OneDraw Privacy Policy

Effective date: 20 October 2026 · App version 1.0.0

This policy explains how OneDraw handles information when you use the Android tarot and reflection app. No account or sign-in is required. Card readings and your journal work offline. We do not operate a server that receives your questions or journal, and the app does not send them to an AI service.

Your cards, journal and settings

The bilingual card catalogue, daily card, local calendar date, reading time, one- or three-card spreads, optional questions, moods and notes are stored in a local Room database in Android app storage. Language is managed using Android per-app language settings; onboarding, text size and haptic preferences are saved locally with Android DataStore. Local content is not automatically uploaded to us.

The app disables Android automatic backup and excludes its private data from cloud backup and device-to-device transfer. Device manufacturers may implement operating-system features differently; exported files and copies you make are managed separately.

Sharing and export

If you choose Share encouragement, OneDraw creates a temporary card image containing artwork, the card name and an encouraging message. It excludes your private question and journal note. Android shares the image only with an app you select, using a temporary read permission. The receiving app handles the shared content under its own policy.

If you choose JSON export, the file includes your daily cards, moods, notes, questions and saved readings. An on-screen notice explains this before you choose a destination with Android's document picker. Exported files may be saved locally or to a cloud provider you select. Keep them somewhere you trust. Deleting records in OneDraw does not delete exported files or copies already shared.

Advertising and privacy choices

The app uses Google Mobile Ads (AdMob) for an adaptive banner above the navigation tabs. This version has no rewarded-video or automatic full-screen advertisements. No purchase is required to draw your daily card or use readings.

Google's User Messaging Platform (UMP) updates privacy information at launch and shows a required privacy message when applicable. OneDraw checks UMP's permission to request ads before initializing the advertising SDK and waits for initialization before requesting a banner. If permission is unavailable, no advertising view is created and local card features remain usable.

Where UMP requires it, Settings > Data & privacy contains Ad privacy choices. Changing choices removes the current banner and rebuilds advertising objects only if UMP permits requests. Rejecting personalised advertising does not necessarily prevent all ads: Google may permit non-personalised or limited advertising under the recorded choices.

When enabled, the Google Mobile Ads SDK can collect and share an IP address (which can estimate general location), product interactions, diagnostics and device or account identifiers such as the Android advertising ID and app set ID. Google uses these for advertising, analytics and fraud prevention and encrypts transmitted SDK data with TLS. UMP processes information needed to determine and record privacy requirements and choices.

Advertising providers handle information under their own policies. See Google's Privacy Policy, Google advertising information, and Google Mobile Ads data disclosures.

Permissions

Internet and network-state access support privacy messages and advertising. The advertising SDK can add advertising-ID and Android ad-services permissions. OneDraw does not request contacts, camera, microphone, precise location or broad storage access. Sharing uses a FileProvider temporary grant, and export uses only the destination you select. Optional haptic feedback follows Android's vibration controls.

Retention, deletion and controls

Local records remain until you choose Delete all records, clear app storage or uninstall the app. Delete all records clears daily cards, questions, moods, notes and saved readings after confirmation; it keeps preferences and consent settings. Clearing app storage or uninstalling also removes private app settings and temporary shared images. Exports and recipient copies remain under your control. Google determines retention for data it processes.

You can reset or delete your advertising ID in Android settings and use the app's privacy choices where available. If you contact us, we use your message and contact details to respond and retain them only as needed for that request or applicable obligations. We cannot retrieve private journal entries held only on your device.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy and withdraw consent. Consent-based advertising processing follows your recorded choices; security, fraud prevention and responding to requests may rely on other applicable lawful grounds. Contact us below for a request. You may also complain to your local data protection authority. Use Google's privacy controls for information held directly by Google.

International processing and security

Advertising providers may process information outside your country under their own safeguards and policies. The app keeps its journal in private Android app storage and disables its own automatic backups. No storage or transmission method can be guaranteed completely secure.

Children

We do not knowingly request children's personal information through OneDraw. If you believe a child has provided personal information to us, contact us so we can investigate. Device and advertising privacy controls remain available to parents and guardians.

Changes to this policy

We may revise this policy as the app or its services change. The effective date above identifies the latest revision.