# Profile Privacy

ONE remembers only what the user chooses to save. Current profile data is stored only on the current device and is not account-synced or transmitted to Kastiz or providers.

Memory can be paused without deletion. Individual values, categories or the entire local profile can be deleted separately. A readable summary can be exported.

The profile excludes passport and visa data, national IDs, payment and bank information, health information, child personal data and emergency contacts. Mission analytics must not include raw mission text or profile values.

External data sharing requires a future secure backend, an enabled sharing flag, a clear information review and explicit approval.