Last updated 1 September 2026.

ONTI is a shared timeline planner. This page describes what we collect, why, and what rights you have over it. We collect only what the service needs to work.

ONTI is currently operated on a pre-incorporation basis while formal company registration is in progress — this page will be updated with the registered company name, number, and address once that's complete. For any privacy question or request, use Contact Us.

• Account details — your email address and, optionally, a display name and password (or Google sign-in). Used to sign you in and identify which timelines you own or belong to.
• Timeline content — the days, events, people, places, notes, and images you create. Stored so your timeline works, renders, and can be shared with people you choose to share it with.
• Billing information — if you purchase Standard or Professional, our payment processor Paddle collects your payment details directly (we never see or store your card number) and shares back a customer/subscription reference so we know which plan your account is on.
• Basic technical data — things like sign-in timestamps and error logs, generated automatically by our infrastructure providers to keep the service running securely.

We don't currently run analytics or third-party advertising trackers on ONTI.

• To provide the service you've asked for — creating, storing, and displaying your timelines (performance of a contract).
• To process payments and manage subscriptions for paid plans (performance of a contract).
• To send transactional emails you've triggered — sign-in links, password resets, invitations (performance of a contract / legitimate interest).
• To keep the service secure and prevent abuse (legitimate interest).

We don't use your data for marketing, and we don't sell it to anyone.

We use a small number of infrastructure providers to run ONTI, each acting as a processor of your data on our behalf:

• Supabase — our database, authentication, and file storage provider.
• Paddle — our payment processor and Merchant of Record for Standard/Professional purchases. Paddle acts as an independent controller for the billing data it collects directly from you — see Paddle's Privacy Policy.
• Resend — sends transactional emails (sign-in links, password resets) on our behalf.
• Cloudflare — stores uploaded cover images.

We don't share your data with anyone else, except where required by law.

ONTI uses a small number of strictly-necessary cookies to keep you signed in — these aren't used for tracking or advertising and can't be disabled without breaking sign-in. We don't use analytics or advertising cookies.

We keep your account and timeline data for as long as your account exists. If you delete your account (Manage Account → Delete my account), your account and every timeline you own — and everything on it — is permanently deleted. This can't be undone.

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data (you can update your name and email directly in Manage Account);
• delete your data (Manage Account → Delete my account, or contact us);
• restrict or object to certain processing;
• receive a copy of your data in a portable format;
• complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you think we've handled your data incorrectly.

To exercise any of these, use Contact Us.

Our infrastructure providers may process data outside the UK/EEA. Where they do, they provide appropriate safeguards (such as Standard Contractual Clauses) as required by UK GDPR.

ONTI isn't directed at children under 16, and we don't knowingly collect data from them.

Access to your data is scoped to your account and the timelines you belong to, enforced at the database level, and data is encrypted in transit. No system is perfectly secure, but we take reasonable steps to protect your information.

We may update this policy as ONTI evolves. If we make a material change, we'll update the date at the top of this page.

Questions about your data? See Contact Us.