Privacy

Last updated October 7, 2026.

OneJob stores the tasks and plans you create so the app can help you choose and complete your next task. Task text is private account data and is not sent to advertising or analytics services.

AI processing

AI is off by default. After you sign in and enable it, OneJob sends new task text and planning context through its protected Firebase service to OpenAI when you save or import tasks. When you start or continue AI-assisted work, it sends the selected task record, including its original input and saved plan, and your replies through Firebase to OpenAI. Turning AI off stops these future AI requests. External actions require your separate explicit approval. OpenAI processes this content under its applicable API terms.

Task reminders

On supported devices, you can opt in to local notifications for scheduled and due tasks. Reminder text is generic and does not include task titles. OneJob does not upload a push-notification token or send these reminders through a notification server.

Voice and keyboard dictation

After you sign in and enable AI, and have Pro access when subscriptions are active, you can tap OneJob’s microphone button to record for up to 60 seconds. OneJob sends the recording through its protected Firebase service to OpenAI for transcription. The device recording is limited to 1.5 MB. OneJob attempts to delete its temporary device recording after transcription, failure, or cancellation. We do not put raw audio or unconfirmed transcripts in app logs or cloud task storage. The transcript stays editable until you confirm tasks; confirmed task text is saved under the normal task storage rules. OpenAI’s processing and retention are subject to its applicable terms.

You can instead type or use your keyboard’s microphone. Keyboard or operating-system providers control that dictation’s availability, permission, audio processing, and retention under their own terms. Keyboard dictation does not use OneJob’s microphone button.

Crash diagnostics

Crash diagnostics are available only in the native apps and are off by default. If you enable them in Settings, Firebase Crashlytics receives crash traces, a Crashlytics installation identifier, a Firebase installation identifier, and device, app, and operating-system details so OneJob can diagnose stability problems. OneJob does not add task text, recordings, transcripts, email addresses, account IDs, or custom free-text logs to crash reports. Firebase retains crash traces and their associated identifiers for 90 days before removal begins. Turning diagnostics off stops future collection and deletes reports waiting to be sent from the device.

Subscriptions and product events

Subscriptions are in preview and disabled until configured. When enabled, OneJob stores account access, trial dates, billing-provider customer and subscription identifiers, and purchase status. Payment providers process payment information under their own terms; OneJob does not store card numbers. Native purchase verification may use RevenueCat and the originating app store.

When enabled, limited product events use predefined event names, your account identifier, server time and bounded daily counts to understand trial and plan use. They do not contain task text, recordings, results or free-form messages. These limited records are retained to operate the service. Contact support with questions about retention or deletion.

Connected assistants

Assistant connections are an opt-in private pilot. When configured, the assistant you authorize can read your tasks and context under the permissions you approve. Write permission only lets it propose changes; saving a task, result or progress change requires your explicit approval in OneJob. Your assistant provider receives the content you permit and processes it under its own terms.

OneJob stores connection grants, pending proposals and approved results in your account. Proposals become unavailable for approval after 24 hours. Expired proposals may remain stored until account deletion. Results remain until account deletion. Access tokens are short-lived, and stored credentials are hashed. Routine application logs exclude task and result content and tokens. You can revoke a connection in Settings, but this cannot erase copies already held by another provider.

Your choices

You can use the app locally without cloud sync, AI, task reminders, or crash diagnostics; turn optional processing off; export your information; or delete your account and associated active cloud data. AI is also disabled on sign-out. Limited records may remain for security, service operations, and prevention of stale account operations after deletion. Processor records follow their applicable terms. Contact support with questions about retention or deletion. See the account deletion instructions.

Contact

Questions or deletion requests can be sent to xoxoadmin@gmail.com.