Privacy Policy

ThatOne (“we”, “us”, or “our”) is operated by Temuchin Khak-Nazaruly, an individual based in the Republic of Kazakhstan, at https://thatone.space. The service is currently in Public Beta. We are committed to protecting your personal privacy. This policy explains what information we collect, how we use it, and the choices you have.

By creating an account or using the service, you acknowledge this Privacy Policy. If you do not agree, please do not use ThatOne.

ThatOne is for people aged 14 and older. We do not knowingly permit children under 14 to create accounts. If you are under the age of legal majority where you live, you may use ThatOne only with the permission of your parent or legal guardian where required by applicable law. Contact us at contact@thatone.space if you believe an account belongs to a child under 14.

We collect only what we need to run the product:

• Account data via Google OAuth. When you sign in with Google, we receive your email address, profile name, and profile avatar so we can create and identify your account.
• Account data you provide. If you register with email, we store the email address and related profile details you choose (such as a username).
• Usage data and app interactions. Standard operational signals such as sign-in events, pages or screens you use, session activity in focus rooms, and similar product interactions needed to operate, secure, and improve the service.

We use personal information to:

• Authenticate users through Supabase Auth and keep you signed in.
• Create and maintain your ThatOne account and profile.
• Operate the product and monitor operational performance.
• Provide account support when you contact us.

Google user data is used strictly for authentication and account creation. We never sell Google user data, and we never share it with third parties for advertising.

We rely on the following processors to host and operate That One. They receive only the data required for their role:

• Supabase — database, authentication, and related backend services.
• Google OAuth — optional sign-in; Google provides account identity (email, name, avatar) to us for authentication.
• Cloudflare — DNS, CDN, and related edge security for https://thatone.space.
• Vercel — application hosting and delivery of the web app.

Each provider processes data under its own terms and privacy policy. We do not use these services to sell your information or to run advertising targeting based on Google user data.

We protect personal data with standard encryption in transit (HTTPS/TLS) and access controls that limit who can reach production systems and databases. Access is restricted to people who need it to operate the service.

No method of transmission or storage is completely secure. We work to reduce risk, but we cannot guarantee absolute security.

You may request access to, correction of, or deletion of your account and associated personal data. To delete your account and data, email contact@thatone.space from the address on your account and ask us to delete it. We will process verified requests and remove personal data we control, except where we must retain limited records to comply with law or resolve disputes.

Depending on where you live, you may also have rights to object to certain processing or to lodge a complaint with a supervisory authority.