Last updated: September 30, 2026
One New Friend is an app where you talk with one person a day without a profile or real name, operated by Atsushi Miyamoto, an individual developer. This policy explains what the app and this website collect, where it goes, and how long it is kept. It is written to describe what the software actually does, so please read it before you use the app.
“We” and “us” means Atsushi Miyamoto. “The app” means the One New Friend mobile app for iOS and Android. “This website” means https://one-new-friend.vercel.app. The app and the website collect different things, so they are described separately below. Your use of the app and the website is also governed by our Terms of Use.
By using the app, you agree to the collection and processing of your information described in this policy, including the screening of the messages you send by OpenAI’s moderation API (see sections 6 and 8). If you do not agree, please do not use the app.
There are no accounts, so we never learn your name, email address or phone number in the app. We do collect a device identifier, your time zone, and the text of the messages you send. A conversation disappears from the app after 24 hours but is not erased from the server. There is no way to delete your data from inside the app today; email us and we will do it by hand. You must be 18 or older to use the app: we ask for your date of birth once, at first launch, and we do not store it.
The app signs you in without an account, through Supabase Anonymous Auth. There is no email address, phone number, name, username, password, profile or social login anywhere in the app. Onboarding is a single button with no text input to fill in.
Your app identity is reused every time you open the app rather than regenerated, so it persists across launches and is how we recognise your device between sessions. That means your activity in the app can be linked over time to the same app identity, even though that identity is not linked to a real-world name.
The app stores the following in AsyncStorage on your phone:
· your Supabase authentication session
· a device identifier we call the deviceId
· your Expo push notification token
· onboarding flags that remember which introduction screens you have already seen
· the result of the 18+ age check — just the word “verified” or “blocked”. The date of birth you enter is used to work that out and is then discarded; it is never saved on your phone and never sent to us.
Deleting the app from your phone removes this local copy. It does not remove anything from our server.
Our server is Supabase (a hosted PostgreSQL database with a realtime API). We store:
· your user id
· your device id. This is not a purely random value. It is derived from your device brand, model, OS name, OS version and device year class, combined with one random component, and then hashed. It is sent to our server and stored alongside your session. Treat it as a device identifier, not as anonymous noise.
· your device time zone, used to match you with someone whose waking hours overlap yours, and to decide when to send re-engagement notifications
· a hardcoded language value
· your premium subscription status
· your matches (who was paired with whom, and when)
· the content of the messages you send
· reports you file, including the free text you type and a pointer to the message you reported
· blocks you create
· conversations you save, which store a copy of the message text
· rematch requests
· your push notification token and queued notifications
Supabase also receives the usual connection metadata that any internet service receives, including your IP address.
After 24 hours a conversation stops being accessible in the app: an hourly job on our server sets a flag on the match that hides it from both participants, so neither of you can open it again. The message content itself is retained on our server and is not erased. We keep it to study and improve the service and to investigate safety reports. We say a conversation “disappears from the app” rather than that it is deleted, because deletion is not what happens. The same applies to the other records described above: your user id, device id, time zone, matches, reports, blocks, saved conversations and push records are retained until we remove them. There is currently no in-app way for you to delete your data. If you want your data deleted, email support+onenewfriend@craftive.llc and we will handle the request manually.
If you allow notifications, the app sends you a push notification when you receive a message. The body of that notification contains the first 50 characters of the message text. That excerpt is stored in a notification queue table on our server, and it is transmitted to Expo’s push notification service and from there to Apple’s or Google’s push service in order to reach your phone. Message text therefore leaves our server as part of a notification, and can appear on your lock screen.
You can turn notifications off for One New Friend in your phone’s system settings at any time. We also use your time zone to send occasional re-engagement notifications inviting you back to the app. These are push notifications only; we have no email address for you and send you no marketing email.
We do not sell your information and we do not share it for advertising. The app contains no advertising network, no analytics SDK, no crash-reporting SDK, and no advertising identifier (IDFA) tracking. The companies below receive information because they run parts of the service:
· Supabase — hosts our database, sign-in (Supabase Anonymous Auth) and realtime messaging. It holds everything listed in section 3, plus connection metadata such as your IP address.
· Expo, then Apple (APNs) and Google (FCM) — deliver push notifications. They receive your push token and the notification text, including the message excerpt described in section 5.
· RevenueCat — manages subscriptions. The app sends RevenueCat your Supabase user id as its App User ID, and RevenueCat holds your purchase history, entitlements, and device, country and IP information.
· Apple and Google — process payments for subscriptions. Purchases happen inside the App Store or Google Play, and the app never sees your card details.
· OpenAI — screens the text of each message you send for harmful content before it is delivered, as a service provider for that purpose only, under OpenAI’s API terms (see section 8).
· Vercel — hosts this website and provides its analytics (see section 7).
· Resend — delivers messages sent through the contact form on this website (see section 7).
We may also disclose information if we are required to by law, or where we believe in good faith that it is necessary to investigate a safety report, to enforce our Terms of Use, or to protect someone from harm.
The app is a mobile application that stores data in AsyncStorage. It does not use cookies and it runs no web analytics. The following applies only to this website:
· Vercel Analytics runs on this website and records aggregate page-view data about visits.
· The contact form on this website collects the name, email address, subject and message you type into it, and Resend delivers that message to us by email. This is the only place anywhere in One New Friend where an email address is collected, and it exists only on the website — never in the app. If you would rather not use the form, email us directly.
Before a message is sent, a filter running on your own device blocks phone numbers, email addresses and URLs. The text of the message is then sent to OpenAI’s moderation API, which screens it for harmful content before it is delivered; OpenAI processes it as a service provider for this purpose only, under OpenAI’s API terms. Our server also rejects messages that contain certain keywords. You can also report another user and block them. A report stores your user id, the reported user’s id, a pointer to the reported message, a reason, and any free text you write. Reports in severe categories are flagged automatically by the system.
Reports are acted on automatically as soon as they are sent: the conversation is ended and the reported user is blocked from the person who reported them, and a user reported by two or more different people within 90 days is permanently banned. Every report is also sent to us by email as soon as it is filed, and we may permanently ban a user at any time. We do not promise that a person reads every report. Retaining message content is part of what lets us look into reports when we do.
Because there is no account and no in-app data controls, your options are: turn off push notifications in your phone’s settings, delete the app to remove the data stored on your device, and email us for anything else. If you want to ask what we hold about you, ask for it to be deleted, or ask a question about this policy, write to support+onenewfriend@craftive.llc. Tell us enough for us to find your records — for example, roughly when you used the app and on what device — since we have no name or email address to look you up by.
One New Friend is for adults. You must be 18 or older to use the app or this website. The app is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 is using the app, email support+onenewfriend@craftive.llc and we will remove their data and their access.
Traffic between the app and our server is encrypted in transit, and access to the database is restricted. No service can promise perfect security, and you should not send anything through One New Friend that you would be harmed by someone else reading — including your full name, address, phone number, financial details or anything else that identifies you.
If we change how the app handles your information, we will update this page and change the date at the top. Because we have no email address for you, this page is where changes are announced, so please check it from time to time.
Atsushi Miyamoto
Email: support+onenewfriend@craftive.llc