Privacy Policy

Effective Date: September 14, 2026

Only Real LLC ("OnlyReal," "we," "our," or "us") builds tools for authentic, verifiable participation: photos and videos whose origin can be checked, and a community built on one person, one account.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, our mobile applications, our web application, or otherwise interact with OnlyReal services.

1. Scope of This Policy and Our Apps

This Privacy Policy applies to:

  • the OnlyReal website (www.only-real.app), including its waitlist and contact forms

  • OnlyReal Photo & Video Capture, our mobile app for iOS and Android (the "Capture app")

  • the OnlyReal platform app, our full mobile and web application, currently in limited early access and not generally available (the "Platform app")

  • the OnlyReal web application at app.only-real.app, including its public pages for verification, support, community guidelines, and account deletion

  • phone and identity verification processes

  • community participation features, where available

  • subscription, marketplace, or payment functionality, where available

Some sections apply only to one app. Where that is the case, the section says so. If a section names neither app, it applies to everything we operate.

What it does. Capture app: Captures photos and videos with tamper-evident provenance, keeps them in your private DarkRoom, prepares stamped copies for sharing on other platforms, and lets anyone holding a copy verify it. Platform app: Everything the Capture app does, plus identity-verified community participation.

Account sign-up. Capture app: Username, password, name, date of birth, email, phone. Platform app: The same, plus completion of an identity profile before identity verification.

Verification. Capture app: Email and phone verification only. No government ID is ever requested. Platform app: Email, phone, and identity verification (government ID, liveness, residential address).

Location. Capture app: Optional, only while using the app, to attach a graded location to a capture. Platform app: The same, plus location-aware community features.

Contacts. Capture app: Never requested. Platform app: Optional, processed on your device (§2.G).

Photo library. Capture app: Only to save a capture you choose to keep. Never read. Platform app: May be read when you choose to upload a photo or video.

Advertising. Capture app: Promotional content from OnlyReal and selected advertisers, served by us. No advertising networks, no ad-tracking identifiers. Platform app: Described in §2.L before it is offered.

Notifications. Capture app: None from our servers. Device-local reminders only. Platform app: Push notifications may be offered.

Payments. Capture app: None. Platform app: May be offered.

Availability. Capture app: App Store and Google Play. Platform app: Limited early access.

One account works in both apps. An account created in the Capture app can open the Platform app, which will ask you to complete the additional steps it requires before its features are available.

By using OnlyReal services, you agree to the practices described in this policy.

2. Information We Collect

OnlyReal collects information necessary to operate its services, to make captured media verifiable, to maintain a trusted environment, and to keep the services secure. Information may be collected directly from you, automatically through your use of the services, or through authorized service providers.

A. Information You Provide (both apps)

When you create an account you provide:

  • a username, which is permanent

  • a password, stored only in protected, hashed form

  • your first and last name

  • your date of birth, used to confirm eligibility (§9) and, in the Platform app, to match your identity document

  • your email address

  • your mobile phone number

  • your acceptance of the Terms of Service and this Privacy Policy, which we log with the date, the app it was given in, and the version of the documents accepted

Platform app only. Before identity verification, the Platform app also collects your residential address, verified against a mapping service, and may collect profile information you choose to add, such as a profile picture, and additional email addresses you choose to link to your account. The Capture app does not collect an address, a profile picture, or additional email addresses.

You may also provide information through support requests, contact forms, appeals, reports, and any content you choose to submit.

B. Account Authentication and Security Data (both apps)

To keep your account secure and to protect the integrity of the services, we collect:

  • email and phone verification status and timestamps

  • login attempts and session activity

  • device identifiers and device-bound keys enrolled when you first capture on a device

  • device integrity signals, meaning the results of Apple App Attest, Google Play Integrity, and Android key attestation checks, which confirm that a capture came from a genuine, unmodified copy of our app on a genuine device

  • IP address signals

  • session tokens and security credentials

  • account recovery information

Biometric sign-in. Where offered, the apps can unlock quick sign-in with Face ID, Touch ID, or your Android device's fingerprint or face unlock. The biometric check is performed entirely by your device's operating system. OnlyReal never receives, stores, or has access to your fingerprint, face geometry, or any other biometric data; the app only learns that your device reported a successful unlock.

C. Phone Verification (both apps) and Identity Verification (Platform app only)

Phone verification, both apps. Every account verifies a mobile phone number through a regulated third-party verification provider, which sends a one-time code by SMS on our behalf. One verified phone number can belong to only one account. See §12 for our SMS practices.

Identity verification, Platform app only. The Platform app is built around verified identity. Before its community features are available, it requires identity verification through a regulated third-party verification provider integrated into the app. Verification may include:

  • Know Your Customer (KYC) identity verification

  • government identification verification

  • biometric liveness or identity confirmation

  • address verification

  • Anti-Money Laundering (AML), sanctions, or fraud screening

The provider performs these checks under its own compliance framework. OnlyReal receives limited verification signals: verification status and timestamps; the name and date of birth read from your document, which we compare with what you entered and use to prevent duplicate accounts; identity confidence indicators; and fraud or risk signals. Where a name on the document does not match the account, verification is held for review by a person.

OnlyReal does not store full government identification documents or raw biometric images, except where temporary processing is necessary to complete a verification workflow. Verification data is retained only as long as necessary to support platform integrity and applicable compliance obligations.

Business accounts (Platform app, where offered). A business or organization registering on the Platform app may be asked to verify the business and its authorized representative through a third-party verification provider.

The Capture app never asks for a government ID. If you later open the Platform app, it will ask for identity verification at that time.

D. Captured Media and Provenance Data (both apps)

The core of both apps is capture with provenance: a record that a photo or video was taken with our camera, when, and, if you allow it, where, together with cryptographic evidence that the file has not been changed since.

When you capture a photo or video in the app, we collect and store:

  • the photo or video itself, saved first on your device and then uploaded to our cloud storage, where it appears in your private DarkRoom

  • the time of capture, the app version, the platform (iOS or Android), and a device integrity attestation for the capture session

  • location, only if you allow it and only while you are using the app. We record the coordinates and their accuracy at the moment of capture and grade the result: A (verified, within 100 m), B (approximate, within 200 m), or C (no location recorded). If you decline location permission, capture still works and the capture is graded C. We detect and record when a device reports a simulated ("mock") location; such captures are graded C.

  • cryptographic hashes and perceptual fingerprints of the file, computed on your device and on our servers, used to detect later modification and to recognize copies

  • a short reference code assigned to each capture, a signed content-provenance manifest (C2PA) for the original, and, where enabled, a cryptographic seal produced on your device

  • the choices you make about a capture: whether it stays private, which stamped copies you prepare, where you send them, any place you attach, and whether you remove it from your DarkRoom

Stamped copies and External Sharing. When you prepare a capture for sharing outside OnlyReal, we create a stamped copy that carries a visible provenance badge, the verification address, and the reference code. The badge also shows whether the account that produced the capture was identity-verified (Platform app) or phone-verified (Capture app). Sending that copy to another platform, for example through your device's share sheet, is an action you initiate; once sent, the receiving platform's own terms and privacy practices apply to the copy.

Public verification. Anyone holding a copy can enter its reference code at app.only-real.app/verify. Verification shows the authoritative original only to viewers who are already entitled to see it, and shows nothing at all, not even that a code exists, to anyone else. When a capture is verifiable, the page may show the name of the member who produced it, taken from the identity-verified name where one exists. By default your name is withheld and the page states that the member chose to remain anonymous; both apps let you change this in Settings.

Retention of originals. When you remove a capture from your DarkRoom, it leaves your library. Because copies may already be in circulation, the original is retained so that those copies remain verifiable. Originals are removed when your account is deleted or when we remove content under our policies (§7).

Photo library. Both apps can save a capture to your device's photo library when you choose to. The Capture app never reads your photo library and never uploads existing photos or videos from your device. The Platform app reads your photo library only when you choose to upload from it, and media uploaded that way is marked as uploaded rather than captured and cannot be stamped.

Local copies. Each app keeps a copy of a capture on your device until it has uploaded, and keeps it if the upload is refused (for example, a video over the size limit). Those copies live only on your device.

E. Media Safety Scanning (both apps)

Every photo and video uploaded to OnlyReal is scanned automatically before it becomes available in your DarkRoom. Scanning includes automated image analysis by cloud vision services and, where a hash-matching service is available to us, matching against databases of known child sexual abuse material. Items an automated system flags are held, unchanged, for review by a person; a person, not the automated system, makes the decision, except for a confirmed match against known child sexual abuse material, which is removed and reported automatically (see our Child Safety & Anti-Exploitation Policy at www.only-real.app/csae). We keep records of scan results, review decisions, and the enforcement history of an account.

F. Text Moderation and Translation (Platform app)

Text you submit on the Platform app, including posts, comments, captions, reviews, and direct messages, is checked by automated systems before or as it is posted. Direct messages are scanned for clearly violating content at the moment you send them; a message that is blocked is not delivered. While you type, the app may show a non-binding "are you sure?" prompt when a draft appears hostile; that check is stateless and stores nothing. Public content may be machine-translated for other members at their request; translations are produced by a cloud translation service and cached.

G. Contacts (Platform app only, optional)

The Platform app can help you find people you know. If you choose to allow it, your contacts are read on your device to build an invite list. For matching, phone numbers are hashed on your device and only the hashed values are sent to us; your contact list, names, phone numbers, and emails are never uploaded or stored by OnlyReal. The Capture app never requests access to your contacts.

H. Private Notes (Platform app, where offered)

The Platform app may offer a private, password-protected notes feature. Its contents are encrypted on your device with a key derived from a password only you know; OnlyReal stores only the encrypted data and cannot read it. If you lose that password, the contents cannot be recovered by OnlyReal; a recovery link lets you set a new password, and previously written entries stay unreadable. We may email you a security alert after repeated failed unlock attempts.

I. Payment, Subscription, and Payout Information (Platform app only, where offered)

If the Platform app offers paid features, subscriptions, or in-app purchases, payments are processed by the app store you purchase through (Apple App Store or Google Play) or by a third-party payment provider. We receive purchase and entitlement records (product, status, dates) but not full payment credentials. If the Platform app offers payments to members, for example for participating in a sponsored program, payouts are made through a third-party payment provider that may collect identity, banking, and tax information under its own terms. The Capture app contains no purchases and makes no payments.

J. Device, Technical, and Diagnostic Information (both apps)

When you use the services we automatically collect IP address, browser or device type, operating system and version, app version, usage and interaction logs, and general location derived from IP address. Both apps send crash and error reports to a diagnostics service; those reports are configured not to include personal information, request headers, or your IP address, and include the device model, operating system, app version, and app state at the time of the error. These signals help maintain stability, detect abuse, and improve performance. Neither app contains third-party analytics or advertising software.

K. Platform Interaction Data (Platform app)

The Platform app may collect information about how you use its features, such as posts and replies, votes and responses to community questions, reviews and check-ins at places, engagement with other members' content, moderation reports you make, and interaction signals related to platform integrity. Some Platform-app features let you share a QR code that links to your profile or a capture; you control whether that code is enabled.

L. Advertising and Promotional Content

Capture app. The Capture app's home screen shows promotional content from OnlyReal and, from time to time, from selected advertisers. This content is chosen and served by OnlyReal from our own systems. The Capture app contains no third-party advertising software, uses no advertising identifiers, builds no advertising profile of you, and shares nothing about you with advertisers. Where the app offers a setting to turn advertisements off, it is in Settings.

Platform app. Any advertising in the Platform app will be described here before it is offered.

M. Notifications and Emails

The Capture app sends no push notifications. It may show a device-local reminder, for example to keep the app open while an upload finishes; these are generated on your device and involve no data sent to us. The Platform app may offer push notifications, delivered through Apple and Google push services using a device token we store; you control them in your device settings. Both apps send transactional emails only: verification codes, security notices, account-deletion confirmations, enforcement notices, and replies to your requests. We do not send marketing email.

N. Website Cookies

The website at www.only-real.app is hosted by a website platform that sets cookies necessary for the site to function and, where enabled, for basic visitor analytics. The apps do not use cookies; they keep a small number of preferences (for example, a dismissed tip) on your device only.

3. How We Use Information

OnlyReal uses collected information to:

  • operate and maintain the services

  • create and manage your account, and confirm your eligibility

  • verify email addresses and phone numbers and, in the Platform app, identity

  • capture, store, and display your photos and videos, and make them verifiable

  • attach provenance, including time, device, and, if you allow it, graded location, to captures

  • prepare stamped copies at your request, and let holders of a copy verify it

  • scan uploaded media and submitted text for safety, and review items that are flagged

  • prevent fraud, abuse, tampering, and duplicate accounts

  • maintain a trusted community environment, where community features are offered

  • process purchases, subscriptions, or payouts, where offered

  • show promotional content in the Capture app

  • respond to support requests, reports, and appeals

  • diagnose errors and improve functionality

  • maintain security monitoring and audit logs

  • comply with legal obligations

OnlyReal does not sell personal information.

4. Identity Assurance and Platform Integrity

OnlyReal is designed as a trust-first service that encourages authentic participation and responsible identity practices. To maintain integrity and prevent misuse, we operate systems designed to detect:

  • duplicate or coordinated accounts

  • fraudulent identity behavior

  • automated or abusive activity

  • attempts to bypass verification procedures

  • attempts to tamper with the capture process, including modified apps, rooted or jailbroken devices used to defeat integrity checks, simulated locations, or altered media presented as an original

These systems rely on security signals such as device identifiers and keys, device integrity attestations, authentication events, capture metadata, media hashes, interaction patterns, and verification status. When necessary to protect the services or the community, we may request verification, decline to stamp or verify a capture, restrict account features, or suspend or remove accounts that violate our policies.

5. Artificial Intelligence and Automated Processing

We use automated systems, including artificial-intelligence models hosted by our cloud provider, to support the services. They may assist with:

  • scanning uploaded media for prohibited content (§2.E)

  • checking text for prohibited or hostile content and translating public content (§2.F)

  • detecting duplicate or suspicious accounts, abuse, and tampering

  • analyzing aggregated usage trends

  • supporting moderation review and, in the Platform app, evaluating responses to sponsored programs

Automated systems operate as support tools. Except for confirmed matches against known child sexual abuse material and blocked direct messages, they do not remove your content or restrict your account without human review. Appeals are an exception: when you appeal an enforcement decision through the link in the notice we send, the appeal is re-reviewed by an automated vision model and the result is applied and emailed to you automatically. You may request review by a person at any time by emailing contact@only-real.app.

6. Data Sharing

OnlyReal shares limited information with service providers that process it on our behalf under contract, only as needed to operate the services. Categories include:

  • cloud infrastructure, database, and storage providers

  • phone and identity verification providers

  • SMS and email delivery providers

  • media safety services (cloud image analysis and, where available, hash matching)

  • artificial-intelligence and translation services hosted by our cloud provider

  • crash reporting and diagnostics services

  • map, place, and address-verification services (Platform app)

  • app-store billing and payment providers (Platform app, where offered)

  • authentication, security, and system-integrity services, including Apple and Google device-integrity services

These providers are required to process information only for authorized purposes and to maintain appropriate security protections. Our servers and service providers are located in the United States, and information is processed there.

Information leaves OnlyReal in three other ways, each at your direction or as required by law:

  • External Sharing. When you send a stamped copy to another platform, that platform receives the copy and any provenance embedded in it.

  • Public verification. When someone verifies a copy you produced, they may see the original and, unless you have chosen to remain anonymous (the default), your name.

  • Legal process and child safety. We may disclose information when required by law, regulation, or legal process, and we report confirmed child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) as required.

OnlyReal does not sell or rent personal data and does not share personal data with advertisers.

7. Data Retention

OnlyReal retains personal information only as long as necessary to operate and improve the services, support security and fraud prevention, keep captures verifiable, comply with legal obligations, and maintain audit continuity where required.

  • Captures. Originals are retained while your account exists so that copies you have shared remain verifiable, including after you remove a capture from your DarkRoom. Your DarkRoom has a capacity shown in the app, and each upload is subject to a file-size limit stated in the app.

  • Verification signals and security logs may be retained for integrity and compliance purposes.

  • Media safety and enforcement records, including scan results, review decisions, strikes, and appeals, are retained for integrity and legal purposes.

  • Account deletion. You can delete your account from Settings in either app. If you cannot sign in, submit a request at app.only-real.app/delete-account; staff action it through the same process. Deletion is scheduled with a seven-day grace period during which you can cancel it, after which your account, profile, and captures are removed and your stored media is deleted. Where a capture was removed under our policies, a record of its reference code may be kept so that verification can truthfully report that it was removed.

8. Security

OnlyReal implements administrative, technical, and organizational safeguards designed to protect personal information, including encrypted transmission, access controls, segmented storage, device-bound keys and attestation, cryptographic integrity checks on captured media, authentication protections, and security monitoring and audit logging. No system can guarantee absolute security.

9. Children's Privacy

OnlyReal services are not intended for anyone under 13, and we do not knowingly collect personal information from children under 13. Both apps ask for your date of birth at sign-up and refuse accounts for anyone under 13. Anyone under 18 must have permission from a parent or guardian to use the services. If we learn that we have collected personal information from a child under 13, we will delete it. Parents or guardians may contact us at contact@only-real.app.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to access the personal information associated with your account, request correction of inaccurate information, request deletion of personal information, and withdraw consent where processing relies on consent. Account deletion is available in the app and at app.only-real.app/delete-account (§7). Other requests may be submitted to contact@only-real.app. We respond to verified requests in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy as the services evolve, including when the Platform app becomes generally available. When updates occur, the Effective Date at the top of this policy will be revised, and the apps may ask you to accept the updated policy. Continued use after an update indicates acceptance of the revised policy.

12. SMS Communications and Phone Number Usage

OnlyReal collects and uses your mobile phone number to verify your account and for security-related communications, in both the Capture app and the Platform app.

If you provide your mobile number in an OnlyReal app, you may receive one-time SMS messages in connection with actions you initiate, including phone number verification during account registration, login or identity verification for account security, and identity confirmation before sensitive account actions such as changing your phone number or deleting your account. Codes may be sent by OnlyReal or by a verification provider acting on our behalf.

SMS messages are sent only after you directly initiate a request within an OnlyReal app. OnlyReal uses SMS strictly for transactional authentication and account security. SMS is not used for marketing, promotions, offers, lead generation, general notifications, or general engagement.

Message frequency varies with your activity. Message and data rates may apply. You may opt out at any time by replying STOP to any message; for assistance, reply HELP. OnlyReal does not sell or share your mobile phone number with third parties for their marketing purposes.

13. Contact Information

Only Real LLC Support: support@only-real.app Privacy and legal: contact@only-real.app Child safety: safety@only-real.app Web: https://www.only-real.app ONLY REAL LLC • Tampa, FL, USA • Florida Registration #: L2600002079

Only Real LLC
Email: contact@only-real.app
Webpage: https://www.only-real.app



ONLY REAL LLC • Tampa, FL, USA • Florida Registration #: L2600002079

Get Started