Legal

Privacy Policy

ONSE · Effective 31 August 2026

This policy explains what the ONSE mobile app collects, why, and what happens to it. It covers the App only. The controller of this data is FabFun ZZP, Koninginengeweg 150, Amsterdam, the Netherlands (KVK 92807224, BTW NL004978046B19), contactable at elena@popapp.biz.

The short version. ONSE stores the moments you record so it can turn them into films for you. Nobody else can read them. We do not sell your data, we do not run advertising or analytics trackers, and we do not use your footage to train machine-learning models. You can delete everything from inside the app.

What we collect

Your account identifier, email address, and display name, from Sign in with Apple or Google Sign-In

To create your account and tie your moments to it. If you use Sign in with Apple and choose to hide your email or withhold your name, we only ever receive what Apple passes on.

The moments you record — a photo, or a video of up to two seconds, per calendar day — and the preview thumbnails generated from them

These are the substance of the product. They are stored so your timeline persists and so films can be assembled from them.

Photos and videos you pick from your library for a selection film

Uploaded only for the specific film you asked us to build.

A record per day: which media it points to, whether it is a photo or a video, its duration, its upload status, its dominant colour, and the time zone and time it was captured

To lay out your timeline correctly and place each moment on the right calendar day.

Your film requests: the period or selection they cover, their status, and any title you type

To render the film you asked for and show its progress. Titles you type are burned into the opening card of the film.

The films we render for you

So you can play, keep, and export them.

Your time zone, and the daily reminder time you set

To send the reminder at the hour you chose, in your local time.

A push notification token per install, and the platform

To deliver reminders and to tell you when a film has finished rendering. Only if you allow notifications.

Your subscription status and the Apple transaction identifiers behind it

To unlock premium features. Written only by our servers from what Apple reports.

What we do not collect. We do not use analytics, advertising, attribution, or tracking SDKs. We do not collect your contacts, your location, your device advertising identifier, or your browsing activity. We do not track you across other companies’ apps or websites.

Device permissions

Camera and microphone — to record a moment. Recording only happens when you start it.
Photo library (read) — to let you choose an existing photo or video as a moment. We only receive what you select; we do not scan or upload your library.
Photo library (add) — to save a finished film to your library when you ask us to.
Notifications — for daily reminders and render-complete alerts. Optional, and revocable in iOS Settings.

Who else processes it

We do not sell or share your data, and there is no third-party advertising or analytics in ONSE. We rely on two service providers to run the app:

Google, through Firebase, provides our authentication, database, file storage, server functions, and push delivery. Our server functions run in Google’s europe-west1 region; Google may process data in other countries under the safeguards described in its Firebase privacy documentation. Google Sign-In is also used if you choose that sign-in method.
Apple provides Sign in with Apple, processes all subscription payments through the App Store, and delivers push notifications. We never see or handle your payment card details.

We may also disclose data if we are legally required to, or where it is necessary to protect our rights or someone’s safety.

Who can see your moments

Your moments, your films, and your profile are readable only by your own signed-in account. This is enforced on our servers, not just in the app: every stored file and record is scoped to your account identifier, and requests from any other account are refused. ONSE does not have a public feed, and it does not publish your footage.

Legal bases

If you are in the EEA or the UK, we process your data to perform our contract with you (running the app and its subscription), on the basis of your consent where you have given it (push notifications, and access to your camera, microphone, and photo library), and on our legitimate interests in keeping the service secure and preventing abuse.

How long we keep it

Your moments, films, and profile stay until you delete them or delete your account. Deleting a day removes its media. Server logs, kept for security and debugging, are retained for a short period and then discarded.

Deleting your data

You can delete your account from inside the app, under Settings. Deletion is irreversible and removes your uploaded moments, the clips you selected for films, your rendered films, your day records, your profile, your notification tokens, your subscription record, and your sign-in account itself.

Deleting your account does not cancel an active subscription — that is billed by Apple, and you cancel it in your Apple Account settings.

Your rights

You can request access to your data, correction, erasure, a portable copy, or restriction of or objection to processing, by writing to elena@popapp.biz. If you are in the EEA or the UK you can also complain to your local data protection authority.

Children

ONSE is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes

If we change this policy materially we will post the updated version here and change the effective date above before it takes effect.