The Vault privacy policy
Last updated: 29 September 2026
The Vault is the private app for two people that comes with every THEONE ring. This page explains what the app stores, why, and what you can do about it.
Who is responsible
Theone d.o.o., Radovanova ulica 18, 2000 Maribor, Slovenia. Registration number 7356315000. Email: support@promisetheone.com.
What the Vault stores
- Your account: your email address and your password. The password is stored only in a protected, unreadable form.
- Your identity seal: your full name, your birthday and your phone number. We ask for these once, so that one person can only ever hold one promise.
- Your ring order number, to confirm that a THEONE ring belongs to your vault.
- Your vault: both your names, your dates, and everything the two of you put inside. That means your nightly answers, photos, letters, promises and game picks.
- The time you sign in, to keep accounts safe.
Distance, if you switch it on
If you and your partner both switch on How far apart, the THEONE app uses your phone's location to show the kilometres between you on your widget. If you allow Always, it keeps that number current while the app is closed. Your position is rounded to about a kilometre on your phone before it is sent. It is stored only as that rounded position and replaced each time. Your partner only ever sees the number of kilometres, never a map. Switching it off, leaving the vault or deleting your account removes it.
What we do not do
The app has no advertising and no tracking. We do not sell your data and we do not share it with advertisers.
Who can see what you write
Your partner. Nobody else inside the app. Our small team only accesses vault data when it is needed to fix a problem you report, to keep the service secure, or when the law requires it.
Why we are allowed to use this data
To provide the app you asked for (contract). To keep the service secure and to keep the rule of one person, one promise (legitimate interest). Reminders are sent only if you allow notifications on your phone.
Companies that process data for us
- Supabase: database, sign in and photo storage.
- Netlify: hosting, the ring order check and the partner invitation.
- Resend: the emails the app sends, such as the partner invitation and password reset.
- Shopify: our shop, where the ring order number comes from.
Some of these companies use servers outside the European Union, including in the United States. Those transfers are covered by the EU standard contractual clauses or the EU and US Data Privacy Framework.
How long we keep it
For as long as your account exists. When you delete your account, your profile and your sign in are removed. If your partner is still in the vault, the vault stays with them. If nobody is left, the vault and everything written in it is deleted. Its photos can no longer be opened by anyone from that moment, and the photo files are removed from our storage within 30 days.
After deletion we keep one minimal record: a key made from your name and birthday, and the last digits of your phone number. It exists only so that the same person cannot open a second vault.
How to delete your account
In the app open Us, then Settings, then Delete my account. You can also write to support@promisetheone.com.
Age
The Vault is for people aged 16 and over.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@promisetheone.com. You can also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, ip-rs.si).
Changes
If this policy changes, the new version appears on this page with a new date.