On The One is made by Gerardo Ruiz Dana ("we", "us"). This policy explains what information the On The One app for Mac (the "App") and the website ontheoneapp.com (the "Site") collect, why, and what you can do about it.
The short version: the App works on your Mac. What you play, your recordings and your projects stay on your Mac. We don't have accounts, we don't sell your information, and we don't use advertising trackers. The only cookies on the Site are Microsoft Clarity's, and only if you accept them.
1. What stays on your Mac
The App processes everything you play on your MIDI keyboard locally. Your progress, scores, takes, settings and Funk Lab projects are stored on your Mac. We never receive your takes, recordings or projects; if usage statistics are on, we receive scores and progress as described in section 2.
The on-device coach uses Apple Intelligence, which runs on your Mac. Your takes and questions are not sent to us or to any AI service.
Files you export (MIDI, audio) are saved where you choose. MIDI sent to Ableton Live or other software stays on your Mac.
2. What the App sends over the internet
YouTube videos. The App uses YouTube API Services. When you play a YouTube video inside the App (in lessons, guided listening or Song Lab), the video loads from YouTube through its embedded player. YouTube (Google) receives the usual information any video player sends, like your IP address and device information, and may store cookies in the App's video player on your Mac. Google's Privacy Policy (https://policies.google.com/privacy) applies to that. We don't receive any of it. The "Open in YouTube" and "Search YouTube" buttons open your web browser.
License activation. When you activate the App, it sends your license key, your Mac's model name and a random identifier (never your computer's name) to Lemon Squeezy's license service, so we can confirm your purchase and count how many Macs use it. When you deactivate a Mac, the App tells the license service so the slot frees up.
Update checks. The App checks ontheoneapp.com for new versions. That request includes your IP address, the App version and your macOS version, as any web request does. We use it only to offer you updates.
Usage statistics. If "Share usage statistics" is on (you can turn it off at any time in the App's Settings), the App sends us events about how it is used: for example, which lessons you start and finish, your scores, which features you open, your MIDI keyboard's maker and model, and the App and macOS versions and your language. Each event carries a random identifier created on your Mac, not your name or email. When you activate a license, that event includes your order number, so we can tell how many buyers start using the App. The App never sends what you play, your recordings, your projects or your computer's name. We don't keep your IP address, only the country it comes from.
The App doesn't include advertising, crash reporting or third-party analytics tools.
3. Buying the App
Lemon Squeezy is our reseller and merchant of record. When you buy, Lemon Squeezy collects your name, email address, billing country or address and payment details, and processes the payment. We never see your full card number. Lemon Squeezy shares with us what we need to deliver and support your purchase: your name, email address, country, order number and license key. Lemon Squeezy's Privacy Policy (https://www.lemonsqueezy.com/privacy) applies to the information it collects.
When you click a buy button, the Site passes its random identifier to Lemon Squeezy so we can tell which visits lead to purchases. Lemon Squeezy tells us when an order is created or refunded, with the amount, tax, country and order number, but not your name or email.
4. The Site
Hosting. The Site is hosted by Cloudflare. Like any web host, Cloudflare processes technical information such as your IP address, browser type and the pages you request, to deliver the Site and protect it from abuse.
Analytics. We measure how the Site is used with our own analytics. When you visit, the Site records events such as the pages and sections you view, the buttons you press and whether you play the mini game, together with a random identifier stored in your browser's local storage, the website that sent you and the campaign tags in the link. We don't use cookies for this, we don't follow you to other sites, and we don't keep your IP address, only the country it comes from. If your browser sends a Global Privacy Control or Do Not Track signal, the Site doesn't record these events. We also use Cloudflare Web Analytics, which counts visits without cookies.
Microsoft Clarity. If you accept it in the Site's cookie banner, we use Microsoft Clarity to see how visitors use the Site, so we can improve it. Clarity records how you interact with the pages you view (mouse movements, clicks, taps and scrolling) to make heatmaps and recordings of visits, together with information about your device and browser and your approximate location, which Microsoft works out from your IP address. It never sees what you type in our email form. Clarity sets two cookies on the Site, _clck (up to a year) and _clsk (a day), which connect the pages you view into one visit and recognize you when you come back. Microsoft also sets its own cookies on its domains, such as MUID, CLID, SM and MR, which Microsoft uses for advertising and other purposes too. Microsoft collects and processes this data under the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement), and keeps recordings for 30 days and heatmap data for 9 months.
Until you choose, and if you decline, the Site doesn't load Clarity. You can change your choice at any time with "Cookie settings" at the bottom of this page and of the home page; if you withdraw it, Clarity deletes its cookies on the Site, and you can delete Microsoft's in your browser settings. If your browser sends a Global Privacy Control or Do Not Track signal, the Site doesn't load Clarity or show the banner.
Cookies. The Site doesn't use cookies unless you accept Microsoft Clarity, as described above. Your choice is saved in your browser's local storage. It stores a random identifier in your browser's local storage for the analytics described above; clearing your browser's data for the Site deletes it. When you click a buy button, you go to Lemon Squeezy's checkout, which has its own policies.
Email. If you give us your email address on the Site (for example to get the download link, the free cheat sheet or a launch notice), we use it to send you what you asked for and occasional news about On The One. We store it with our email provider, Brevo (https://www.brevo.com/legal/privacypolicy/). Every email has an unsubscribe link, and you can also ask us to delete your address.
5. Email you send us
If you write to support@ontheoneapp.com, we receive your email address and whatever you include in your message, and we use them to help you. Our support inbox is hosted by our email provider.
6. What we don't do
- We don't sell your personal information.
- We don't share it for targeted or cross-context behavioral advertising, except that Microsoft may use what its Clarity cookies collect for its own advertising if you accept Clarity (section 4).
- We don't use advertising pixels on the Site.
- We don't build advertising profiles about you.
7. Who else receives information
Only the service providers named in this policy, to do the job described: Cloudflare (Site hosting, analytics and email forwarding), Lemon Squeezy (purchases and licenses), Brevo (email), Supabase (stores our analytics), Microsoft (Clarity heatmaps and recordings of visits) and our email inbox provider. We may also disclose information if the law requires it.
8. How long we keep it
We keep purchase records for as long as tax and accounting rules require. We keep support emails for as long as we need them to help you, then delete them. We keep your email address on our list until you unsubscribe or ask us to delete it. We keep analytics events for up to 13 months and purchase events for up to 25 months.
9. Your choices and rights
You can ask us what personal information we have about you, ask us to correct it, or ask us to delete it, by emailing support@ontheoneapp.com. We will answer within 30 days. We won't treat you differently for asking.
California residents. We don't sell personal information as those terms are defined in California law, and we don't disclose personal information to third parties for their own direct marketing. If you accept Microsoft Clarity, Microsoft's cookies may count as "sharing" under California law, because Microsoft also uses them for advertising. You can opt out at any time with "Cookie settings" at the bottom of this page and of the home page or with a Global Privacy Control signal, which the Site honors by not loading Clarity.
Do Not Track and Global Privacy Control. If your browser sends either signal, the Site doesn't record analytics events and doesn't load Microsoft Clarity.
10. Children
On The One is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has sent us personal information, email us and we will delete it.
11. Where information is processed
We are based in Guadalajara, Jalisco, Mexico. Our service providers may process information in the United States and other countries.
12. Security
We collect as little as we can, and we rely on providers with strong security practices. No method of transmission or storage is completely secure.
13. Changes
If we change this policy, we will update the date at the top. If a change is material, we will say so on the Site.
14. Contact
Gerardo Ruiz Dana, Guadalajara, Jalisco, Mexico. Email: support@ontheoneapp.com.