OnMy Privacy Policy
Effective date: November 1, 2026
OnMy is made by Lx Scaling LLC, a Connecticut limited liability company ("OnMy", "we", "us"). This policy explains what we collect when you use the OnMy iOS app, its iMessage extension and onmy.io (the "Service"), why, who sees it and what you can do about it.
The short version: we collect what we need to run OnMy, we show your proofs only to the people you commit with and to the OnMy team when Pu reviews them, we do not sell your data, we do not show ads, and we do not track you across other apps or websites.
1. What we collect
Account. Your email address (or the private relay address Apple creates if you use Sign in with Apple with Hide My Email), the name and username you choose, your profile photo and bio if you add them, and your confirmation that you are 18 or older. With Sign in with Apple we also receive a user identifier from Apple. We do not store your date of birth. We also keep an identifier for your device, and a mark from Apple's DeviceCheck, so we can enforce blocks, abuse limits and the free uses of Pu per device.
Your content. The photos and videos you send as proof (for a video, we also keep three frames from it), their captions, the titles, descriptions and stakes of your commits, your messages to other users where messaging is available, and your reports.
Location. Only when a commit requires a location and you allow it. When you take a proof, we read your device's precise location at that moment and store it with the proof, together with its accuracy and whether the device reported it as simulated. The people reviewing that proof see the place where it was taken (a place or street name, the city and a map pin), not your coordinates as text. If you turn off precise location, the proof is sent and marked as having an approximate location. We never read your location in the background or outside of taking a proof.
Device and usage. A push notification token, your device model, iOS version and app version, your user ID, and server logs with your IP address and timestamps of requests. We do not use third-party analytics or advertising SDKs.
Purchases. If you subscribe to OnMy Pro, Apple tells us your subscription status (active, in trial, expired, refunded) and a transaction identifier. We never see your card or bank details.
What other people share about you. When a friend dares you, judges you, messages you or reports you, we receive that content and it may mention you.
Waitlist and website. If you join the waitlist on onmy.io, we keep your email address to tell you when OnMy launches and to offer you early access. You can unsubscribe from any email we send, and we delete waitlist addresses within 90 days after launch. The website itself sets no advertising or tracking cookies.
2. How we use it
- To run OnMy: create commits, send proofs to the right people, keep streaks and points, and show you your history.
- To review proofs and settle disputes when Pu is involved. A member of the OnMy team does this, sometimes helped by automated tools (see section 6).
- To keep OnMy safe: screen dares, stakes, messages and profiles for content that breaks our rules, handle reports, prevent abuse and fraud, and enforce our Terms.
- To notify you: push notifications and emails about your commits, proofs, friends, deadlines and your account. Pu's seasonal news and tips are sent only if you turn them on in Settings.
- To support you when you write to us.
- To bill and manage OnMy Pro through Apple.
- To understand and improve OnMy using aggregated, non-identifying numbers.
- To comply with the law and protect rights and safety.
We do not sell personal information and we do not share it for advertising.
3. Who sees what
The people in your commits. The other player and any judge see your name, username, profile photo, the proofs, captions and stakes in that commit and, when the commit requires it, the place where a proof was taken, shown as a place or street name, the city and a map pin. Your friends see your name, username and photo, and whether a dare between you is running.
The OnMy team. We see content when Pu reviews it, when it is reported, when a dispute is escalated, or when needed for support or safety.
Service providers that process data for us under contract:
- Supabase (database, file storage, authentication and hosting; servers in the United States, us-east-1).
- Resend (sends our emails, such as sign-in codes and receipts).
- Apple (Sign in with Apple, push notifications, App Store purchases and subscription status, and DeviceCheck, which lets us mark a device without identifying you).
- Anthropic (an AI model that screens dares, stakes, messages and profile text for safety; it receives the text only, never your name, email or account).
- OpenAI (a moderation service that screens proof photos, video frames and profile photos for safety; it receives the image only).
Legal and safety. We disclose information when the law requires it, to respond to valid legal process, or to protect the rights, property or safety of OnMy, our users or others. If we find content that appears to show the sexual abuse of a child, we preserve it for up to one year and report it to the National Center for Missing and Exploited Children, as US law requires.
Business changes. If Lx Scaling LLC is involved in a merger, acquisition or sale of assets, your information may be transferred with the business. We will tell you before your data becomes subject to a different privacy policy.
Nothing you post is public unless you share it yourself, for example by posting a card from the app to another service.
4. Push notifications and emails
Push notifications and account emails (sign-in codes, commit updates, subscription notices) are part of the Service. You can turn pushes off in iOS Settings. Optional messages from Pu (seasonal news and tips) are off by default and can be turned on or off in the app's Settings at any time.
5. Location
Location is asked for in the camera, the first time a commit that requires it needs a proof, never during sign-up. If you say no, you can still send the proof and it is marked as sent without a place. You can change the permission at any time in iOS Settings.
6. Automated tools and human review
We use automated tools to screen content for safety and to help the OnMy team review proofs. Decisions that affect your account (a proof rejected by Pu, content removed, an account paused or closed) are made or checked by a person. If you think a decision was wrong, write to support@onmy.io.
7. How long we keep it
- Account and profile data: until you delete your account.
- Proofs, captions and messages: while the commit they belong to is live, and afterwards as part of your history, until you delete your account.
- Location data: with the proof it belongs to.
- Reports and moderation records: up to 2 years after the case closes, so we can handle repeat abuse and legal requests; the text of screened content is kept for 90 days.
- Content under a safety hold: up to one year (see section 3).
- Purchase records: as long as tax and accounting law require.
- Server logs: up to 30 days.
- Backups: deleted data may remain in encrypted backups for up to 30 days before it is overwritten.
Deleting your account. Settings → Delete account. This ends your running commits with no winner, withdraws your pending dares, offers and judge invitations, closes any stake still open with you, deletes your proofs, photos and profile, frees your username and removes your sign-in. It takes effect at once and cannot be undone. Other people keep their own records, where you appear as "Deleted account" with no photo; your messages in their chats stay under that name. Records we must keep by law, reports and content under a safety hold may remain. We also keep the device identifier that was attached to the account, with no link back to you, so that deleting an account cannot be used to get around blocks, limits and the free uses of Pu. You can also email support@onmy.io to ask for deletion.
8. Your choices and rights
- See and fix your data. Most of it is visible and editable in the app. Email us for a copy of the rest.
- Delete. In the app, or by email.
- Notifications. iOS Settings for pushes; the app's Settings for Pu's news.
- Location. iOS Settings.
- Blocking and reporting. In the app, on any profile, dare, proof or message.
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or limit some processing, and to not be discriminated against for using these rights. Residents of California, Connecticut and other US states with privacy laws, of Peru, and of the European Economic Area, the United Kingdom and Switzerland can exercise these rights by emailing support@onmy.io. We do not sell or share personal information for cross-context behavioral advertising, and we do not respond differently to "Do Not Track" signals because we do not track you across other services. If you are in the EEA or UK, our legal bases are performance of our contract with you, our legitimate interests in running a safe service, your consent where we ask for it (location, Pu's news) and legal obligations; you can also complain to your local data protection authority.
9. Security
Data is encrypted in transit and at rest, access inside the company is limited to what the job needs, and proof files are served through time-limited links. No system is perfectly secure, so please keep your Apple ID, your email account and your phone protected and tell us right away at support@onmy.io if you think your account was accessed without permission.
10. Children
OnMy is only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a user is under 18, email support@onmy.io and we will delete the account.
11. Where your data lives
OnMy's servers are in the United States. If you use OnMy from another country, your information is transferred to and processed in the United States, where privacy laws may differ from yours. We protect it as described in this policy wherever it is.
12. Changes to this policy
We may update this policy. If a change matters, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.
13. Contact
Lx Scaling LLC
12 North Taylor Ave, Apt 31
Norwalk, CT 06854, USA
support@onmy.io
OnMy Privacy Policy
Effective date: November 1, 2026
OnMy is made by Lx Scaling LLC, a Connecticut limited liability company ("OnMy", "we", "us"). This policy explains what we collect when you use the OnMy iOS app, its iMessage extension and onmy.io (the "Service"), why, who sees it and what you can do about it.
The short version: we collect what we need to run OnMy, we show your proofs only to the people you commit with and to the OnMy team when Pu reviews them, we do not sell your data, we do not show ads, and we do not track you across other apps or websites.
1. What we collect
Account. Your email address (or the private relay address Apple creates if you use Sign in with Apple with Hide My Email), the name and username you choose, your profile photo and bio if you add them, and your confirmation that you are 18 or older. With Sign in with Apple we also receive a user identifier from Apple. We do not store your date of birth. We also keep an identifier for your device, and a mark from Apple's DeviceCheck, so we can enforce blocks, abuse limits and the free uses of Pu per device.
Your content. The photos and videos you send as proof (for a video, we also keep three frames from it), their captions, the titles, descriptions and stakes of your commits, your messages to other users where messaging is available, and your reports.
Location. Only when a commit requires a location and you allow it. When you take a proof, we read your device's precise location at that moment and store it with the proof, together with its accuracy and whether the device reported it as simulated. The people reviewing that proof see the place where it was taken (a place or street name, the city and a map pin), not your coordinates as text. If you turn off precise location, the proof is sent and marked as having an approximate location. We never read your location in the background or outside of taking a proof.
Device and usage. A push notification token, your device model, iOS version and app version, your user ID, and server logs with your IP address and timestamps of requests. We do not use third-party analytics or advertising SDKs.
Purchases. If you subscribe to OnMy Pro, Apple tells us your subscription status (active, in trial, expired, refunded) and a transaction identifier. We never see your card or bank details.
What other people share about you. When a friend dares you, judges you, messages you or reports you, we receive that content and it may mention you.
Waitlist and website. If you join the waitlist on onmy.io, we keep your email address to tell you when OnMy launches and to offer you early access. You can unsubscribe from any email we send, and we delete waitlist addresses within 90 days after launch. The website itself sets no advertising or tracking cookies.
2. How we use it
- To run OnMy: create commits, send proofs to the right people, keep streaks and points, and show you your history.
- To review proofs and settle disputes when Pu is involved. A member of the OnMy team does this, sometimes helped by automated tools (see section 6).
- To keep OnMy safe: screen dares, stakes, messages and profiles for content that breaks our rules, handle reports, prevent abuse and fraud, and enforce our Terms.
- To notify you: push notifications and emails about your commits, proofs, friends, deadlines and your account. Pu's seasonal news and tips are sent only if you turn them on in Settings.
- To support you when you write to us.
- To bill and manage OnMy Pro through Apple.
- To understand and improve OnMy using aggregated, non-identifying numbers.
- To comply with the law and protect rights and safety.
We do not sell personal information and we do not share it for advertising.
3. Who sees what
The people in your commits. The other player and any judge see your name, username, profile photo, the proofs, captions and stakes in that commit and, when the commit requires it, the place where a proof was taken, shown as a place or street name, the city and a map pin. Your friends see your name, username and photo, and whether a dare between you is running.
The OnMy team. We see content when Pu reviews it, when it is reported, when a dispute is escalated, or when needed for support or safety.
Service providers that process data for us under contract:
- Supabase (database, file storage, authentication and hosting; servers in the United States, us-east-1).
- Resend (sends our emails, such as sign-in codes and receipts).
- Apple (Sign in with Apple, push notifications, App Store purchases and subscription status, and DeviceCheck, which lets us mark a device without identifying you).
- Anthropic (an AI model that screens dares, stakes, messages and profile text for safety; it receives the text only, never your name, email or account).
- OpenAI (a moderation service that screens proof photos, video frames and profile photos for safety; it receives the image only).
Legal and safety. We disclose information when the law requires it, to respond to valid legal process, or to protect the rights, property or safety of OnMy, our users or others. If we find content that appears to show the sexual abuse of a child, we preserve it for up to one year and report it to the National Center for Missing and Exploited Children, as US law requires.
Business changes. If Lx Scaling LLC is involved in a merger, acquisition or sale of assets, your information may be transferred with the business. We will tell you before your data becomes subject to a different privacy policy.
Nothing you post is public unless you share it yourself, for example by posting a card from the app to another service.
4. Push notifications and emails
Push notifications and account emails (sign-in codes, commit updates, subscription notices) are part of the Service. You can turn pushes off in iOS Settings. Optional messages from Pu (seasonal news and tips) are off by default and can be turned on or off in the app's Settings at any time.
5. Location
Location is asked for in the camera, the first time a commit that requires it needs a proof, never during sign-up. If you say no, you can still send the proof and it is marked as sent without a place. You can change the permission at any time in iOS Settings.
6. Automated tools and human review
We use automated tools to screen content for safety and to help the OnMy team review proofs. Decisions that affect your account (a proof rejected by Pu, content removed, an account paused or closed) are made or checked by a person. If you think a decision was wrong, write to support@onmy.io.
7. How long we keep it
- Account and profile data: until you delete your account.
- Proofs, captions and messages: while the commit they belong to is live, and afterwards as part of your history, until you delete your account.
- Location data: with the proof it belongs to.
- Reports and moderation records: up to 2 years after the case closes, so we can handle repeat abuse and legal requests; the text of screened content is kept for 90 days.
- Content under a safety hold: up to one year (see section 3).
- Purchase records: as long as tax and accounting law require.
- Server logs: up to 30 days.
- Backups: deleted data may remain in encrypted backups for up to 30 days before it is overwritten.
Deleting your account. Settings → Delete account. This ends your running commits with no winner, withdraws your pending dares, offers and judge invitations, closes any stake still open with you, deletes your proofs, photos and profile, frees your username and removes your sign-in. It takes effect at once and cannot be undone. Other people keep their own records, where you appear as "Deleted account" with no photo; your messages in their chats stay under that name. Records we must keep by law, reports and content under a safety hold may remain. We also keep the device identifier that was attached to the account, with no link back to you, so that deleting an account cannot be used to get around blocks, limits and the free uses of Pu. You can also email support@onmy.io to ask for deletion.
8. Your choices and rights
- See and fix your data. Most of it is visible and editable in the app. Email us for a copy of the rest.
- Delete. In the app, or by email.
- Notifications. iOS Settings for pushes; the app's Settings for Pu's news.
- Location. iOS Settings.
- Blocking and reporting. In the app, on any profile, dare, proof or message.
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or limit some processing, and to not be discriminated against for using these rights. Residents of California, Connecticut and other US states with privacy laws, of Peru, and of the European Economic Area, the United Kingdom and Switzerland can exercise these rights by emailing support@onmy.io. We do not sell or share personal information for cross-context behavioral advertising, and we do not respond differently to "Do Not Track" signals because we do not track you across other services. If you are in the EEA or UK, our legal bases are performance of our contract with you, our legitimate interests in running a safe service, your consent where we ask for it (location, Pu's news) and legal obligations; you can also complain to your local data protection authority.
9. Security
Data is encrypted in transit and at rest, access inside the company is limited to what the job needs, and proof files are served through time-limited links. No system is perfectly secure, so please keep your Apple ID, your email account and your phone protected and tell us right away at support@onmy.io if you think your account was accessed without permission.
10. Children
OnMy is only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a user is under 18, email support@onmy.io and we will delete the account.
11. Where your data lives
OnMy's servers are in the United States. If you use OnMy from another country, your information is transferred to and processed in the United States, where privacy laws may differ from yours. We protect it as described in this policy wherever it is.
12. Changes to this policy
We may update this policy. If a change matters, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.
13. Contact
Lx Scaling LLC
12 North Taylor Ave, Apt 31
Norwalk, CT 06854, USA
support@onmy.io