Privacy Policy
Last Updated: April 15, 2025
TL;DR — Privacy Summary
We collect minimal data: email, optional profile picture, and content you upload.
We never sell your data. Ever.
Uploaded content may be processed by AI models (like OpenAI) to generate learning content — don’t upload confidential stuff.
Usage data (like logs & analytics) may be collected to improve Only Ever, but we do not track you across the internet.
Payments go through Stripe. We don't store card details.
You can request deletion of your data anytime.
We comply with GDPR, CCPA, and UK privacy laws.
1. Who We Are
This Privacy Policy applies to The Only Ever Inc. ("Only Ever," "we," "us," "our"), a direct-to-consumer educational technology company.
Questions? Email us at: privacy@onlyever.com
2. What We Collect
Data | Why We Collect It |
|---|---|
Account creation & login | |
Profile Picture | Optional, user-provided or from SSO |
Uploaded Content | To deliver core learning features |
Usage Data (logs, device info, analytics) | App performance, troubleshooting, improvement |
Payment Info | Handled by Stripe (we don’t store this) |
3. How We Use Your Data
To operate and maintain the Service.
To generate personalized learning content.
To improve the app through analytics.
To communicate with you (e.g., support or important updates).
For marketing (rarely) — always with opt-out options.
4. AI Usage
If you upload content to Only Ever, we may send it to trusted AI providers (like OpenAI) to generate study material.
Important: Don’t upload sensitive or confidential information.
We do not intentionally send personally identifiable information (PII) to AI models. However, if you include PII within uploaded content, it may be processed as part of content generation.
By using our AI features, you grant Only Ever a license to use, modify, and display generated content solely for providing and improving the Service. You retain ownership of your original uploaded content.
AI-Generated Content is provided "as-is" and may only be used for personal, non-commercial purposes within the Service.
5. How We Share Your Data
We never sell your data.
We may share data with:
Stripe (payments)
AI providers (content generation)
Infrastructure providers (like cloud hosting)
Analytics providers (future use, for internal app improvement only)
All partners are contractually bound to handle your data securely.
We will never sell or share your data with third parties for their marketing purposes.
6. Where Your Data Is Stored
Currently: MongoDB Atlas (U.S. regions)
If storage location changes, we will ensure equivalent or stronger privacy and security protections in compliance with applicable laws.
7. Data Retention & Deletion
Upon confirmation of your deletion request, your personal data will be removed from active systems within 30 days.
Residual data (like logs and backups) may remain for up to 90 days, or longer if required by law.
Request data export or deletion: support@onlyever.com
8. Your Rights (GDPR / CCPA / UK Specific)
Depending on where you live, you have rights to:
Access your data
Request deletion
Correct inaccurate info
Object to certain uses
Request a portable copy
To exercise your rights, email: privacy@onlyever.com
9. Age Requirements
Must be 13+ to use Only Ever.
We do not knowingly collect data from children under 13.
Age verification will be in place before full launch.
10. Security Practices
Encrypted login credentials.
Data encryption in transit and at rest.
Industry-standard security controls.
11. Marketing & Communication
We may send occasional product updates or marketing emails.
You can unsubscribe at any time.
We will never sell or share your data with third parties for their marketing purposes.
12. Changes To This Policy
We’ll notify you of significant changes via email or in-app.