The Fine Print
Last updated · 15 September 2026
One Life Company ("One Life", "we", "us") is built on a simple idea: your data belongs to you. We are local-first, we collect as little as possible, and we never sell your personal information. This Privacy Policy explains what we collect, why, how we handle it, and the rights and choices you have.
This policy applies to all One Life apps and services, including Luten, Cassette and future apps such as Spend, Still and Move, and to our websites (together, the "Services"). Where a specific app provides its own privacy notice, that notice adds to or, where it conflicts, takes precedence over this one for that app.
One Life Company is the controller of the personal data described here. For some processing carried out through a Platform, such as payments, the Platform may be an independent controller under its own policy.
"Personal data" or "personal information" means information that identifies or relates to an identifiable person. "Processing" means any operation performed on personal data. "Sensitive data" includes health information, which we handle with extra care and only with your consent.
We collect information you choose to give us, such as your name and email when you create an Account or contact us, the contents of your messages, and your preferences and settings.
As you use the Services we collect limited information automatically, such as your interactions, the features you use, in-app events, and approximate, privacy-respecting usage statistics that help us understand what works.
We collect device information needed to deliver audio and run the app reliably, such as device model, operating-system version, language, time zone, and basic network information, and identifiers needed for crash reporting and core functionality.
We collect diagnostics, performance, and crash reports to find and fix problems and improve quality and stability. We aim to keep these aggregated or pseudonymised wherever possible.
When you buy a Subscription, we receive limited information from your app store, such as which plan you hold and its status. We do not receive or store your full payment-card number.
Some features can read health data, such as sleep, from sources like Apple Health, only after you grant explicit permission, which you can revoke at any time in your device settings. This data is used solely to provide the feature you asked for, such as an honest sleep score. It is processed on your device wherever possible, is never sold, is never used for advertising, and is never shared except as strictly needed to provide the feature you enabled.
Luten is an iOS app of sounds for sleep, focus and calm, with Sona, a companion you can chat with, plus Home Screen widgets, an Apple Watch app and iMessage stickers. You can use Luten without an account. Your listening history, streaks, downloads, sound settings, profile photo and Sona conversations stay on your iPhone.
An account is optional. You can sign in with Sign in with Apple, Google, or an email address and password, through Google Firebase Authentication. We keep your name, email address (or the private relay address Apple gives us if you choose to hide yours), account ID and sign-in method. Without an account, Luten gives your install a random ID that is not linked to your name or email. If you create an account later, the data on that install moves to your account.
When you are signed in, Luten backs up your profile so it can be restored if you reinstall or change phones: your name and email address, the section you chose, your bedtime and focus time, your reminder settings and how many days a week you want reminders, your age range and gender (both hold a default value until you change them), your plan and trial dates, a phone number if you add one, and whether notifications and Apple Health access are turned on. Luten 1.3.0 and earlier also store a referral code linked to your account ID and email address; later versions do not, and deleting your account removes any that exists. This is stored with Google Firebase (Cloud Firestore and Cloud Functions) on servers in the United States, encrypted in transit and at rest. Your listening history, streaks, downloads, profile photo and Sona conversations are not backed up.
Sona runs on your iPhone, using Luten's own rules and Apple's on-device language technology. It does not use an outside AI service. What you type to Sona is never uploaded or stored, and the conversation is gone when you leave it. Each time Sona replies, Luten records a usage event with the section it matched, a broad label for the kind of message (for example a feeling or a question about the app), whether Sona understood it, and how many sounds it suggested. Nothing is recorded when a message suggests someone may be in crisis or at risk of harm, or, in versions after Luten 1.3.0, when it is about a health, medical or eating topic. Luten 1.3.0 and earlier include those labels. Sona is a wellness companion, not a medical or crisis service.
If you turn on Apple Health in Luten, it asks permission to read your sleep, heart rate, heart rate variability, resting heart rate, respiratory rate, blood oxygen and step count. It uses them only to show your sleep score and sleep details on your iPhone. Luten never writes to Apple Health, and your Health data is never uploaded, sold, shared or used for advertising. The only Health-related information that leaves your device is whether access is turned on. You can turn access off at any time in the Health app or in iOS Settings. If you share a sleep score image, it goes only where you send it.
Improve Recommendations, in Profile under Privacy, is off until you turn it on. While it is on, Luten sends a summary of your listening: how often each sound was played, which sounds followed which, and which sections were played in each four-hour part of the day. The summary does not include your account ID, email address or the time of any play, and we use it only to improve sound suggestions for everyone. Every copy of Luten downloads those shared suggestions, whether or not the setting is on.
To understand how Luten is used, it sends usage events to PostHog, on servers in the United States. They include app opens, onboarding steps (not your answers), whether you allowed notifications, sounds played, reminders tapped, Sona replies as described above, rating prompts, and paywall views and purchases. With each event PostHog receives your IP address, an approximate location it works out from that address (country, region, city and postal code), the app version, and your device type and screen size. Events are linked to your install's random ID and, once you sign in, to your account ID, and events from before you signed in are joined to your account. Luten 1.3.0 and earlier also attach your email address. They never include what you type to Sona or your Health data, and they are not used for advertising or shared with advertisers.
Luten uses Sentry, on servers in the United States, for crash reports and performance data: what went wrong, the app version, device and system details, and the steps that led up to it. Reports are linked to your account ID when you are signed in, and in Luten 1.3.0 and earlier to your email address as well. On a small share of sessions, and on sessions where an error happens, Sentry records a replay of the screen with all text and images hidden.
Luten's subscriptions and lifetime purchase are sold through Apple In-App Purchase. We use RevenueCat to manage them, which receives your account ID, or your install's random ID if you are not signed in, and your purchase history, so it can unlock and restore your plan. It never receives your payment details, which stay with Apple. Offer codes are redeemed with Apple.
Luten sends account emails from luten@onelifeco.app through Resend: a verification email and password resets if you sign in with email, a welcome email when you create an account, and a welcome back email when you restore your account on a device, at most once a day. If you turn on "Tips, Updates & Offers" in Profile under Email, we also send occasional updates and offers. It is off by default. Every Luten email except verification and password resets has a one-click unsubscribe link. We keep your email address, first name and email preference so that your choice is honoured.
Reminders are scheduled on your iPhone and can include your first name. Luten does not send push notifications from a server. The Home Screen widgets, the Apple Watch app and the iMessage stickers do not collect or send any data.
Sounds are delivered by Bunny CDN and Google Firebase Hosting, which receive your IP address as part of sending them. If you add a sound from a web address, Luten fetches it directly from that site.
The Kids section is sounds for parents and carers to play for children. It does not ask for a child's name or age, and nothing about a child is recorded.
Deleting your account in the app (Profile, then Subscription, then Delete Account) permanently deletes your sign-in account, your backed-up profile, your email preferences, your referral records, any Luten waitlist signup with the same email address, your subscription record at RevenueCat, the usage analytics linked to your account, and the listening history, streaks and settings saved on your iPhone for that account. Crash reports are not deleted with your account; Sentry removes them automatically after a limited period. Apple keeps its own record of your purchases so you can restore them, and deleting your account does not cancel a subscription, which you manage in your Apple ID settings. Deleting the app removes everything Luten stored on your iPhone.
Luten shows no ads, does no cross-app tracking, does not use advertising identifiers, and nothing is sold. We advertise Luten on the App Store with Apple Ads, and Apple reports the results to us only in aggregate.
Cassette is an iOS voice recorder that turns what you say into transcripts, notes and email drafts. It records audio only when you press Record, and only after you allow microphone access. Your recordings, transcripts and notes are stored on your iPhone.
Transcripts come from Apple speech recognition, running on your device wherever possible. If on-device recognition is not available for your language or device, the audio for that recording may be sent to Apple to transcribe, under Apple's privacy policy.
Notes, summaries, action items and email drafts are written by Apple's models. On an iPhone running iOS 27 with Apple Intelligence the transcript is sent to Apple's Private Cloud Compute, which Apple states it does not keep and cannot access; on every other iPhone they are written on your device. The audio itself is never sent for this. One Life never receives your recordings to process them.
An account is optional. You can sign in with Sign in with Apple, Google, or an email address and password. We keep your name, email address and sign-in method.
When you are signed in with Cassette Premium, your recordings, transcripts, notes, titles and tape count are backed up with Google Firebase (Authentication, Cloud Firestore and Cloud Storage) on servers in the United States. Signed in without Premium, your account keeps only your name, email address, sign-in method, tape count and email preference. They are encrypted in transit and at rest, and only your account can read them. Without an account, your recordings, transcripts and notes are never uploaded; only the Apple transcription, the usage events described below, and purchase details handled by Apple and RevenueCat leave your device.
Cassette Premium is sold through Apple In-App Purchase. We use RevenueCat to manage subscriptions, which receives your account ID and purchase history to unlock and restore Premium. It never receives your payment details, which stay with Apple. Free transcripts and notes are counted on your device.
If you turn on "Tips, updates & offers", we use your email address to send occasional emails. It is off by default, and you can unsubscribe at any time.
Deleting a tape removes it from your iPhone and from the backup. Deleting your account in the app (Shelf, then Account, then Delete account) permanently deletes your account and every backed-up recording, transcript and note. Backups are kept until you delete them. Purchase records are kept by Apple and RevenueCat so Premium can be restored; deleting your account does not cancel a subscription, which you manage in your Apple ID settings.
Cassette shows no ads, does no cross-app tracking, and nothing is sold. To understand how the app is used, Cassette sends usage events to PostHog, such as app opens, recordings started, notes written, and paywall views and purchases. With each event PostHog receives your IP address, an approximate location it works out from that address (country, region and city), your device model, iOS version, language and the app version. Events are linked to an anonymous ID, and to your account ID once you sign in. They never include your recordings, transcripts or notes, and they are not used for advertising or shared with advertisers. Tapes you share or export go only where you send them. You are responsible for any consent the law requires before you record other people.
This website, onelifeco.app, is hosted by Netlify, which receives your IP address and basic request details in order to serve its pages. If you send a message through the Contact page, Netlify Forms stores your name, email address, the app and subject you choose, and your message, and we use them only to reply to you. The Luten quiz sends your answers to PostHog without your name or email address. If you joined the Luten waitlist before launch, we keep your email address, first name, referral code and how you found us in Google Firebase to send you launch news and your launch offer, and each of those emails has an unsubscribe link.
We may receive limited information from service providers and Platforms that help us operate the Services, such as confirmation of a purchase or aggregated analytics, always consistent with this policy and their terms.
This website does not set cookies and does not store anything on your device. We use PostHog for privacy-respecting analytics, configured to keep nothing in cookies or local storage, so it counts page views and clicks without building a profile that follows you between visits. That is why you are not being asked to accept anything. PostHog receives your IP address and works out an approximate location from it (country, region, city and postal code) so we can see which regions our visitors come from; it is not used to identify you. Our apps do not use third-party advertising cookies.
We use information to provide, maintain, personalise, secure, and improve the Services; to deliver soundscapes, sessions, and features such as sleep scoring; to process Subscriptions through your app store; to provide support and respond to you; to detect and prevent fraud, abuse, and security incidents; to comply with legal obligations; and to send important service communications.
We do not use your data to manipulate your attention or maximise screen time, we do not run third-party advertising in our apps, and we do not sell or rent your personal information.
Where the GDPR or similar laws apply, we process personal data to perform our contract with you (to provide the Services); on the basis of your consent, for example for health data or optional features, which you can withdraw at any time; for our legitimate interests in operating, securing, and improving the Services in a way that does not override your rights; and to comply with our legal obligations.
Where we rely on consent, you may withdraw it at any time, which does not affect processing already carried out. You can manage many permissions, such as health access, directly in your device settings.
We do not sell or rent your personal information. We share it only in the limited situations described below, and always with appropriate protections.
We use trusted service providers and processors for hosting, crash reporting, analytics, and customer support. For Luten, we use Google Firebase for account sign-in, profile backup, email preferences and audio hosting, Bunny CDN to deliver audio, Resend to send email, RevenueCat to manage subscriptions, PostHog for product analytics, and Sentry for crash reporting. For Cassette, we use Google Firebase for account sign-in, database and file storage, Apple for speech recognition, RevenueCat to manage subscriptions, and PostHog for product analytics. For this website, we use Netlify for hosting and the contact form, PostHog for analytics, and Google Firebase for the Luten waitlist. They act on our instructions under contracts that require them to protect your data and use it only to provide services to us.
Your purchases are processed by the app store or Platform, which handles your payment and billing under its own policy. We share only what is needed to deliver and support your Subscription.
We may disclose information where required by law, regulation, legal process, or governmental request, or where we believe in good faith it is necessary to protect the rights, property, safety, or security of users, the public, or One Life, or to detect, prevent, or address fraud, abuse, or technical issues.
If One Life is involved in a merger, acquisition, financing, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honour this policy and will notify you of any material change.
We may process and store information in countries other than where you live, including where our service providers operate. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, to protect it in line with applicable law.
We keep personal data only for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or anonymise it. Much of your data stays on your device and is removed when you delete the app or your Account.
We use technical and organisational measures designed to protect your information, including encryption in transit, access controls, and a local-first design that keeps as much of your data as possible on your own device. No method of storage or transmission is perfectly secure, but we work continuously to safeguard your data and to respond quickly to any incident.
If a breach affecting your personal data occurs, we will assess it promptly and, where required by law, notify you and the relevant authorities without undue delay.
If you are in the European Economic Area or the United Kingdom, you have the right under the GDPR to access, correct, update, delete, restrict, or object to the processing of your personal data; to receive a portable copy; and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; to access, correct, and delete it; and to opt out of any sale or sharing, which we do not do. We will not discriminate against you for exercising your rights.
If you live in another US state with a privacy law, you may have similar rights to access, correct, delete, and obtain a copy of your data, and to opt out of targeted advertising, sale, or certain profiling. We honour these rights as applicable.
You can exercise your rights through the Contact page or in-app settings. We will respond within the time the law allows and will not charge you or treat you differently for making a request, except as permitted by law.
To protect your privacy, we may need to verify your identity before acting on a request, and we may decline requests that we cannot verify or that the law does not require us to fulfil. Authorised agents may submit requests with proper authorisation.
The Services are not directed to children under 13, or the minimum age in your country, and we do not knowingly collect their personal information. Luten's Kids section is for parents and carers to use, and it does not collect anything about a child. If you believe a child has provided us data, contact us and we will delete it.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
We send mainly service-related messages. Where we send optional updates, you can opt out at any time using the unsubscribe link or your settings. You may still receive essential messages about your Account.
We honour recognised browser privacy signals, such as Global Privacy Control, where required by law. We do not track you across third-party apps and websites for advertising.
The Services may link to or rely on third parties, such as app stores or Apple Health. Their use of your information is governed by their own privacy policies, which we encourage you to review. We are not responsible for the practices of third parties.
We may update this policy as our products and the law evolve. When we make material changes we will update the date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect means you accept the updated policy.
If you have a concern about how we handle your data, please contact us first so we can try to resolve it. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.
For any privacy question or request, or to reach our data protection contact, use the Contact page on this site.