Privacy, in plain language.

One Way exists for one of the most private seasons of a life. We treat everything you put in it accordingly: private by default, never sold, never used for ads, and yours to delete.

What we collect

• Account basics — your name (or the name you choose), email, and password (stored hashed, never readable by us).
• Your facility code — connects you to your program's alumni community and tells us which organization sponsored your access.
• What you put in the app — daily check-ins, journal entries, milestones, posts and replies in your Circle, and the contacts you add.
• Health data you choose to connect — if you link a wearable (like WHOOP), we receive the metrics you authorize, such as heart rate and recovery scores. This is entirely optional and can be disconnected any time.
• Device basics — a push-notification token if you enable notifications, and standard technical logs (app version, crash reports) to keep the app working.

Our websites collect nothing. oneway.care and getoneway.app run no analytics, set no cookies, and use no trackers.

What we never do

• We never sell your data. To anyone. In any form.
• We never show ads or share your data with advertisers.
• We never post on your behalf or reveal your membership to anyone outside your Circle.

Who can see what

• Only you see your journal, your check-in history, and your health data — by default.
• Your Circle (verified alumni of your program) sees only what you post there.
• Your care team sees only what you explicitly consent to share, controlled by you in the app's consent settings — and you can change or withdraw that consent at any time.
• Your facility may see aggregate, de-identified engagement (for example, how many alumni checked in this month) — never your individual entries without your consent.

How we protect it

Data is encrypted in transit. Access is restricted to the minimum needed to operate the service. We treat all recovery-related information as sensitive — in the spirit of the strictest health-privacy standards (including 42 CFR Part 2), regardless of whether the law technically requires it of us in every case.

Deleting your data

You can delete your account and its data from inside the app, or by emailing support@oneway.care from your account email. Deletion is permanent. Anything you wrote in your paper planner is, of course, only ever yours.

Children

One Way is for adults (18+) who are alumni of participating programs. We do not knowingly collect data from children.

Changes & contact

If this policy changes in a way that matters, we'll tell you in the app before it takes effect. Questions: support@oneway.care.