Privacy Policy

This privacy policy is applicable to the OneRack app (hereinafter referred to as "Application") for mobile devices as a Commercial service. This service is provided "AS IS".

What information does the Application obtain and how is it used?

Data We Collect and How We Use It

When you register or use the OneRack application, we may collect and store the following personal data:

Email address: Used for account creation, login authentication, and communication, such as sending password reset links or important updates.
Username: A unique identifier for your profile, displayed to other users in the app. Usernames do not need to be personally identifiable and can be set to any name of your choice.
Optional display name: If provided, this name will be shown above your profile. Display names are not mandatory and do not need to reflect your real identity, giving you the freedom to use any preferred name.

Passwords associated with email accounts are securely stored using Firebase Authentication, which employs industry-standard hashing techniques to ensure your credentials are protected. All data transmitted between the app and our servers is encrypted using HTTPS to maintain secure and private communication.

Registration is not mandatory to use the application; however, certain features may require account creation to function. The information you provide during registration is also used to improve the functionality of the app, facilitate user interactions, and allow us to contact you with important updates, required notices, or occasional marketing communications. You may opt out of marketing communications at any time.

Automatically Collected Information

In addition, the Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.

Does the Application collect precise real-time location information of the device?

This Application does not gather precise information about the location of your mobile device.

Do third parties see and/or have access to information obtained by the Application?

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

Account and Data Deletion

You can delete your account at any time by logging in to your account and navigating to Settings > Login & Security. Scroll down to the section labeled 'Delete your account' and follow the prompts. This action will immediately delete your account from our live database, including all associated media (photos/videos) and any other information linked to your account. Once completed, this action cannot be reversed, and there is no way to recover your account or data.

Please note that we retain database backups for a period of 30 days. After this retention period, all your data, including media, posts, comments, and likes, will be permanently deleted. This logic also applies to post deletions, whether deleting all your posts, or individual posts.

If you wish to delete your account but are unable to log in, please first attempt to reset your password. A reset link will be sent to the email address associated with your account. If you no longer have access to your email, contact support@onerack.eu. To verify your identity, we may ask a series of questions about your account.

Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request corrections to any inaccurate or incomplete data.
Right to Data Portability: You can request that your data be transferred to another service provider in a structured, commonly used, and machine-readable format.
Right to Restrict Processing: You can request a limitation on how we use your data.
Right to Object: You can object to the processing of your data for specific purposes, such as marketing communications.
Right to Complain: If you feel your data protection rights have been violated, you can lodge a complaint with a data protection authority in your jurisdiction.

To exercise any of these rights, please contact us at support@onerack.eu.

Security

We prioritize the security of your personal data and implement industry-standard measures to protect it, including encryption, secure data storage, and access controls. While we strive to safeguard your information, no method of transmission or storage is completely secure. To help protect your account, we encourage users to follow best practices such as using strong passwords. For more information on keeping your account secure, please visit our Account Security page.

Google OAuth and User Data

Our Application uses Google OAuth 2.0 as one of the ways for user to authenticate.To provide a secure and seamless login experience, we collect the following data:

Email Address: This is used as a unique identifier for your account. It enables us to identify you without requiring you to create and store a separate password (as this is already managed by google), enhancing your security and convenience.

We do not access additional Google user data beyond these mentioned fields and any publicly available profile information (e.g., name, profile picture) that you authorize during the OAuth consent process. We do not store sensitive data, such as your Google account password.

The email address we collect through Google OAuth is used solely for:

Creating and maintaining your account in the Application.
Authenticating your login sessions.
Providing account-related features, such as password recovery or account deletion.

By leveraging Google OAuth, we ensure that your login credentials remain with Google and are not accessible or stored by our servers, reducing the risk of unauthorized access.

We adhere to Googles Limited Use Requirements, ensuring that your data is only used to provide the functionality explicitly described in this Privacy Policy. We do not share, sell, or use your Google account information for purposes other than account authentication and user management within the Application.

If you have any questions about our use of Google OAuth or how your data is handled, please contact us at support@onerack.eu.

Children’s Privacy

The Application is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly. If you believe we have collected information from a child, please contact us at support@onerack.eu.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant updates by displaying a prominent notice within the Application or through other appropriate means. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at support@onerack.eu.