Privacy Policy
Who we are
One4Future is provided by TheAzWay, the controller of your personal data. Contact us about privacy at info@theazway.com.
What we collect and why
| What | Why | Legal basis (UK GDPR) |
|---|---|---|
| Your account: email address, name, profile photo (optional), time zone | To sign you in, show senders' names to their recipients, and time deliveries | Contract |
| Your messages: videos, voice notes, letters, photos, and capsule titles | To store them and deliver them to the people you choose | Contract |
| People you add: recipients' and trusted people's names, email addresses, birthdays and time zones; your saved contacts | To deliver capsules, time birthday deliveries, and ask trusted people to confirm | Contract with you; our legitimate interest in delivering what you asked, for the people you add |
| Legacy mode: your settings, check-ins, reminders sent, and trusted people's responses; your mobile number if you use phone checks | To run Legacy mode as you set it up | Contract |
| Your acceptance of the Legacy mode terms (version and time) | To record what you agreed to | Legitimate interests |
| Replies: thank-you messages recipients send back | To deliver them to the sender | Contract |
| Security and service records: account and capsule IDs, times, and an audit trail of actions (IDs only, never content). IP addresses may appear in server logs. | To keep One4Future secure, prevent abuse and fix problems | Legitimate interests |
We do not sell your data, show advertising, or use your messages to train anything. Every uploaded file is checked automatically for viruses and malware by Microsoft Defender for Storage.
If someone added you
If you are a recipient or a trusted person, your name, email address (and, if the sender gave it, your birthday and time zone) came from the person who added you. We use them only to deliver their capsules or ask you to confirm, and we email you only for that. You have the rights below even without an account; contact us to use them.
Where your data is kept, and who helps us
- Microsoft Azure hosts One4Future in the UK (UK South, with backups in UK West). Messages are encrypted in storage.
- Microsoft Entra External ID handles sign-in, and holds your email address for that.
- Azure Communication Services sends our emails.
- The web app loads the Roboto font from Google Fonts, so Google receives your IP address when you open it.
These providers act on our instructions under data processing terms. Where a provider may process data outside the UK (for example for support or security), this is covered by UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Your account, messages and contacts: until you delete them or your account.
- If you delete your account, you choose whether capsules still waiting are deleted or still delivered. Capsules already delivered stay available to their recipients for up to 12 months, then are erased.
- Deleted data remains in encrypted backups for up to 35 days (database) or 30 days (files) before it is gone for good.
- Server logs: 90 days. The audit trail is a permanent security record and cannot be edited; it holds IDs and times only, never names, email addresses or content.
- Records of any purchases are kept as long as the law requires for financial records.
Your rights
You have the right to access, correct, delete and receive a copy of your data, to object to or restrict how we use it, and to complain.
- Download your data in the app: Me, then Export my data.
- Delete your account in the app: Me, then Delete my account.
- For anything else, contact us at info@theazway.com. We reply within one month.
- You can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to help first.
Children
Accounts are for people aged 18 and over. Capsules can be addressed to children (for example for their 18th birthday); their details come from the sender and are used only to deliver it.
Changes
If we change this policy in a way that matters to you, we will tell you by email or in the app before it takes effect.