Just One A Day Privacy Notice
Version privacy-0.3
The short version
We hold one thing about you: your email address. We use it to let you into the tour and, if you ask us to, to tell you once when Just One A Day launches. If you tell us to delete it, we delete it within 7 days and email you straight away to confirm. We never sell it or share it.
That's genuinely the whole arrangement. What follows is the detail the law requires us to spell out.
Who we are
Just One A Day is a trading name of Pinekor Limited, a company registered in England and Wales, no. 17389269. Registered office: 17 Partridge Close, Northampton, NN2 8BL.
Contact: hello@justoneaday.app · ICO registration number: ZC233346
We are the data controller — legally responsible for your information.
What we collect
- Your email address, which you give us.
- Timestamps: when you signed up, verified, and finished the tour.
- Your answer to the optional question at the end, if you give one.
- Technical logs: your IP address and which pages you requested, kept for 14 days.
We do not collect your name, your location, your photograph, or anything typed into the tour's simulated profile screens. Those screens are a demonstration — nothing entered there is transmitted or stored anywhere.
Why this counts as sensitive information
Just One A Day is a dating product for people in open relationships. Holding your email address in connection with it says something about your private life. UK data protection law treats information about a person's sex life or sexual orientation as special category data and protects it more strictly than ordinary information.
We have designed around that: your email address is the only real thing we hold, and you can have it deleted on the spot.
Our legal basis for holding it
- Holding your email and running the tour — your consent (UK GDPR Article 6(1)(a)).
- Because the information is special category — your explicit consent (Article 9(2)(a)). That is the separate checkbox we ask you to tick at signup.
- Security and abuse-prevention logs — our legitimate interests in keeping the service running (Article 6(1)(f)).
You can withdraw consent at any time by emailing hello@justoneaday.app. Withdrawing is as easy as giving it, and we won't ask why.
Who else sees it
| Who | What they handle | Where |
|---|---|---|
| Resend | Sending the verification and confirmation emails. Resend uses Amazon Web Services (SES) to do the sending | Resend is US-based; the mail itself is handled in Ireland |
| Akamai (Linode) | The server the tour runs on | UK — London |
Cloudflare runs the address book that turns our domain name into a server address. Your browser never talks to them and they never see your request, so they are not on the list above.
Nobody else. We do not sell your data, share it with advertisers or data brokers, or provide it to anyone training an AI model. There is no version of this product in which we would.
Where information goes outside the UK it is covered by the UK International Data Transfer Agreement or equivalent safeguards.
How long we keep it
| What | How long |
|---|---|
| Your email, if you asked to be notified | Until Just One A Day launches and we email you, or until you ask us to delete it — whichever comes first |
| Your email, if you asked us to delete it | Deleted within 7 days of the request |
| Your email, if you signed up but never verified | 7 days, then deleted |
| Your answer to the final question | 24 months, detached from your email — see below |
| Security logs | 14 days |
| Backups | 30 days, rolling |
| Donation records | 6 years, because tax law requires it |
About your answer to the final question
If you answer the question at the end, we store the answer against a random reference number rather than your email address. When your email is deleted, the answer remains and the link to you does not.
About backups
If you ask us to delete your address, it also sits in any backup taken before you asked. We never restore a backup to bring back a deleted address, and backups are kept for 30 days and then destroyed, so the copy ages out on its own.
Your rights
You can ask us to show you what we hold, correct it, delete it, stop using it, or send you a copy. Email hello@justoneaday.app and we will respond within one month, as the law requires. There is no charge.
If you are unhappy with how we've handled your information, tell us first. If that doesn't resolve it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
The tour sets one cookie, which remembers that you verified your email so you don't have to do it again. It is strictly necessary for the tour to function and expires when the tour ends.
We run no analytics and no tracking of any kind. That is why you haven't seen a cookie banner.
Nothing on this site is loaded from anyone else's server — no fonts, no scripts, no images, no embedded anything. Visiting a page here tells nobody but us that you were here.
Automated decisions
We make no automated decisions about you, and we do no profiling.
Changes
If we change this notice we'll publish a new version with a new number. If a change is significant and we still hold your email address, we'll tell you about it.