Privacy Policy

This policy applies to the OneScript app and the onescript.define.to website. "OneScript", "we", and "us" refer to the operator of OneScript.

OneScript doesn't require an account, shows no ads, doesn't track your activity across other apps or websites, and doesn't sell your data. By default, your projects and settings stay on your own device or in your iCloud. Our servers don't receive them unless you use one of the features described below.

Data stored on your device

The following data is stored in OneScript's app container, and we can't access it:

Projects: code, resources, installed dependencies, and the data your scripts save
Settings: your app preferences
AI assistant configuration: the model providers, API keys, and models you add
AI assistant conversations

This data is included in your iOS device backups to iCloud or your computer, depending on your system backup settings.

iCloud sync

On a real device, iCloud sync is on by default. You can turn it off in Settings. When it's on:

Projects, including the data your scripts save, are stored in your iCloud Drive.
AI assistant provider configurations (including API keys), models, and conversations sync to your private iCloud database through CloudKit.

This data is stored by Apple under the Apple Privacy Policy, and we can't access it.

Crash reports and usage statistics

OneScript uses Sentry to find and fix problems and to understand how features are used. The data is stored in Sentry's data centers in the United States and doesn't include your name, email address, project code, or file contents.

Crash reports cover crashes, app hangs, and unexpected errors, and include:

The call stack and app state at the time of the problem
Recent app events before the problem. What you type is never included
Device model, OS version, app version, and language
A random identifier that OneScript generates for this installation. It is also added to support emails you send, so we can match your report with crash data

Usage statistics include app sessions (when they start and end, and whether they ended in a crash), the outcome and performance of scripts run by widgets, and the format of files OneScript doesn't support yet. File names, paths, and contents are never reported.

Network request addresses aren't reported. This data isn't used for advertising or to track your activity across other apps or websites. Sentry keeps it for up to 90 days.

AI assistant

The AI assistant connects directly to the model provider you configure (for example, OpenAI, Anthropic, or any OpenAI-compatible service) using the API key you provide. Requests don't go through our servers. When you use it, the following is sent to that provider:

The messages you type and the earlier conversation
The context the assistant needs, such as its system instructions and the results of tools like web search and web page reading

How this data is handled is governed by the provider's own privacy policy.

When the AI assistant searches the web, it connects directly from your device to public search engines, sends them the search terms, and opens pages from the results. When it reads a web page, it also connects directly to that URL from your device.

Network requests from scripts

Your scripts run on your device. Requests they make through fetch, http, net, and other APIs go directly from your device to the destination server. They don't go through our servers, and we can't see them.

Scripts can read and write files in their project, read some device information, and send data over the network. Only run scripts you trust.

Installing npm packages

When you install, update, or search for dependencies, OneScript downloads packages from an npm registry (registry.npmjs.org by default, or the registry the project specifies). The registry sees your IP address and the package names you request.

Account

Signing in is optional and only needed to create share links. You can sign in with Apple in the app or on the website, and both use the same account. We don't request your name or email address. When you sign in, we store:

A user identifier that Apple generates for OneScript
For each sign-in session, the IP address and device or browser information

A sign-in session expires after 60 days without use, and signing out ends it immediately.

The project is packaged into a zip file on your device and sent through the system share sheet. It doesn't go through our servers.

Creating a share link requires signing in. OneScript packages the project and uploads it to onescript.define.to, including the project's files, name, icon, and color.

The link belongs to your account. Anyone with the link can see the project's name and icon and import the project into OneScript. Don't share code that contains passwords, keys, or other sensitive information. When someone opens a link, their IP address is used only to limit download frequency and isn't stored.

You can see and revoke your active links in the app. Revoking a link deletes its uploaded files and records immediately. When a link expires, the uploaded files and related records are deleted within a day.

Add to Home Screen

When you add a project to your Home Screen, OneScript creates a shortcut that runs the project. iOS only accepts signed shortcuts, so this shortcut is sent to a third-party signing service (RoutineHub's HubSign or Shortcuty). The shortcut contains the project's name, icon, color, and a onescript:// link to the project. It doesn't contain the project's code.

System permissions

OneScript asks for the following permissions only when needed. You can change them at any time in iOS Settings:

Camera: take photos to add to messages in the AI assistant, and let scripts take photos or record videos when you run them.
Microphone: let scripts record audio when you run them, including sound for the videos they record. Recordings are saved as files on your device. OneScript doesn't send them to our servers; a script decides what to do with the files it records.
Location: let scripts get your location and compass heading when you run them. OneScript doesn't send your location to our servers; a script decides what to do with the location it receives. Address lookups send the address or coordinates to Apple.
Add to Photos: let scripts save images to your photo library. OneScript can't read your photo library.
Local Network: let scripts connect to devices and servers on your local network.

When you pick images from your photo library, OneScript uses the system picker and can only access the images you select.

Files, images, text, or links passed to a script from other apps through the action extension are handled by the script on your device only. Temporary files are deleted when the run finishes.

Website

onescript.define.to is hosted by Cloudflare. The app's Gallery tab shows content from the website, and this section applies to it too. Like any website, Cloudflare sees your IP address and browser information when it handles your requests.

The website doesn't use analytics or advertising services and doesn't load third-party tracking scripts. Cookies and local storage are used only to remember your language and appearance preferences and to keep you signed in.

Docs search runs on our server, and search terms aren't stored.

Signing in on the website uses the same account as the app. See Account for what we store.

Data retention and deletion

Deleting a project, conversation, or model provider in the app deletes it from your device and from iCloud.
Deleting the app removes its data from your device. Data in iCloud remains, and you can manage or delete it in iOS Settings > Apple Account > iCloud.
Share link data is deleted within a day after the link expires, or immediately when you revoke the link.
Crash reports are kept for 90 days.
To delete your account, go to Settings in the app, tap your account, then tap Delete Account. After you confirm with Apple, we revoke OneScript's Sign in with Apple authorization and delete your account, sign-in sessions, and all of your share links. If you can't use the app, contact us at the email address below.