Last updated: August 19, 2026
Daiko Studio ("we," "us," or "our") provides the mobile application "OneReady" (the "App"). This Privacy Policy explains what information we collect through the App, why we collect it, what we share with outside services, and how long we keep it and how you can delete it.
OneReady lets you take a photo, screenshot, PDF, or handwritten note and have AI organize it into events, deadlines, to-dos, things to bring, and payments — all collected in one calm inbox.
The App is designed so you can start using it right away, anonymously, without entering your name, email address, or phone number. This policy describes how we handle information under that anonymous-by-default design.
The App uses Supabase's Anonymous Sign-In. On first launch, we issue a randomly generated identifier (a user ID) without asking for your name, email address, or phone number, and everything you do afterward is tied to that identifier.
At this time, signing in with an email address or a third-party account (such as Apple ID or a Google account) is not reachable from anywhere in the App's actual user interface.
Using the App saves the following information to our server (Supabase). All of it is either something you typed yourself or something AI extracted from a source you provided.
The App does not permanently store the original photo, screenshot, or PDF file itself on our servers.
When you pick or capture a source, it's held only temporarily on your device (in an app-private cache area) while it's sent directly to the analysis API. That temporary copy is deleted automatically as soon as you save the result, and in any case within 15 minutes even if you never save it. Our database stores only the text AI extracted — the title, summary, and structured data — never the file itself.
The Settings screen also describes this handling (held temporarily on-device, auto-deleted after analysis) for your reference. The current version does not offer a way to choose a different storage behavior for original files. This may change in a future update, and we'll update this policy if it does.
Every time you use AI analysis or ask a question, we record the model name, token counts (a rough measure of how much was processed), the operation type, the source type, and whether it succeeded, tied to your user ID. We use this to manage the free usage allowance and to investigate issues.
We use PostHog (analytics) and Sentry (error monitoring) to improve the App. See "5. Third-Party Services" for details on what each receives.
So the App works smoothly offline, we also store the following on your device (via AsyncStorage). None of this is transmitted anywhere on its own.
The App has no functionality to collect any of the following:
Camera and photo library access is used solely to let you capture or select source material.
The App's AI features use an API provided by OpenAI, L.L.C. ("OpenAI"). Through our own server (Supabase Edge Functions), we send OpenAI:
Our requests to OpenAI set store: false, which turns off OpenAI's own feature for retaining the response so it can be retrieved later through their API. However, this does not mean nothing we send is retained by OpenAI at all. Please note the following:
store: false only disables the "Application State" retention used to retrieve a response later via the API. Separately, OpenAI retains abuse-monitoring logs — which may include the content you sent and the response you received — for up to 30 days by default, regardless of the store setting. This is OpenAI's own default handling and is not something we can change from our side.store: false flag enables automatically. We have not confirmed that this project has been approved for ZDR.The exact retention period and handling of the data we send is ultimately governed by OpenAI's own published policies and API terms. For the latest details, see OpenAI's published documentation on API data controls.
We do not use your data to train any AI model of our own.
The App uses the following outside services. We do not use any services beyond these — no advertising SDK, no location service, and nothing else.
| Service | Purpose | Information that may be sent |
|---|---|---|
| Supabase | Account management, database, and server-side AI processing | Your user ID and the saved data described in Section 2 |
| OpenAI | AI analysis of your source material and AI answers to your questions | As described in Section 4 |
| PostHog | Product analytics | Your user ID and a fixed set of event types with limited properties (never the content of your notes, names, questions, or answers) |
| Sentry | Crash and error monitoring | Your user ID and technical information about the error itself |
Your saved data is kept on our servers for as long as you use the App.
You can delete your account at any time from the App's Settings screen. Deleting your account permanently removes the following, and this cannot be undone:
Shared counters used to operate the App as a whole (such as the site-wide daily AI usage cap) are not personal data tied to you individually, so they're not part of account deletion.
After your account is deleted, the App's locally stored data and settings on your device are also cleared, and the App returns to the same state as a fresh install. For step-by-step instructions, see our account deletion page.
Except as required by law, we do not provide your personal data to third parties without your consent. The information sent to the services listed in Section 5 is limited to what's needed to provide the App's features, and does not authorize any of those providers to use your data for their own independent purposes.
We take reasonable security measures appropriate to the information we handle — including encrypting data in transit, row-level access controls (so no one can access another user's data), and keeping administrative privileges to a minimum. That said, no internet-connected service can guarantee a complete absence of risk such as data breaches. We do not claim a level of security beyond what's reasonably achievable.
Some of the outside services the App relies on host servers outside Japan. As far as we currently know:
| Service | Primary server location |
|---|---|
| Supabase | Japan (Tokyo) |
| PostHog | European Union |
| Sentry | European Union (Germany) |
| OpenAI | May be processed in multiple regions outside Japan, including the United States |
OpenAI offers a "Data Residency" option that can limit processing and storage to a specific region, but we have not configured this feature. As a result, data sent to OpenAI may be processed in the United States or other regions where OpenAI or its sub-processors operate, and we cannot guarantee it is processed in only one specific country.
Data protection rules in these countries/regions may differ from Japan's. We select these providers based on reviewing their contracts, terms of service, and the safeguards they offer, but we do not individually certify compliance with any specific country's legal framework. If you have questions about data being sent internationally, please reach out via "13. Contact Us."
The App is not designed for or targeted at any specific age group, such as children. Age rating and classification follow each app store's own review process.
We may update this policy from time to time to reflect changes in law or in the App itself, without prior notice. If we make a significant change, we'll let you know in a clear way, either within the App or on this page. Any updated policy takes effect as soon as it's posted here.
If you have any questions about this policy, about the information we hold, or anything else, please reach out:
Operator: Daiko Studio
Contact: daikostudio.support@proton.me
Effective date: August 19, 2026