Privacy Policy

One Tap Text LLC ("One Tap," "we," "us," or "our") operates the One Tap mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the App.

By creating an account or using the App, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

This Privacy Policy is incorporated into and forms part of our Terms of Service.

We collect information you provide directly, information generated by your use of the App, and information from third-party services.

Information You Provide

• Phone number — your mobile phone number is required to create an account. We use it to verify your identity and, for iOS users, to provision a dedicated sending number through our SMS provider.

• First and last name — collected during sign-up. Used to personalize your account display (initials in your avatar) and to power personalization tokens (e.g., {{first_name}}) in messages you draft.

• Message content — the text and any attachments you compose in the App are stored on our servers in order to process delivery, retry failed sends, and display your send history.

• Recipient phone numbers — the phone numbers you enter as recipients of your text messages. These are stored to process delivery and populate your send history.

• Custom opt-out introduction message — if you customize your opt-out intro message (Account → Opt-Out Message), that text is stored on our servers and associated with your account. It is used solely to prepend your personalized introduction to messages sent to new recipients.

Information We Collect Automatically

• Send history — records of when you sent a group text, how many recipients it had, and the delivery status of each message.

• Opt-out introduction delivery records — we maintain a record of which recipient phone numbers have already received your opt-out introduction message. This is stored per sender-recipient pair and is used solely to ensure the introduction is not sent more than once per recipient from your account.

• Compliance acknowledgment flags — we record whether you have acknowledged the Safe Sending Rules, the pre-send compliance disclaimer (for the Free plan), and the pre-send compliance disclaimer (for paid plans). These records are stored in your account metadata and are used to determine whether to display compliance prompts within the App.

• Plan and billing status — we record which subscription plan you are on, updated in real time from RevenueCat when purchases are made or subscriptions change.

• App version, device platform (iOS/Android), and crash reports — collected via Sentry for debugging and service improvement. Crash reports do not include your message content or recipient data.

Information We Do Not Collect

• Your device contacts are accessed locally on your device solely to power recipient autocomplete. Contact names and numbers are never uploaded to our servers and are never stored by us.

• We do not collect payment card numbers or banking information. All payments are processed by Apple; we receive only confirmation of a successful transaction and your subscription tier.

We use the information we collect for the following purposes:

• Service Delivery — to process and deliver the text messages you initiate, including retrying failed sends and tracking delivery status across recipients.

• Account Management — to authenticate you, maintain your account, display your usage statistics, and enforce plan limits.

• Subscription Management — to determine which features and limits apply to your account based on your active plan, and to display your current plan status in the App.

• Customer Support — to respond to inquiries you send to our support email and to investigate complaints.

• Safety and Security — to detect, investigate, and prevent fraudulent activity, abuse, and violations of our Terms of Service, including spamming behavior.

• Legal Compliance — to comply with applicable laws, respond to lawful requests from government authorities, and enforce our legal rights.

• Service Improvement — aggregated, de-identified usage data may be used to understand how the App is used and to improve features. This data cannot be used to identify you.

We do not use your message content or recipient data for advertising purposes. We do not sell your personal information to third parties.

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

Service Providers

We share data with third-party companies that help us operate the App. These providers are contractually prohibited from using your data for any purpose other than providing services to us.

• Supabase — provides our database infrastructure and authentication services. Your account data, send history, and message content are stored on Supabase's servers, which are hosted in the United States.

• Twilio — our SMS delivery provider. Message text and recipient phone numbers are transmitted to Twilio in order to send messages. Twilio processes this data in accordance with their Privacy Policy and applicable carrier regulations. For iOS users, a Twilio-provisioned phone number is assigned to your account.

• RevenueCat — manages subscription tracking and in-app purchase validation. RevenueCat receives your user ID and transaction metadata from Apple to determine your plan status.

• Sentry — receives anonymized crash reports and error logs to help us diagnose app issues. Sentry does not receive your name, phone number, message content, or recipient data.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process (such as a court order or subpoena), or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If One Tap Text LLC is involved in a merger, acquisition, or sale of all or substantially all of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent in-app notice before your personal information becomes subject to a different privacy policy.

Aggregated / De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We retain your personal information for as long as your account is active or as needed to provide the App.

• Send history and message content — retained for 90 days from the date of the send, then automatically and permanently deleted from our servers.

• Delivery status records — retained for 90 days, then deleted.

• Account data (name, phone number, plan status) — retained while your account is active. Deleted within 30 days of a verified account deletion request.

• Custom opt-out introduction message — retained while your account is active. Deleted within 30 days of account deletion.

• Opt-out introduction delivery records — retained while your account is active to prevent duplicate opt-out introductions from being sent to the same recipient. Deleted within 30 days of account deletion.

• Compliance acknowledgment flags — retained while your account is active as a record of your consent to our Safe Sending Rules and compliance disclaimers. Deleted within 30 days of account deletion.

• Drafts — retained until you delete them manually or until your account is deleted.

• Crash and error logs — retained by Sentry for up to 90 days.

When you delete your account, we initiate deletion of your personal data within 30 days. Note that some anonymized, aggregated records (e.g., total send counts with no personally identifying information) may be retained indefinitely for business analytics.

We implement reasonable technical and organizational measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• All data in transit between the App and our servers is encrypted using TLS (Transport Layer Security).

• Database access is restricted to authenticated services and authorized personnel.

• Authentication tokens are short-lived and rotated automatically by our authentication provider (Supabase).

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the security of your device and your account.

Depending on where you live, you may have certain rights regarding your personal information:

• Access — you may request a copy of the personal information we hold about you.

• Correction — you may update your name at any time within the App. To correct your phone number, contact support.

• Deletion — you may request deletion of your account and personal data by contacting us at support@onetaptext.com. We will process deletion requests within 30 days.

• Data Portability — upon request, we can provide an export of your send history in a machine-readable format.

• Opt-out of promotional notifications — you can toggle off promotional notifications within the App's Settings screen at any time.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information we have collected.
• The right to opt out of the sale of personal information. (We do not sell personal information.)
• The right to non-discrimination for exercising your CCPA rights.

To exercise these rights, contact us at support@onetaptext.com.

EEA, UK, and Swiss Residents

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under applicable data protection laws, including the right to lodge a complaint with your local data protection authority. Our legal basis for processing personal information is legitimate interests (to provide and improve the App) and, where required, your consent.

The App is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us at support@onetaptext.com.

The App does not contain links to third-party websites. However, we use third-party service providers (Supabase, Twilio, RevenueCat, Sentry) as described in Section 3. These providers operate under their own privacy policies, which we encourage you to review:

• Twilio: https://www.twilio.com/en-us/legal/privacy
• Supabase: https://supabase.com/privacy
• RevenueCat: https://www.revenuecat.com/privacy
• Apple: https://www.apple.com/legal/privacy

Our services are operated in the United States. If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

By using the App, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by displaying a notice in the App before the changes take effect. The "Effective Date" at the top of this Policy will be updated accordingly.

Continued use of the App after the effective date of an updated Privacy Policy constitutes your acceptance of the updated Policy.

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

One Tap Text LLC Email: support@onetaptext.com Website: onetaptext.com

We aim to respond to all inquiries within 5 business days.