Last updated: October 27, 2026
Effective from: May 23, 2026
OneHook ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains our information practices, what data we collect, how we use it, and your rights regarding your personal information.
We operate under the principle of data minimization: we collect only what is necessary to provide our services, and we protect your data with industry-leading security measures.
Creating your profile, matching with other users, facilitating communication
Fraud detection, preventing unauthorized access, protecting user safety
Anonymous analytics, feature improvement, bug fixes (no personal data linked)
Important account notifications, policy updates, security alerts (opt-out available for non-critical)
Date of birth. You give it once, at sign-up. We use it to show your age (calculated fresh every time, never stored as a separate number), to keep OneHook adults-only (18+), and for age preferences in matching. Other members see your age, never your date of birth. You cannot change it yourself; if it is wrong, our support team can correct it after checking proof such as a government ID, at most twice per account, and each correction is recorded with the reason.
Birth time, time zone and birthplace (optional). If you add them, together with your date of birth they are used for one purpose: estimating traditional compatibility between members (for example Kundali, Western natal charts, Bazi and Tzolk'in). The result slightly changes the order in which profiles are suggested to you and to others; it never hides anyone and is never shown as a score. You can add, change or remove them at any time in your profile.
How it is handled. We store the coordinates of your birthplace rounded to about 1 km, plus the place name you picked. Birth details are visible only to you. They are not shared with other members, not sent to our AI recommendation service, and removed from our analytics, which keep only your age at the time of an event. From these details we compute a short coded summary (a few bytes) that is used only for matching. Birthplace search is answered by Amazon Location Service; what you type is not stored.
By entering your date of birth you consent to these uses; by adding birth time or place you consent to their use for traditional compatibility. You can withdraw that consent by removing the optional details from your profile.
Marketing to third parties, selling to data brokers, algorithmic profiling, behavioral manipulation. The one exception to “algorithmic profiling” is Admissions Assist, which only runs with your explicit consent when you apply with a video (see section 4).
OneHook is invite-only. If you don’t have an invite, you can apply by recording a short video (2–3 minutes) in the app. This section explains what we collect when you apply, who sees it, how Admissions Assist uses it, and how long we keep it.
No face recognition, no facial or appearance analysis, and no emotion detection. We never sell or share your application with third parties.
We run a few automated checks to help our reviewers. They only mark an application for a closer look by a person: they never approve or reject anyone, and their results are not shown to you.
The results are kept with your application for the admissions team only, are deleted with it, and are never used to train Admissions Assist. If a check cannot run, your application simply goes to a person to review.
Only authorised members of OneHook’s admissions team. Your phone number is masked while they review and is shown only when needed, and every time it is shown is logged. Reviewer notes are never sent to you; if you are not approved, we tell you the general reason category.
Videos are transcribed by Amazon Transcribe. Where it supports this (including English as spoken in India), names, phone numbers, addresses and similar personal details are removed, and only the redacted transcript is kept. In languages where removal is not available (for example Hindi), the transcript is visible only to the admissions team and is never used to train Admissions Assist.
Admissions Assist is a model that learns from our team’s past review decisions to help reviewers work through applications. It is trained on transcript text, the quality measurements above, reviewers’ decisions, and whether an invite was later used. If you join, it also learns from simple conduct outcomes from your first 90 days: whether several members blocked you and whether a report about you was upheld by our safety team (see section 5). It never sees the content of reports or chats. It is not trained on the images in your video. A person on our team makes every decision; Admissions Assist does not approve or reject anyone on its own.
Agreeing to the use of your video and transcript for Admissions Assist is required to apply with a video. You agree by ticking the consent box in the app, which is never pre-ticked; recording only unlocks after you tick it. If you don’t want to agree, you can join OneHook with an invite from a member instead.
If you are approved, we text you an invite code, valid for 14 days. If you are not approved, you can apply again after 6 months, and the app shows you the date.
You can withdraw your application in the app at any time. To stop your video being used for Admissions Assist, tap “Stop using my video for Admissions Assist” on your application screen: we exclude your data from all future training and delete the training records made from your application straight away. Your application itself stays as it is. You can also email privacy@onehook.club with the phone number you applied with, and we will do the same within 30 days. A model trained before your request is not changed retroactively, but your data is not used in any later training.
Applications, transcripts and training data are encrypted and stored on Amazon Web Services in India (Mumbai region). Transcription, the automated video content check, SMS and model training also run on AWS in that region.
You can report another member from a chat or their profile. This section explains what a report contains, the optional chat copy you can attach, who sees it, what can happen as a result, and how long we keep it.
The member you reported, the reason you chose, any description you write, the conversation it relates to, the time, and whether you also blocked them. A report is reviewed by people on our safety team.
Chats on OneHook are end-to-end encrypted, so we cannot read them. When you report someone from a chat, you can choose to share a copy with our safety team by ticking a box that is never pre-ticked; we only receive it if you tick it, and your report is handled the same way if you don’t. Your device decrypts and sends only the last 200 messages or the last 30 days of that one conversation, whichever is smaller: each message’s text, time and whether you or the other member sent it. Photos, videos, voice notes and files are not included. You can preview exactly what will be sent before you submit. The copy is encrypted in transit and in storage, and a fingerprint of it lets us detect any change.
Only authorised members of our safety team. Reading an attached chat requires a separate permission from handling reports, and every time someone opens one it is recorded. We do not tell the reported member who reported them or that a chat was shared.
We use automated scoring to decide which reports to look at first, based on the seriousness of the reason, how many different members reported or blocked the same person and how recently, how new the reported account is, and how reliable the reporter’s earlier reports proved to be. For that last point we keep a pseudonymous reliability measure for each reporter, which is deleted a year after it last changed. This only sets the order of the queue. A person on our team makes every decision.
Depending on what we find, we may dismiss the report, warn the member, limit their account, suspend it for a period, or ban it. A ban needs the agreement of two members of our team. A member whose account is limited, suspended or banned can appeal, and the appeal is decided by someone who did not take the original decision. We record each account’s standing (active, limited, suspended or banned) and use it to control signing in and who the account is shown to.
If you tell us you are worried someone may harm themselves, we treat it as a request for support, not punishment, and show you support resources such as Tele-MANAS (14416, India, 24x7). Reports that someone may be under 18 go straight to our safety lead, and you cannot attach a chat to them.
OneHook is for adults aged 18 and over. We have zero tolerance for child sexual abuse material, the grooming or sexual exploitation of a child, and any attempt to contact a minor for sexual purposes. If we become aware of it, whether from a report, our own review or a request from the authorities:
Your chats are end-to-end encrypted, so we cannot see their content unless you choose to share it. If you come across such material, do not screenshot, save, forward or download it, because that can itself be a crime. Report the member in the app instead. You can also report directly at cybercrime.gov.in or by calling 1930.
We process reports and attached chats to keep members safe and to meet our legal obligations. You can ask for the information we hold about you, but we will not reveal who reported you or share an attached chat where that could put the person who reported you at risk. We may share information with law enforcement where the law requires it or to prevent imminent harm, and we always report suspected child sexual abuse or exploitation (see above).
Messages between matched users are end-to-end encrypted on your device before they are sent. The encryption keys are generated and held on the participants’ devices — never on our servers in a form we can read — so OneHook relays only ciphertext and cannot decrypt or read your conversations. (Transport security such as TLS 1.3 is covered under “Data in Transit” below; it protects the connection, and is separate from the end-to-end layer above.)
All data stored in our databases is encrypted using AES-256 encryption. Profile photos are encrypted and separated from personally identifiable information.
All communication between your device and our servers uses HTTPS/SSL protocols. We use PINNING to prevent man-in-the-middle attacks.
Only authorized personnel can access user data, with multi-factor authentication required. Access is logged and audited.
We conduct regular penetration testing and security audits. Vulnerabilities are addressed immediately.
❌ OneHook Does NOT:
We may share data only in these limited circumstances:
OneHook operates primarily in India. If you are outside India, your data will be transferred to and stored inside India. By using OneHook, you consent to this transfer. Where required by law (e.g., GDPR), we implement appropriate safeguards including:
Data retained while your account is active
Data deleted within 30 days of account deletion (except where required by law)
Kept while your account is active and deleted with it, together with the matching summary computed from them and any record of a support correction. Removing your birth time or place deletes them and their summary straight away.
Application videos and transcripts are deleted 90 days after a decision, or 30 days after an approved applicant uses their invite (see section 4)
A chat attached to a report is deleted 180 days after the case is closed, including when the reporter has deleted their account (see section 5)
Information related to suspected child sexual abuse or exploitation is preserved for at least 180 days, or longer if a court or authorised agency requires it (see section 5)
Backups may retain data for up to 90 days for disaster recovery purposes
Data may be retained longer if required by legal proceedings or regulatory requirements
You have the following rights regarding your personal data:
To exercise these rights, contact us at privacy@onehook.club. We will respond within 30 days.
OneHook complies with GDPR requirements for EU users, including lawful basis for processing, data subject rights, and DPA requirements.
For California residents, we provide rights to know, delete, and opt-out of data sales (which we do not do anyway).
While OneHook does not handle health data, we implement similar security protocols for all data.
Our infrastructure is regularly audited for security, availability, and confidentiality controls.
OneHook is not intended for users under 18. We do not knowingly collect data from minors.
In the event of a data breach, we will:
We use limited third-party services only where necessary. All processors sign Data Processing Agreements (DPAs) ensuring the same level of data protection:
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of OneHook after changes constitutes acceptance of the updated policy.
© 2026 OneHook. Your privacy is our priority. Last updated October 27, 2026.
