content, and the members you have blocked.
Support communications. What you send us when you contact support, report a problem or answer a survey.
Technical information. Your device type and operating system, the app version, an app-installation identifier, your IP address at the time of a request (which gives a rough location such as a city), timestamps, and error reports if the app crashes. We use this to keep the app running and secure. We do not use it to track you across other apps or websites.
Information we do not collect. We do not collect payment information. We do not collect your precise location. We do not read your contacts, photos or files unless you choose a specific photo or file to add. We do not create voiceprints or use anyone's voice to identify them. We use the camera or microphone only when you are scanning a document or recording a note.
How we use information
We use your information to:
- Create and run your account and sign you in.
- Provide the OneSelf features you use: Cleo, notes, the Vault, the schedule, the journey, the community and mood check-ins.
- Make Cleo's replies relevant to you, by giving Cleo your onboarding answers, journey stage, recent Behavior log notes, upcoming tasks and recent conversation summaries as context.
- Read and summarise the documents you add, so you can find information in them and ask Cleo about them.
- Keep you and the community safe: detect language that suggests someone may be in crisis and show crisis resources; review reported posts; enforce our Terms and Community Guidelines; limit abuse (for example, Cleo accepts up to 50 messages a day per account).
- Answer your support requests.
- Send you service emails about your account and security, such as sign-up confirmation, password reset, and notice of changes to our terms or this policy. You cannot opt out of these while you have an account.
- Send optional caregiving tips and news about OneSelf by email, only if you opt in, with a one-click unsubscribe in every message.
- Understand how OneSelf is used in aggregate (for example, how many people use the journey each week) so we can improve it. We do this from our own records, not with third-party analytics software.
- Comply with the law, respond to lawful requests, and protect the rights and safety of our users and others.
We do not use your information to make automated decisions that have legal or similarly significant effects on you.
How Cleo uses AI
Cleo is an artificial intelligence feature. When you send Cleo a message, add a document to the Vault, or ask Cleo about a document, we send the relevant content to Google's Gemini API, a service operated by Google LLC in the United States, which generates the response. The content sent includes your message, recent messages in the same conversation, the context described above and, for documents, the document itself.
We use Gemini under Google's paid API terms. Under those terms Google does not use your prompts, your documents or Cleo's responses to train or improve its models, and does not use them for any purpose other than returning a response to us. Google may keep content briefly for abuse detection, as its terms describe.
Cleo's replies are generated automatically and can be wrong, incomplete or out of date. Cleo is not a person and not a medical, legal, financial or mental-health professional. When Cleo talks about benefits, programmes or eligibility, that is general information, not financial or legal advice. Please read our Terms of Service and the Cleo Safety and Crisis Protocol for what Cleo will and will not do.
We may look at a small number of conversations in de-identified form to check that Cleo's safety filters are working and to fix problems. We do not read your conversations for any other reason.
Who we share information with
We share information only with the companies that help us run OneSelf, only what they need, and only under contracts that limit what they may do with it:
| Who | What they do | What they receive |
|---|---|---|
| Supabase, Inc. (hosted on Amazon Web Services, US East, Northern Virginia) | Database, file storage, sign-in, and the server functions that run Cleo and document reading | Everything stored in your account, encrypted in transit and at rest |
| Google LLC (Gemini API) | Generates Cleo's responses and document summaries | Your messages to Cleo, conversation context, and documents you add, as described above |
| Google LLC and Meta Platforms, Inc. (sign-in) | Let you sign in with your Google or Facebook account, if you choose to | They learn that you signed in to OneSelf; we receive your name, email and an identifier |
| Google LLC (Google Play) | Distributes the app | They hold your store account; we receive only overall install, rating and crash statistics |
| Expo (650 Industries, Inc.) | Builds and updates the app | Device type and app version when the app checks for updates |
| Resend, Inc. | Sends our account emails, such as sign-up confirmation and password reset | Your email address and the content of those emails |
| Titan (a GoDaddy email service) | Our mailboxes, for support and service messages | Your email address and the messages you exchange with us |
Beyond these providers, we share information only:
- With other OneSelf users, when you choose to: your community posts, comments, likes and attached photos are visible to other signed-in members. Anonymous posts show "A caregiver" instead of your name, and we do not send your identity to other members' devices for anonymous posts.
- If the law requires it, for example in response to a valid subpoena or court order, or when we believe in good faith that sharing is necessary to prevent serious harm to someone. If we are allowed to, we will tell you before we share.
- If HumanityBots is sold, merges or reorganises: your information would transfer with the service, under this policy, and we would notify you before any change in how it is used.
We do not sell your personal information and never have. We do not share it with advertisers, ad networks, data brokers or social media companies for advertising. We do not use tracking pixels, advertising software development kits or third-party analytics in the app. Because we do not sell or share information for targeted advertising, there is nothing for you to opt out of, and we treat any browser or device opt-out signal (such as Global Privacy Control) as already honoured.
Where your information is stored
Your information is stored in the United States, on Supabase infrastructure in Amazon Web Services' US East (Northern Virginia) region. OneSelf is offered only in the United States.
How long we keep information
| Information | How long |
|---|---|
| Account, notes, documents, voice recordings, schedule, journey progress, mood check-ins, Cleo conversations and summaries | While your account exists. Deleted when you delete the item or your account. |
| Community posts and comments | While your account exists, unless you delete them first. Deleted when you delete your account. |
| Reports you make, and members you have blocked | While your account exists. |
| Support emails | Two years after the conversation ends. |
| Server logs and error reports | Up to 90 days. |
| Backups | Deleted data may remain in encrypted backups for up to 30 days, after which it is gone. |
| Accounts with no activity | We may close an account after 24 months without activity, after warning you by email. |
Deleting your account
Uninstalling OneSelf from your phone does not delete your account or anything in it. Your information stays safely stored so that you can sign in again on a new phone. To delete it, use one of these:
- In the app: open the Me tab and choose Delete Account. Deletion is immediate and permanent.
- Without the app: follow the steps at humanitybots.com/oneself/delete-account, or email hello@humanitybots.com from the email address on your account. We will complete the deletion within 30 days.
Deleting your account removes your profile, notes, voice recordings, documents and their summaries, schedule, journey progress, mood check-ins, Cleo conversations, community posts and comments, likes, reports and blocks, and your sign-in. We keep only what the law requires us to keep.
Your rights and choices
Everyone who uses OneSelf, in any state, can:
- See the information we hold about you (most of it is visible in the app; for a complete copy, ask us).
- Correct it, in the app or by asking us.
- Export it: ask us and we will send a copy of your notes, documents, schedule, journey, check-ins and conversations in a common format within 45 days.
- Delete it, in the app or by asking us.
- Withdraw your consent to our handling of health information. Because OneSelf cannot work without it, withdrawing consent means deleting your account.
- Opt out of optional emails at any time.
- Appeal, if we decline a request. Reply to our decision and a different person will review it within 45 days and explain the outcome. If you are still not satisfied, you may contact your state attorney general.
To exercise any of these, use the app or email hello@humanitybots.com. We will respond within 45 days, and we may ask you to confirm that you own the account. We will never charge you or treat you differently for exercising a right. You may authorise someone else to make a request for you; we will ask for proof of that authority.
Requests about someone else. If you are the person being cared for, or their legal representative, and you want information about you removed from a caregiver's OneSelf account, email hello@humanitybots.com. We will verify your identity and authority, tell the account holder, and delete the information or work with you both to resolve the request, within 45 days.
Residents of particular states
California. You have the rights listed above. OneSelf does not sell or share personal information for cross-context behavioural advertising and does not use sensitive personal information for any purpose other than providing the service, so there is no opt-out to offer. Our app and website do not respond to browser Do Not Track signals because there is no agreed standard for them; no third party collects information about your activity over time and across other sites or apps through OneSelf.
Washington and Nevada. Please also read our Consumer Health Data Privacy Policy at humanitybots.com/oneself/health-data. We do not sell consumer health data, and we do not use geofencing anywhere.
Connecticut, Colorado, Virginia, Texas and other states with comprehensive privacy laws. The rights above are available to you, including the right to appeal. We process sensitive data (health information) only with your consent, which you give when you accept this policy at sign-up, and only to provide the service you asked for.
Children
OneSelf is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, and in particular from anyone under 13. If we learn that we have, we will delete it. If you believe a minor has an account, email hello@humanitybots.com.
Security
We protect your information with encryption in transit (TLS) and at rest, access controls that limit each user to their own data (row-level security in the database), private storage for documents and recordings, short-lived signed links for file access, server-side checks on every request, and a daily limit on how much any one account can ask of Cleo. Our staff do not have routine access to your content. No system is perfectly secure, and we cannot promise that yours will never be accessed without authorisation, but we treat any sign of that as a priority.
If there is a breach. HumanityBots is a vendor of personal health records under the FTC Health Breach Notification Rule. If your information is accessed or disclosed without authorisation, we will tell you by email and in the app without unreasonable delay and no later than 60 days after we discover it. We will explain what happened, what information was involved, what we are doing and what you can do, and we will notify the Federal Trade Commission and, where the law requires, the media and your state's authorities. By creating an account you agree to receive these notices electronically at the email address on your account. To report a security concern, email hello@humanitybots.com.
Voice notes and recording others
Voice notes are stored as audio files and, where you choose, as text transcripts, for your own use. We do not analyse voices to identify people and we do not create voiceprints. If a recording captures someone else, you are responsible for having their permission where the law requires it. We suggest recording only yourself, or people who know they are being recorded.
If we introduce paid features
OneSelf is free today. If we introduce paid features or gift purchases, we will update this policy, the Terms of Service and the app before anyone can buy, and explain what payment information is handled and by whom.
Changes to this policy
When we change this policy we will post the new version here with a new effective date. For changes that affect your rights or how we use your information, we will tell you by email and in the app at least 30 days before they take effect, and we will ask for your consent again where the law requires it. Earlier versions are available on request from hello@humanitybots.com.
Contact us
HumanityBots, Inc., 5900 Balcones Drive #32932, Austin, TX 78731. All privacy, security and support requests: hello@humanitybots.com.