One Access

Appearance

Privacy Policy ​

Last updated: July 30, 2026

This Privacy Policy describes how the One Access application (the "App") handles information. One Access is built with privacy as a foundational principle: we do not collect, store, sell, or share any personal information about you. One Access is a client that connects to services you configure — your network traffic goes directly from your device to the Cloudflare edge and on to your own servers, and never passes through us.

1. Summary ​

  • We do not collect personal data.
  • There is no One Access account, and we operate no servers of our own.
  • We do not use analytics, advertising, or tracking SDKs.
  • Your network traffic flows directly from your device to the Cloudflare edge and the hosts you configure — never to us.
  • Your connection settings and sign-in tokens are stored only on your device.

2. Information We Do Not Collect ​

We want to be explicit about what One Access does not do:

  • We do not collect your name, email address, phone number, or any other contact information.
  • We do not collect device identifiers (such as IDFA, IMEI, or MAC address) for tracking purposes.
  • We do not collect location data.
  • We do not collect usage analytics, telemetry, or crash reports.
  • We do not use cookies, web beacons, or similar tracking technologies.
  • We do not receive, store, or have any access to the traffic that passes through your tunnels, or to your Cloudflare Access credentials.

3. Data Stored on Your Device ​

To provide its features, One Access stores data locally on your device, including:

  • Connection settings you enter — hostnames, ports, and .internal DNS names.
  • Cloudflare Access tokens obtained when you sign in, so a connection can stay authenticated.

This data:

  • Is stored solely on your device.
  • Is not transmitted to us or to any third party (beyond the Cloudflare edge you authenticate to, as part of the App's normal function).
  • Remains under your control and can be deleted at any time by removing a connection or uninstalling the App.

If your device has iCloud backup enabled, your local App data may be included in those backups according to Apple's policies. We do not have access to those backups.

4. Network Connections ​

One Access is a tunneling client. Its core function is to establish a connection, on your instruction, to a hostname protected by Cloudflare Access and to forward your local traffic to it:

  • Traffic travels from your device to the Cloudflare edge over an authenticated connection, and Cloudflare routes it to the origin service behind your own Cloudflare Tunnel.
  • We do not operate any intermediary server. Nothing in this path is controlled by or visible to us.
  • Your use of Cloudflare's network is governed by Cloudflare's own privacy policy and your agreement with Cloudflare.

5. Permissions ​

One Access requests only the system permissions needed to function, and uses each solely to provide the corresponding feature on your device:

  • VPN / Network Extension — required to run the on-device tunnel that carries your traffic. The tunnel runs locally; it does not route your traffic to us.
  • Notifications — used only to tell you when a session needs you to sign in again.
  • When you sign in, the App opens Cloudflare's login page in a browser. Your credentials are entered with Cloudflare, not with us.

You may revoke any permission at any time through your device settings.

6. Third-Party Services ​

  • Cloudflare — One Access connects to the Cloudflare edge to reach your Access-protected hosts. Cloudflare's handling of that traffic is governed by Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
  • Apple App Store — the App is distributed through the App Store, which may collect information according to Apple's own privacy policy: https://www.apple.com/legal/privacy/

One Access itself does not integrate third-party advertising networks, analytics providers, or social-media SDKs.

7. Children's Privacy ​

One Access does not knowingly collect any information from anyone, including children. Because we do not collect personal data at all, the App can be used in compliance with applicable laws, including the Children's Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation (GDPR).

8. International Users ​

Because One Access does not collect or transmit personal data to us, there is no international transfer of personal data on our part. The App can be used from anywhere in the world without your data reaching us.

9. Your Rights ​

Because we do not collect, store, or process personal data about you, there is generally no personal data for us to provide, correct, or delete on your request. If you have a question about your rights, please contact us using the details below and we will respond promptly.

10. Security ​

Although we do not collect your data, we build the App following standard mobile security practices. Data stored locally — including your Access tokens — is protected by the security mechanisms provided by your device's operating system.

11. Changes to This Policy ​

We may update this Privacy Policy from time to time to reflect changes to the App or to applicable law. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the App after the changes become effective constitutes your acceptance of the revised policy.

12. Contact Us ​

If you have any questions or concerns about this Privacy Policy, please contact us:

One Access Email: [email protected]