1. Data we process
Account and profile
Email address or Apple/Google sign-in identifier, internal identifier, username, display name and an optional profile picture.
Album content
Accepted photos, videos, captions and comments are end-to-end encrypted on the iPhone before storage. Storage receives encrypted containers; our backend does not retain plaintext album keys.
Before encryption, a photo being published is sent temporarily over TLS to OpenAI Moderation to detect prohibited content. Only You does not keep a readable copy of that photo on its VPS after this check.
Metadata
We also process album titles and types, members and roles, timestamps, file sizes, reactions, reports, invitations, key versions, authorised devices and technical events. This metadata is not described as end-to-end encrypted.
2. Keys and access
Each album uses a content key that changes during security rotations. The key is delivered separately to each authorised device in an envelope encrypted with that device’s public key. Members do not share a plaintext key, and the server cannot open these envelopes.
An authorised member can still save, photograph or copy content they can see. No system makes displayed content “unbreakable”. Removing a member blocks future access after rotation but cannot erase anything already viewed or saved.
The optional recovery key is created on your device. We do not retain its readable form and cannot recreate it.
3. iOS permissions
- Photos: only when you choose to import or publish media.
- Camera: only when you open an album camera.
- Contacts: after an explicit action. Contact details stay on device; only normalised fingerprints are sent to find matching accounts.
- Notifications: off by default and requested only after activation in Only You settings.
- Widget: private previews are off by default. If enabled, a limited number of resized images is kept in the protected local App Group and excluded from backups.
You can withdraw permissions in iOS Settings. The related feature will stop, without blocking the rest of the app.
4. Purposes and legal bases
We use data to provide accounts and albums, secure and moderate the service, handle support and reports, prevent abuse and comply with legal duties. The applicable bases are service performance, your consent for optional permissions, our legitimate security interests and legal obligations.
Only You does not use your data for targeted advertising, does not sell it and includes no advertising tracker.
5. Providers
The service relies on a VPS backend, Supabase for authentication and database services, Cloudflare R2 for encrypted media and network protection, OpenAI for photo pre-screening, and Apple for iOS features, purchases and Apple sign-in. Google is involved only if you choose Google sign-in.
Providers receive only the data needed for their function. Some may process data outside your country under applicable contractual safeguards.
6. Retention and deletion
Account data remains while the account exists. Deleted content is marked immediately and encrypted objects are removed through a durable deletion queue. Support requests are kept while handled and for no longer than 24 months; security logs are limited to the period needed to detect and investigate incidents.
Delete your account under Profile → Settings → Delete my account. This removes associated Only You data, contributions, devices and recovery envelopes. An Apple subscription must be cancelled separately in App Store settings.
7. Your rights
Depending on your location, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent at any time. Use the support form. We may reasonably verify your identity.
You may also complain to your competent data protection authority, including CNIL in France.
8. Changes
Material changes will be announced in the app or on this page before taking effect where required. The date above identifies the current version.