Privacy policy

Version 2026-09-30

In short

• What you write in OneHill (achievements, goals, steps, lists, notes, photos, mood and your profile) stays on your phone. We have no servers that receive it and no user accounts.
• We cannot see your data. We do not sell it, share it or use it for advertising. The app has no ads, trackers or third-party analytics tools.
• Your data is stored encrypted and is not included in iCloud or Google backups. That is why, if you lose or change your phone, we cannot recover it. You can export it whenever you want.
• You can export and delete all your data from the app, in You → Privacy and data → Permissions and data.

1. Who we are

OneHill is an app by Caona Digital Solutions LLC ("we"), located at 30 N Gould St Ste N, Sheridan, WY 82801, United States. Privacy contact: info@caonadigital.com.

2. What data the app stores, and where

The app stores on your device what you write or choose:

• Achievements: title, note, date, life area and whether it is highlighted.
• Photos: the photo you choose from your library for an achievement, a goal, a list or your profile (a copy is saved inside the app). Optional.
• Mood: a level from 1 ("very bad") to 5 ("very good") on an achievement. Optional; requires your separate permission.
• Goals and steps: what you want to achieve, why it matters to you, the obstacle you expect, your "if X happens, I will do Y" plan, dates and steps.
• Recurring lists: name, description, icon, how often they repeat, their items and the history of each time you did them.
• Your profile: the name and phrase you show in You. Optional.
• Wellbeing area: goals and achievements you tag as Wellbeing. Optional; requires your separate permission.
• Reminders: the time of the daily reminder and, if you turn it on, a heads-up for a list the day before.
• Preferences: language, appearance, preferred areas, celebrations, vibration and lock mode.
• Consent record: what you accepted or withdrew (age, terms, privacy, Wellbeing, mood), the text version and the date.

Everything is stored in an encrypted database inside the app (SQLCipher). The key is generated on your phone the first time you open the app and is kept in the system's secure storage (iOS Keychain or Android Keystore). Photos are saved as files in the app's private space, protected by the operating system's own encryption. The app lock passcode, if you turn it on, is never stored as is: only a salted cryptographic hash, in the system's secure storage, and it is not included in the export.

The database and photos are deliberately excluded from iCloud and Google backups.

We receive none of this. The app does not send what you write, or any of this data, over the internet.

3. Phone permissions

The app only asks for a permission when you need it, and works even if you decline:

• Photos: to choose a photo for an achievement, a goal, a list or your profile. It only accesses the photo you pick; it is copied inside the app and never leaves the phone.
• Notifications: for the daily reminder and, if you turn it on, a heads-up for a list the day before. They are scheduled on the phone itself, with no servers. Their text is always generic and never shows your achievements or the titles of your goals or lists, not even on the lock screen.
• Face ID, Touch ID or fingerprint: if you turn on the lock. Recognition is done by the operating system; the app only learns whether it succeeded, never your biometric data.
• Camera: only if you choose “Take photo” for an achievement, a goal, a list or your profile. The photo is taken and stored encrypted inside the app; it never leaves the phone.

The app does not use the microphone, location, contacts or calendar.

4. Data handled by other companies, not by us

• Apple and Google handle data when you download the app or, in the future, when you pay for something in it. They do so under their own privacy policies.
• If you agree in your phone settings to share diagnostics with developers, Apple or Google may send us crash reports and aggregated statistics (for example, number of downloads or crashes). The system generates them, they do not include what you write in the app, and we only use them to fix bugs.
• The app includes no advertising SDKs, pixels, analytics or any other third-party code that sends data.

5. When you share or write to us

• Export my data: the app creates a file with all your data, unencrypted so you can read it and take it with you, and opens your phone's share sheet. You choose where to send it. From then on, that copy is subject to the terms of the destination you chose. The file does not include photos. The app deletes its temporary copy when you export again, when it reopens and when you delete all your data.
• If you write to info@caonadigital.com, we receive your email address and what you tell us. We use it only to reply and keep it for 24 months after the last message, unless the law requires longer. Do not send us your journal content: we do not need it to help you.

6. Sensitive information: mood and Wellbeing

Some laws treat mood, or anything about taking care of yourself, as "health data". That is why:

• Each of these two uses asks for your separate permission the first time, with its own text. We keep on the phone which version you accepted and when.
• This data follows the same rules as everything else: encrypted and only on your phone. Mood never appears in reminders, celebrations or summaries, and the app draws no conclusions from it.
• You can withdraw each permission in You → Privacy and data → Permissions and data. When you do, you choose whether to keep or delete what you already recorded.

Please also read the Consumer health data privacy policy, in You → About.

7. What your data is used for

Only to make the app work for you, on your phone: showing your achievements, goals and steps; replanning; celebrating your progress with your own data; reminding you at the time you chose; and protecting it with the lock if you turn it on. There is no profiling, advertising, sale of data or automated decision with effects on you. The app's artificial intelligence runs on your phone and does not send your data to any server.

8. How long it is kept

On your phone, until you delete it. You can delete an achievement, a goal, a step or a list, and clear your profile; delete everything from You → Privacy and data → Permissions and data → Delete all my data; or uninstall the app, which removes the database and photos. On iPhone, the system may keep the encryption key and the passcode hash in the Keychain after uninstalling; without the database they cannot be used to read anything. Deletion is real: there is no trash and no copy on any server.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete and port your data, object to its use, withdraw consent and not be discriminated against for exercising these rights. You can do almost all of this yourself, because your data is only on your phone:

• Access and portability: You → Privacy and data → Permissions and data → Export my data.
• Correction: edit any achievement, goal or step.
• Deletion: delete individual items, or You → Privacy and data → Permissions and data → Delete all my data.
• Withdraw consent: You → Privacy and data → Permissions and data (mood, Wellbeing).

We cannot access that data, so we cannot hand it over or delete it remotely. For any other request, write to info@caonadigital.com; we will reply within 45 days. You can also complain to your data protection authority (for example, the AEPD in Spain, the ICO in the United Kingdom or the ANPD in Brazil) or to your state attorney general in the U.S.

We do not sell or "share" personal information as defined by California and other state privacy laws, and we do no targeted advertising.

10. Security, and its limits

We protect your data with database encryption, the system's secure storage for keys, exclusion from cloud backups and an optional lock. Still, no measure is perfect:

• Anyone holding your unlocked phone can open the app if you did not turn on the lock.
• On Android, the recent apps preview may briefly show what was last on screen.
• If you forget the app passcode, you can reset it with the phone passcode or biometrics. The app never deletes data because of failed attempts.
• Without a backup, losing your phone means losing your data. Export from time to time if you want to keep a copy.

11. Minimum age

OneHill is only for people 18 and older. It is not directed at minors and we do not knowingly collect data from minors. If you believe a minor has written to us, contact us and we will delete that message.

12. International transfers

We do not receive the app data, so we do not transfer it. Support emails are stored on our email provider's servers, which may be in the United States.

13. Changes to this policy

If we change something important (for example, if there is ever a cloud backup), we will tell you in the app before the change affects you and, where the law requires it, ask for your consent again. You can ask us for previous versions at info@caonadigital.com.

14. Contact

Caona Digital Solutions LLC · 30 N Gould St Ste N, Sheridan, WY 82801, USA · info@caonadigital.com