Last updated: August 15, 2026
StepOne is built local-first. The short version: your data lives on your device, and we cannot see it.
Almost nothing. StepOne has no accounts, no sign-in, no ads, and no analytics that identify you. Your routines, schedules, and history are stored only in the app's private storage on your phone. The one exception is anonymous crash reports, described below, which you can turn off.
You can export all of it as JSON from Settings at any time, and deleting the app deletes the data.
On Android, a copy of this data can be included in your phone's own Google backup (the same system that restores your apps on a new phone). That backup is controlled by your Android and Google settings, goes to your own Google account, and is never sent to us.
Reminders are scheduled and shown by your phone's own notification system. Notification content never leaves your device.
If you buy StepOne Premium, the transaction is processed by Google Play or Apple's App Store under their terms. We receive confirmation that a purchase happened, not your payment details.
If StepOne crashes, it can send an anonymous technical report so the bug can be fixed. A report contains the error and where in the app's code it happened, plus the phone model, Android/iOS version, and app version. It does not include your routines, step names, history, anything you typed, your name, email, contacts, location, or any identifier tied to you or your device. Reports are processed by Sentry (a crash-reporting service) on our behalf, are not sold or shared with anyone else, and IP addresses are not stored. You can turn crash reports off at any time in Settings → Your data → "Send anonymous crash reports".
StepOne is made for adults and is not directed at children under 13.
If this policy changes, the new version will be posted at this address with an updated date.
Questions? Email support@provision.services.