Security

Version: October 2026

How we protect you

• Everything between the app and our servers is encrypted (HTTPS).
• Sensitive details such as delivery addresses and your delivery confirmation code are encrypted when stored.
• Passwords are handled by our sign-in provider and are never stored in readable form. We never record your passwords, PINs, one-time codes or phone numbers in our logs.
• Payment proofs and shop pictures are kept private and shown only to the people who need to see them.
• Money paid with ONA is held safely and released only when your order is completed with your confirmation code.
• Pictures uploaded by shops are checked automatically so adult content is refused.
• Shops are verified before they can sell.

How you can stay safe

• Never share your password, one-time code (OTP), PIN or delivery confirmation code with anyone. ONA staff will never ask for them.
• Give the confirmation code to the shop only when you are holding your order.
• Pay inside ONA. Be careful when a seller asks you to pay outside the app.
• Use a strong password you do not use elsewhere, and keep your phone locked.
• Check the shop name and the amount before you pay.

If something looks wrong

Report a suspicious shop, message or payment through Help in the app, and change your password if you think someone else knows it.