Photos and private iCloud

OneDay does not require a separate app account. Photos, notes, dates, optional city names, annual covers and the first album year are used to save and display your diary. They are stored on your device and in your private CloudKit database in iCloud. A permanent save requires confirmation from iCloud; syncing depends on your Apple Account, connection and iCloud storage. We do not run a separate photo server or publish your records to a public CloudKit database.

Verifying today’s photos

Only when you choose a photo does the app read that authorized selection, its library date, original capture date, camera information and screenshot flag to verify that it was taken today. Unverifiable images are rejected; this is not a guarantee against forgery. Location metadata is not required. When Photos retains the original information after editing, we verify the original and use the edited image. Third-party editing or export may remove information and cause rejection. The asset identifier and verification dates are used only to recheck local drafts, not as cloud record fields. The saved image is re-encoded without original GPS metadata. Your library is not uploaded in bulk.

City and location

Location permission is optional. With permission, the app uses system location and Apple’s geocoding service to obtain a city name. Diary records store only the city, not precise coordinates, streets or districts. You can take and save photos without this permission. The app does not continuously track location in the background.

Permissions and local data

Camera access enables capture; photo-library access verifies your selected photo and supports limited access; add-only access saves shared images; notifications enable optional daily reminders. Revoke permissions in system Settings. Language, appearance, reminder and onboarding preferences stay on device. A local hash of iCloud account identity separates cached records and drafts; we do not request your Apple Account password. Old drafts whose ownership cannot be verified are retained separately, without automatic display, transfer to another account or upload.

Sharing and third-party services

Generated images are handed to the system share sheet or saved to Photos only at your request. Visible dates, notes, cities, app names and other content may be included; check the preview first. Receiving apps handle data under their own policies. This version has no ads, cross-app tracking or third-party advertising or analytics SDKs. Apple services handle data under Apple’s privacy policy.

Retention, withdrawal and privacy requests

Records are intended for long-term private keeping. The app allows one photo per day, with no replacement or deletion after confirmation and no annual-album deletion control. This product rule does not limit rights under applicable law. Revoking permissions, disabling iCloud or uninstalling does not delete cloud content. For access, correction, deletion or other privacy assistance, email us below. We will handle requests under applicable requirements within the data we can actually control and, when needed, help identify Apple’s official management channels. We do not promise direct access to or deletion of your private iCloud data and will not ask for your account password.

Diagnostics and email support

Apple may provide crash and diagnostic information depending on system or TestFlight settings. If you email us, your email address, description and attachments are used to handle your request and retained as needed for that request and applicable obligations. Redact unrelated personal information and never send passwords. There is no separate in-app support submission form, and the app does not automatically attach your library or drafts.

Policy updates

This policy will be updated when features or data practices change. Material changes will be communicated appropriately. Use the email below for privacy questions, rights requests and support.