One Creation

Overview

One Creation is an embedded privacy company that helps businesses give users control over their personal data. I was brought in to design a privacy control center — a central hub where users could view, manage, and revoke data permissions across connected apps.

The Problem

Users had no meaningful visibility into what data was being collected about them or why. The existing flow buried privacy settings four levels deep in the app, wrapped in legal language that most users couldn't parse. As a result, users either ignored their privacy settings entirely or contacted support when they felt something was wrong — neither of which served the business or the user.

Process

1. 1.

   Conducted 8 user interviews to map existing mental models around data privacy — most users described feeling 'watched but not informed'

2. 2.

   Ran a competitive audit of privacy UIs across iOS, Android, and GDPR-compliant apps to identify established patterns worth borrowing

3. 3.

   Mapped the full data flow with engineers to understand which permissions could realistically be surfaced to users at runtime

4. 4.

   Designed three concepts with different information densities and tested them in Maze with 24 participants — the mid-density layout performed best on comprehension tasks

5. 5.

   Iterated on toggle affordances and permission state labels (Active / Paused / Denied) through two rounds of usability testing before handoff

Outcome

The shipped control center gave users a single screen to view all active data permissions, pause collection, and download a data report. Support tickets related to data and privacy questions dropped by 40% in the first month. Users in follow-up surveys rated their sense of control over personal data 4.2/5, up from 2.1/5 before the redesign.