Privacy Policy

ABNK Premium Systems LTD ("we", "us", "our") operates the mobile application The One ("App"). This Privacy Policy explains how we collect, use, and protect your data. By using our App, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

We collect data to provide, improve, and secure our services. This includes:

Information You Provide:

• Account Data: Email address (including Apple Private Relay addresses), encrypted password, and username.
• User Content: Reading progress, journals, notes, highlights, and group-related information (invitations and group membership).

Technical and Usage Data (Automated):

• Identifiers: We collect unique technical identifiers (such as identifierForVendor on iOS or Android ID/Install ID on Android) and device-specific identifiers to ensure account security and prevent fraud.
• Diagnostics (via Sentry.io): When the App encounters an error or crash, technical data is automatically sent to Sentry. This includes device model, OS version, screen size, battery status, and technical logs (stack traces). This data is used solely for debugging and performance optimization.
• Approximate Location: We may use your IP address to determine an approximate location (city/region) for service localization and security purposes.
• Device Push Tokens: To deliver push notifications, we collect a unique token generated by your device’s operating system. This token is a technical identifier that allows us to route messages to your specific device.

2. Legal basis for processing (GDPR)

We process your data based on the following legal grounds:

• Performance of a Contract: To manage your account and sync data across devices.
• Legitimate Interests: To maintain App stability via crash reporting and to ensure the safety of our service through fraud prevention and user identification.
• Compliance with Law: When required to fulfill legal or regulatory obligations.

3. How we use your data

We use the collected data only to:

• Create and manage your account and sync progress.
• Security & Fraud Prevention: Identify and block repeat offenders who violate our Terms of Service or engage in abusive behavior.
• App Reliability: Diagnose and fix bugs using anonymized crash reports.
• Regional Compliance: Enforce regional access restrictions based on approximate location data.
• Communications: We use device push tokens solely to send notifications related to your account, security updates, and relevant App functionality. We do not use these tokens for third-party advertising or tracking.

4. Data sharing and third-party providers

We do not sell your personal data. We share data only with trusted service providers:

• Sentry.io: For technical error monitoring and crash reporting.
• Cloud Infrastructure: For secure data storage and synchronization.
• Push notification services: We use official Apple APNs and Google (FCM) to send notifications.

These providers are contractually obligated to protect your data and are prohibited from using it for their own purposes.

5. Account deactivation and termination

To ensure the safety of our community and the integrity of our service, we reserve the right, at our sole discretion, to deactivate, suspend, or terminate access to any account or restrict App functionality (including on a per-device basis) in the following cases:

• Violation of our Terms of Service or community rules.
• Detection of fraudulent or malicious activity.
• To prevent repeated abuse from previously blocked users.
• To maintain the security and operational stability of the service.

6. Data retention and deletion

• Retention: We retain your account data as long as your account is active.
• User-Initiated Deletion: You can delete your account and all associated personal data at any time via the "Delete Account" button in the App settings. Once deleted, data is permanently erased from our active databases.
• Security Retention: We may retain certain technical identifiers of blocked devices to prevent them from creating new accounts and bypassing security measures.

7. Your rights

Under GDPR and other privacy laws, you have the right to access, correct, or request the deletion of your personal data.

8. Children’s privacy

The App is not intended for children under the age of digital consent. We do not knowingly collect data from children. To create an account, users must be of the legal age of digital consent in their jurisdiction.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by displaying a prominent notice within the App. Continued use of the App after such notification constitutes your consent to the updated policy.

10. Contact us

For any privacy-related inquiries, please contact us at: