Privacy Policy

One2One

1. What We Collect

1.1 Technical information

• IP address — to establish the connection and to apply rate limits that keep the service usable;
• client information — app or browser version, operating system, device type;
• connection metadata — when a session started, how long it lasted, which connection path was used;
• server logs — for technical support and abuse analysis.

1.2 Usage information

• number and duration of calls;
• technical connection parameters (video and audio quality, reconnects);
• errors and failures.

1.3 Video and audio

Video and audio are transmitted directly between the two participants over WebRTC and are always encrypted. We do not record and do not store your calls. When a direct route between the two networks is impossible, the encrypted stream is relayed through our TURN server, which passes it on without being able to read it and keeps no copy.

1.4 Analytics and crash reports

The mobile app uses Google Firebase for anonymous analytics, crash reporting and remote configuration. These report events such as "a call started", "the paywall was shown" or "the app crashed here", together with the device model and app version. They never contain the content of a call, a room ID or a message.

1.5 Purchases

A One2One Pro subscription is bought through the Apple App Store or Google Play. The store processes the payment and tells the app whether a subscription is active; we never receive your name, card number or billing address. The resulting "Pro is active" flag is stored locally on your device — our server has no idea who is subscribed.

2. How We Use It

Data	Purpose	Retention
IP address	Establishing the connection, rate limiting, abuse prevention	Up to 30 days
Server logs	Technical support, diagnosing failures	Up to 90 days
Usage metadata and analytics	Improving the service, understanding which features are used	Up to 1 year
Subscription state	Unlocking Pro features on your device	On your device, until you uninstall the app

3. Sharing With Third Parties

We do not sell your data and do not share it for advertising. Data reaches other companies only in these cases:

• Apple and Google — subscription billing, app distribution, and (via Firebase) analytics and crash reporting;
• our hosting provider — it runs the signalling and TURN servers and therefore handles the technical data above;
• where the law requires it, or with your explicit consent.

4. Security

• all signalling and API traffic is encrypted (HTTPS / WSS);
• call media is encrypted end-to-end by WebRTC (DTLS-SRTP);
• TURN access uses short-lived credentials, not a shared password;
• logs are stored on hardened servers with limited access and are rotated.

5. Storage On Your Device

The app and the web version keep a small amount of data locally: your language and interface settings, whether the trial has started, whether Pro is active, and how many Random Match sessions you have used today. This never leaves your device except as part of the technical data described above. Uninstalling the app removes it.

6. Your Rights

You can ask us to give you a copy of the data associated with you, correct it, delete it, restrict its processing, or withdraw consent. Because One2One has no accounts, we normally can only identify data by IP address and approximate time — include those in your request so we can find it. Write to one2one@hollybyte.com.

Deleting your data

There is no account to delete, because One2One never creates one. Everything the app remembers about you — language, interface settings, trial and subscription state, today's Random Match count — lives on your device only, and uninstalling the app deletes all of it. Rooms and calls are never stored: a room exists only while the call lasts and leaves nothing behind.

The only records that outlive a call are short-lived technical logs (IP address, timestamp, error details) and the usage and crash reports described in section 1. To have those removed, write to one2one@hollybyte.com with the approximate date, time and your IP address at the time — without them we cannot tell your records apart from anyone else's. We answer within 30 days.

Your subscription is held by the store you bought it from. Cancelling or refunding it is done in your store account, and deleting the store's record of the purchase is up to that store, not to us.

7. Children

One2One is not intended for children under 13, and Random Match is intended for adults. We do not knowingly collect information from children of that age.

8. International Transfers

Our servers are located in the European Union. Data may be processed outside your country; we take care that it stays protected to an appropriate standard.

9. Changes

We may update this policy — for example when a new feature needs different data. Material changes will be reflected on this page and in the app listing, with a new effective date at the top.

10. Contact

Questions about privacy: one2one@hollybyte.com.