OnePlace privacy policy (beta)

Last updated: 18 October 2026

OnePlace is a money app for couples and households. This policy explains what information OnePlace keeps, why, who can see it, and how to have it deleted. We've written it in plain English. If anything is unclear, email info@oneplaceservices.co.uk.

This policy also covers this website, and emails you send us about our other projects, OnePlace Pets and OnePlace Web. We only use those details to reply, and delete them within 6 months if we don't end up working together. OnePlace Web has its own privacy notice for businesses.

1. Who we are

OnePlace is run by Ryan Bowen, an individual based in the United Kingdom. He is the "controller" of your information under UK data protection law (UK GDPR). Contact: info@oneplaceservices.co.uk.

2. OnePlace is in beta

OnePlace is currently being tested by a small group of people. During the beta, bank connections and payments run in a test environment. You connect a pretend bank, and no real bank data is read and no real money moves. We'll update this policy, and tell you, before real bank connections are switched on.

3. What we keep

• Your first name and email address: to create your account and show your name to your household.
• Your password: to let you log in. It's stored scrambled (hashed), so we can't read it.
• Your household and who's in it: so you and your partner can share costs.
• Shared costs you log, notes, replies and splits: this is the core of the app.
• Records of payments between you: so you both know what's been paid.
• "Where you get paid" details (bank name, name on the account, sort code, account number): so your partner can pay you. Only you see the full details; your household sees only the bank name and last 4 digits.
• Bank accounts you connect (account names, balances and up to 90 days of transactions): to show your spending and let you split payments.
• Your profile picture, if you add one: to show your household who's who.
• Settings (appearance, notification choices and your usual split): to remember how you like the app.
• A notification token for your phone: to send you push notifications.

If you use "work it out from our pay" for your usual split, those pay figures are used for the calculation on your phone and never saved.

We do not use your information for advertising, and we never sell it.

4. Who can see what

• Your own bank accounts and spending: only you. Your partner sees them as "Private".
• Joint accounts you connect: everyone in your household.
• Shared costs, replies and payments between you: the people in your household.
• Your name and profile picture: you and your household.

5. Bank connections and payments

OnePlace connects to banks using Open Banking through TrueLayer, a company authorised by the Financial Conduct Authority. You choose your bank and approve access on your bank's own app or website. OnePlace never sees or stores your bank login details.

Access lets OnePlace read account names, balances and transactions. It can't move money on its own.

Your bank will ask you to reconfirm access every 90 days. You can disconnect a bank at any time in Profile › Bank accounts.

When you pay someone through OnePlace, TrueLayer sends a payment request to your bank and you approve it there. Money goes straight from bank to bank; OnePlace never holds it.

6. Companies that help run OnePlace

• Supabase: stores OnePlace's data and runs its servers (London, UK).
• TrueLayer: bank connections and payments through Open Banking (UK).
• Expo: delivers push notifications to your phone (United States).
• Apple: delivers notifications to iPhones and distributes test versions through TestFlight (United States).
• Netlify: hosts this website (United States).
• Google Workspace: handles our email at info@oneplaceservices.co.uk (United States).
• Resend: sends account emails, such as sign-up and password reset emails (United States).

Where information goes outside the UK, these companies use the legal safeguards UK law requires, such as standard contract clauses.

7. Our legal reasons for using your information

• To provide the app you signed up for (contract): your account, household, shared costs and payments.
• Your consent: connecting a bank, adding a profile picture and receiving push notifications. You can withdraw consent at any time.
• Legitimate interests: keeping OnePlace secure, fixing problems and replying to emails you send us.

8. How long we keep it

We keep your information while you have an account. Bank transactions older than 90 days are not fetched. If you disconnect a bank, its accounts and transactions are deleted from OnePlace. You can delete your account at any time in Profile › Delete my account, and your information is deleted straight away (or within 30 days if you ask us by email). Shared costs and payment records your partner still needs may stay in their account without your bank details.

9. Your rights

Under UK data protection law you can ask to see a copy of your information, correct it, delete it, limit or object to how it's used, or take it elsewhere. Email info@oneplaceservices.co.uk and we'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Age

OnePlace is for people aged 18 and over.

11. Keeping it safe

Information is encrypted while it travels between your phone and our servers. Strict rules in the database mean each person can only see their own information and what their household shares.

12. Changes to this policy

If we change this policy, we'll update the date at the top and tell you in the app before the changes apply.

13. Cookies on this website

This website doesn't use cookies, analytics or advertising trackers. The OnePlace app itself doesn't use cookies.