Privacy notice

Beta version · last updated: October 27, 2026

1. Who is responsible for your data

Aleister, located in Mexico City, Mexico, is the controller of personal data on 1in1m (1in1m.app). For any privacy matter, write to hola@1in1m.app. This notice follows Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and the EU GDPR. The Spanish version prevails if the two differ.

2. What data we use

• Questionnaire answers: gender, age range, country, sexual orientation (optional), education, work mode, pets, wake-up time and a personal trait. They're processed in your browser to calculate your result.
• Your combination's counter: when you finish, your browser turns the full combination of answers into a code (hash) and adds 1 to that code's counter. We don't store individual answers or link them to your session.
• Anonymous session: a random Firebase Authentication identifier, with no email or name, that keeps the same person from being counted twice. Next to it we only store your badges, your language and the date.
• Alias: the name or nickname you type lives only on your device and on the card you create. We don't send or store it.
• Usage statistics: daily totals of how many visits opened the app, started, reached each question, finished, shared or sent feedback. They contain no identifiers, answers or device data.
• Technical data: when you visit, our infrastructure provider (Google) receives your IP address and browser data to serve the pages and protect them from abuse. We don't use them to identify you.

3. Sensitive data

Sexual orientation is sensitive personal data. That's why the question is optional, includes "Prefer not to say", isn't asked to people aged 13 to 17, and is only answered after you tick the consent box on "Before you start". That box is your express consent to use it in your estimate and in your combination's anonymous counter. It is never stored with your session and, if fewer than 5 people share your combination, we show "fewer than 5" instead of the exact number.

4. Why we use it

Necessary purposes: calculating how many people in the world, in your country and in the community share your profile; awarding badges; creating your share card; counting each person once and protecting the service from abuse.

Additional purpose: using the daily visit totals to understand where people stop and improve the questionnaire. Since they identify no one, they can't be separated by person.

We don't sell or rent data, we don't build advertising profiles and, for now, we show no ads.

5. Minimum age

1in1m is for people 13 and older. If someone says they're under 13, they can't continue and we don't store their answers. People aged 13 to 17 aren't asked about sexual orientation and, once there are ads, won't see personalized ads.

6. Who we share it with

We use Google Firebase (Google LLC) to host the site, the database and the anonymous session. Google acts as our processor, handling data on our behalf on servers in the United States. The landing page also loads fonts from Google Fonts, which receives your IP address. We share data with no one else, unless a competent authority requires it by law.

7. What your browser stores

We use no advertising or analytics cookies. The app keeps your language, your anonymous session token and a flag that you were already counted in your browser's local storage. You can delete them at any time by clearing the site data for 1in1m.app in your browser settings.

8. How long we keep it

Counters, anonymous sessions and daily totals are kept while 1in1m is running. When the beta ends we may reset the counters.

9. Your rights

You can request access to, correction or deletion of your data, object to its use (ARCO rights) or withdraw your consent by writing to hola@1in1m.app with your request and, if you have it, information that helps us find your data. We'll answer within 20 business days. Keep in mind that, because we don't know who you are and your answers aren't linked to your session, we may be unable to locate data that only exists inside an anonymous counter. To stop being identifiable, simply clear the site data in your browser.

If you believe your rights weren't respected, in Mexico you can go to the personal data protection authority (Secretaría Anticorrupción y Buen Gobierno).

10. If you live in the European Union

We process sexual orientation and the answers based on your explicit consent (GDPR articles 6(1)(a) and 9(2)(a)), and the anonymous session and daily statistics based on our legitimate interest in running and protecting the service (article 6(1)(f)). You have the right to access, rectification, erasure, restriction, portability and objection, to withdraw consent at any time and to lodge a complaint with your supervisory authority. Transfers to the United States rely on the safeguards Google provides for its cloud services.

11. Changes to this notice

If we change this notice, we'll publish the new version on this page with its date. If a change affects the use of sensitive data, we'll ask for your consent again in the app.