Last Update: 31st March 2025
Thank you for choosing to be part of our community at Kensys Ltd., doing business as OneUp ("OneUp", "we", "us", "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy policy, or our practices with regards to your personal information, please contact us at support@oneupinvest.com.
When you visit our website https://oneupinvest.com (the "Website"), and more generally, use any of our services provided through the Website and the OneUp platform (the "Services"), we appreciate that you are trusting us with your personal information. We take your privacy very seriously.
In this privacy policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy policy that you do not agree with, please discontinue use of our Services immediately.
This privacy policy applies to all information collected through our Services (which, as described above, includes our Website and the OneUp platform).
1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE USE YOUR INFORMATION?
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
4. WHO WILL YOUR INFORMATION BE SHARED WITH?
5. HOW LONG DO WE KEEP YOUR INFORMATION?
6. HOW DO WE KEEP YOUR INFORMATION SAFE?
7. DO WE COLLECT INFORMATION FROM MINORS?
8. WHAT ARE YOUR PRIVACY RIGHTS?
9. CONTROLS FOR DO-NOT-TRACK FEATURES
10. DO EU/EEA RESIDENTS HAVE SPECIFIC DATA PROTECTION RIGHTS?
11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
12. DO WE MAKE UPDATES TO THIS POLICY?
13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide directly to us to personalize your experience and deliver our services.
We collect personal information that you voluntarily provide to us when you create an account, use our Services, or communicate with us.
This information may include:
Name
Email address
Investment preferences (such as sectors, styles, or risk profiles)
Portfolio data that you choose to upload or connect to the platform
Communication preferences
This information is collected solely to provide you with personalized analytics, stock ideas, portfolio monitoring, alerts, and reports based on your selected criteria.
Information automatically collected
In Short: We collect limited technical data to ensure the security, performance, and proper functioning of our Services.
When you access or use our Website or platform, we automatically collect certain technical information, such as:
IP address
Browser type
Device type
Operating system
Date and time of access
Usage data related to platform activity for security and troubleshooting purposes.
We do not use cookies or tracking technologies for advertising, marketing, or profiling purposes.
2. HOW DO WE USE YOUR INFORMATION?
In Short: We use your information to provide and improve our Services, personalize your experience, ensure security, and comply with our legal obligations.
We use the personal information we collect for the following purposes:
To create and manage your user account, including allowing you to sign up or log in using Apple or Google authentication
To provide you with personalized analytics, stock ideas, alerts, and portfolio monitoring based on your preferences and portfolio data
To send you service-related communications, including important updates, alerts, notifications, or administrative messages
To analyze usage of our platform in order to improve our services, identify new features, and better understand client needs and behaviors
To ensure the security and integrity of our Services
To comply with legal and regulatory obligations
To respond to your inquiries and provide customer support
To enforce our Terms & Conditions and other policies
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
In Short: We only share your information to provide our services, to comply with legal obligations, to protect our rights, or in connection with a business transfer.
We may share your personal information in the following situations:
With your consent: When you give us explicit permission to share information for a specific purpose.
To provide our services: We may share your information with trusted third-party service providers who perform services on our behalf and who need access to such information to provide those services. This includes providers of:
Cloud hosting and storage (e.g., AWS)
Payment processing (e.g., Stripe, Apple Pay, Google Pay)
Authentication services (e.g., Google or Apple login)
Legal requirements: When we are legally required to disclose information to comply with applicable laws, regulations, government requests, court orders, or legal proceedings.
Security and enforcement: To enforce our terms, prevent fraud, protect security, or respond to legal claims.
Business Transfers: In connection with any merger, sale of assets, financing, or acquisition of all or part of our business by another company.
We do not share your personal information with third parties for advertising or marketing purposes.
We do not sell, rent, or trade your personal information.
4. WHO WILL YOUR INFORMATION BE SHARED WITH?
In Short: We only share your information with trusted third-party service providers necessary to operate our Services.
We only share and disclose your information with the following categories of third parties:
Cloud Hosting & Storage Providers (e.g., Amazon Web Services)
Payment Processing Providers (e.g., Stripe, Apple Pay, Google Pay)
User Account Registration & Authentication Services (e.g., Google Sign-In, Apple Sign-In)
These service providers are contractually obligated to safeguard your data and use it only to provide services to us.
If we have processed your information based on your consent and you wish to revoke your consent, please contact us using the contact details provided in the section below titled "HOW CAN YOU CONTACT US ABOUT THIS POLICY?"
5. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to provide our Services and to comply with our legal obligations.
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, including:
Providing our Services
Complying with legal, tax, accounting, or regulatory requirements
Ensuring the security and integrity of our systems
Resolving disputes or enforcing our agreements
When you close your account or when we no longer have a legitimate business need to process your personal information, we will either delete or anonymize it.
If immediate deletion is not possible (for example, due to technical limitations or because your information is included in system backups), we will securely store your information, limit access, and isolate it from any further processing until deletion is possible.
6. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We protect your personal information through industry-standard security measures and trusted cloud infrastructure.
We have implemented appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, use, or disclosure.
Your data is stored on secure servers provided by Amazon Web Services (AWS), which offers industry-leading security infrastructure, including encryption at rest and in transit.
We also implement additional security measures, including:
Restricted access to personal data on a need-to-know basis
Strong authentication procedures
Monitoring and logging of access to sensitive information
Regular security reviews and updates
While we strive to protect your personal information, please understand that no method of electronic storage or transmission over the Internet is completely secure. However, we continuously work to maintain and improve our security practices to protect your data.
7. DO WE COLLECT INFORMATION FROM MINORS?
In Short: While our Services are accessible to users of all ages, we do not knowingly collect personal data from individuals under 18 years old for specific targeting or marketing purposes.
Our Website and Services are available to users of all ages, including those under 18. However, our Services are not specifically directed at children, and we do not knowingly collect or process personal information from individuals under 18 years of age for marketing or profiling purposes.
If we become aware that we have inadvertently collected personal information from a user under 18 in a context where parental consent was required, we will take reasonable steps to delete such information.
If you have any concerns about data collected from a minor, please contact us at support@oneupinvest.com.
8. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may access, update, or delete your account information at any time, and you can choose whether or not to receive marketing communications from us.
If you have questions or requests related to your privacy rights, you can contact us at support@oneupinvest.com.
Managing Your Account Information
If you wish to review, update, or delete the information associated with your account, you can contact us at any time at support@oneupinvest.com.
Upon receiving your request to delete your account, we will deactivate or delete your personal information from our active systems. However, we may retain certain information as required or permitted by law, for security purposes, fraud prevention, or to comply with our legal obligations.
Managing Communications
We may send you two types of communications:
Service communications — related to your account, alerts, platform updates, or legal notices (these are necessary for your use of the service and cannot be opted-out unless you delete your account).
Marketing communications — newsletters, product updates, new features, and content that may be of interest to you (you can opt-out at any time).
You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in the footer of our emails, or by contacting us at support@oneupinvest.com.
Please note that opting out of marketing emails does not affect our ability to send you necessary service communications related to your account.
9. CONTROLS FOR DO-NOT-TRACK FEATURES
Some browsers and devices offer a “Do-Not-Track” (“DNT”) setting to indicate that you do not wish to be tracked across different websites. Since we do not track users across third-party websites for advertising purposes, our Website does not respond to DNT signals. If a standard is adopted in the future that requires us to do so, we will update this Privacy Policy accordingly.
10. DO EU/EEA RESIDENTS HAVE SPECIFIC DATA PROTECTION RIGHTS?
If you are a resident of the European Union (EU) or the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR).
Kensys Ltd, operating as OneUp, is the data controller responsible for processing your personal information collected through our Services. You can contact us at support@oneupinvest.com.
We process your personal data based on the following lawful bases:
Your consent
The performance of a contract with you
Compliance with legal obligations
Our legitimate business interests
If we transfer your personal data outside of the EU/EEA, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs), to ensure its protection.
Your rights under GDPR include:
The right to access the personal data we hold about you
The right to request correction of inaccurate personal data
The right to request deletion of your personal data (subject to legal limitations)
The right to object to certain types of processing
The right to data portability
The right to withdraw your consent at any time
The right to lodge a complaint with your local data protection authority
We retain your personal data only as long as necessary for the purposes stated in this Privacy Policy or as required by law. Once no longer needed, we securely delete or anonymize your data.
We do not use marketing or advertising cookies. Cookies used on our platform are limited to essential technical cookies required for security and platform functionality.
If you have any questions or wish to exercise your rights, please contact us at support@oneupinvest.com.
11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: Yes, if you are a California resident, you have specific rights regarding access to and control of your personal information.
Categories of Personal Information Collected
In the past twelve (12) months, we have collected the following categories of personal information from users:
Identifiers: Name, email address, IP address, account login information.
Portfolio information voluntarily provided by the user within our platform.
Technical Information: Browser type, device type, operating system, IP address, and platform usage data for security and service purposes.
We do not collect sensitive personal data such as biometric information, education records, employment history, or financial details outside of billing (subscription payment processing).
How We Use and Share Information
We only share your personal information with trusted service providers who assist us in delivering our services, such as:
Cloud hosting providers (e.g., AWS)
Payment processors (e.g., Stripe, Apple Pay, Google Pay)
Authentication providers (e.g., Google, Apple)
We do not sell or rent your personal information to third parties.
We may disclose personal information if required by law, or in connection with a business transfer, as described in this Privacy Policy.
Your Rights under CCPA
As a California resident, you have the right to:
Request access to the personal information we hold about you
Request deletion of your personal information
Request to correct inaccurate personal information
Request information about how we have shared your personal data
Be free from discrimination for exercising your privacy rights
Exercising Your Rights
To exercise any of these rights, please contact us at:
support@oneupinvest.com
We may need to verify your identity before processing your request. We will use the information provided only for verification purposes and will delete any additional data provided for verification once your request is completed.
12. DO WE MAKE UPDATES TO THIS POLICY?
In Short: Yes, we update this policy as necessary to remain compliant with applicable laws and our practices.
We may update this Privacy Policy from time to time. Any changes will be indicated by an updated "Last Revised" date at the top of this Policy. If we make material changes that significantly affect your rights or the way we use your personal information, we will notify you by email or through a notice within our platform, before such changes take effect. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.
13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?
If you have questions or comments about this policy, you may email us at support@oneupinvest.com.
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Depending on applicable laws (such as GDPR or CCPA), you may have the right to:
Access the personal information we hold about you
Request correction of any inaccurate data
Request deletion of your personal information
To submit such a request, please contact us at: support@oneupinvest.com. We will respond to your request in accordance with applicable data protection laws
