Privacy Policy
Last updated: September 15, 2026
StepOne is built local-first. The short version: your data lives on your device, and we cannot see it.
What we collect
Almost nothing. StepOne has no accounts, no sign-in, no ads, and no analytics that identify you. Your routines, schedules, and history are stored only in the app's private storage on your phone. The exceptions are anonymous crash reports, which you can turn off, and an anonymous purchase record. Both are described below.
What stays on your device
- Routines, steps, colors, and icons you create
- Reminder schedules
- Completion history and streaks
- App settings
You can export all of it as JSON from Settings at any time, and deleting the app deletes the data.
On Android, a copy of this data can be included in your phone's own Google backup (the same system that restores your apps on a new phone). That backup is controlled by your Android and Google settings, goes to your own Google account, and is never sent to us.
On iPhone, the same data can be included in your iCloud Backup or a backup of the phone to your computer. That backup is controlled by your Apple settings, goes to your own iCloud account or computer, and is never sent to us.
Notifications
Reminders are scheduled and shown by your phone's own notification system. Notification content never leaves your device.
Purchases
If you buy StepOne Premium, the transaction is processed by Google Play or Apple's App Store under their terms. To check and restore purchases, StepOne uses RevenueCat, which gives the installation a random anonymous identifier that is not linked to your name, email, or account. We receive confirmation that a purchase happened, not your payment details.
Crash reports
If StepOne crashes, it can send an anonymous technical report so the bug can be fixed. A report contains the error and where in the app's code it happened, plus the phone model, Android/iOS version, and app version. It does not include your routines, step names, history, anything you typed, your name, email, contacts, location, or any identifier tied to you or your device. Reports are processed by Sentry (a crash-reporting service) on our behalf, are not sold or shared with anyone else, and IP addresses are not stored. You can turn crash reports off at any time in Settings → Your data → "Send anonymous crash reports".
Who else handles your data
Two service providers handle data for us: RevenueCat (the anonymous purchase record) and Sentry (crash reports). Each uses it only to provide that service to us, and any service provider that receives this data must give it the same or equal protection as this policy. Payments themselves are handled by Google Play or Apple under their own privacy policies.
Keeping and deleting your data
Your routines and history stay on your phone until you delete them or the app. Crash reports are kept only for fixing bugs, and Sentry deletes them automatically after a limited retention period. The anonymous purchase record is kept so a purchase can be restored. To have crash reports or the purchase record deleted, email support@provision.services.
You can withdraw consent at any time: turn off crash reports in Settings, or uninstall the app. After that, nothing more is sent.
Children
StepOne is made for adults and is not directed at children under 13.
Changes
If this policy changes, the new version will be posted at this address with an updated date.
Contact
Questions? Email support@provision.services.