Privacy Policy

Effective September 23, 2026 · OneCut Studios LLC

OneCut Shop ("the app," "the Service") is made by OneCut Studios LLC, a Michigan limited liability company ("we," "us," "our"). This policy describes what data the app collects, why, and how you can control or delete it.

The short version: OneCut Shop is offline-first. Your projects, calculations, photos, and notes live in a database on your own device and are never uploaded anywhere unless a future sync feature you opt into changes that. Signing in, using an AI advisor, or sending feedback each send a small, specific piece of information to a named third party described below — nothing more, and nothing silently.

Who we are

OneCut Studios LLC is the developer and data controller for OneCut Shop. We're a small, independent team based in Michigan, USA.

What we collect

Your projects and shop data. Everything you enter into OneCut Shop's tools — segmented turning designs, cutting board layouts, joinery calculations, cost estimates, notes, shopping lists, tool inventories, and photos you attach — is stored in a SQLite database on your device (in your browser's storage on web, or in the app's local storage on iOS/Android). We do not receive or store this content on our servers. It stays on your device unless you explicitly export or share it yourself.
Account information (optional). OneCut Shop works fully without an account. If you choose to create a cloud account (for a future cross-device sync feature), we store your email address and display name on our servers so we can identify your account. As of this policy's effective date, cloud accounts handle sign-in only — your project data is not synced to our servers yet.
Beta sign-ups on this website (optional). If you ask for the beta on onecutshop.app, we keep what you type — your name and email address, what you make, and why you want it — along with the time, the page you sent it from, and an approximate location: country, and usually region and city, worked out from your internet connection by Cloudflare, who serve this site. That location is not your address, and is often only accurate to the nearest large town. We use it to run the beta and answer you, never to sell or to add you to an unrelated list, and you can have it deleted (see below).
AI advisor questions (optional). If you use one of the AI-assisted advisors (Joinery, Design, Finish, Cost, or Wood), the question or project detail you submit is sent to our AI provider to generate a response, as described below.
Feedback and bug reports (optional). If you submit feedback or a bug report from inside the app, the title, description, your display name and email (if you're signed in), and basic technical context (app version, platform, device user agent) are sent to our internal ticket tracker.
Crash and error reports. The app reports crashes and errors to help us fix bugs. This includes stack traces, device/OS information, and app version, plus performance timings (how long screens and network requests take) from a sample of sessions — not your project content.
Payment information (when billing is available). If you purchase a paid plan or AI credits, payment is handled entirely by Stripe. We never see or store your card number.

How Google sign-in works

If you sign in with Google, Google shares your name and email address with us so we can create and identify your account. We do not request or store your Google profile photo, contacts, calendar, or any other Google data. We never see or store your Google password.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not use data from Google sign-in to serve ads, we do not sell it, and we do not allow humans to read it except as necessary for security, legal compliance, or with your consent.

How AI processing works

OneCut Shop's AI advisors are optional — the app is fully functional without ever using them. When you do use one:

By default, your question and any project details you include are sent to a Cloudflare Worker we operate, which forwards the request to Anthropic (Claude) to generate a response, then returns the answer to your device. The proxy exists so our AI provider credentials never leave our server — Anthropic receives only the text of your request, not your account identity, beyond an anonymous rate-limiting identifier (and, if you're signed into a cloud account, a token used solely to meter your AI credit balance).
If you enter your own Anthropic API key in Settings ("bring your own key"), your request goes directly from your device to Anthropic using your key instead of our proxy. We never see that key or that request.
As of this policy's effective date, OneCut Shop's AI advisors process text only — no photos are sent to the AI provider.
AI responses are generated automatically and can be wrong. Use your own judgment, especially for anything safety-related (structural soundness, wall thickness, dust collection, finishing chemicals).

What we don't do

We do not sell or rent your data.
We show no ads and use no advertising trackers, fingerprinting, or third-party analytics SDKs.
We do not read or scan your project content, and we do not use it to train any AI model.
We do not share your data with anyone except the named processors in this policy, and only for the specific purpose described.

Third parties who process data on our behalf

Supabase — hosts our cloud account database (email, display name, account tier) on servers in the United States. Used only if you create a cloud account.
Anthropic — processes AI advisor requests as described above. Used only if you use an AI advisor.
Stripe — processes payments when you purchase a paid plan or AI credits. Stripe receives your payment details directly; we receive only your subscription/purchase status.
Our self-hosted error-reporting service (a Sentry-protocol-compatible tool we run ourselves, not a third-party SaaS) — receives crash reports, error diagnostics, and sampled performance timings to help us fix bugs. We do not enable session replay or record your screen.
Our shared form service (a Cloudflare Worker we run ourselves) — receives beta sign-ups from this website and stores them, including the approximate location above. To limit abuse it keeps a scrambled (hashed) form of your IP address, never the address itself.
Our internal ticket tracker — receives feedback and bug reports you submit from inside the app, including your email/display name if you're signed in, so a real person can follow up.

Sharing you control

OneCut Shop has no built-in sharing of your project data with other users today — everything is private to your device. If a future feature adds sharing (e.g. a public gallery or project links), it will only activate on actions you take, and this policy will be updated first.

Storage and security

Your project data is stored locally on your device using SQLite (via a WebAssembly database in your browser on web, or native storage on iOS/Android) — we never see it. Cloud account data (email, display name) is stored on Supabase servers in the United States and transmitted over encrypted (TLS) connections. We never store your account password — sign-in is handled by Supabase Auth (email/password or Google OAuth), and Google-based sign-in means we never see your Google password at all.

Payments

Paid plans and AI credit purchases (when available) are processed by Stripe. We receive your subscription status and plan details from Stripe, but never your full card number or other payment credentials.

Data retention and deletion

Your local project data lives on your device for as long as you keep the app installed, and you can delete it at any time by clearing the app's data or uninstalling it — we have no copy to retain. Cloud account data (email, display name, account tier) is retained as long as your account is active. To delete your cloud account and associated data, email info@onecutshop.app and we will process the deletion, aside from minimal records we're required to keep for legal, security, or fraud-prevention purposes.

Children

OneCut Shop is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If this policy changes materially, we'll update the effective date above and, where practical, note the change on our site or in the app.

Contact

OneCut Studios LLC · info@onecutshop.app