The short version: Steppy uses your information to provide your account, assignments, AI-generated steps, reminders, AI credits, and any future paid features. We do not sell your personal information and we do not use it for third-party advertising.
1. Who this policy applies to
This Privacy Policy applies to the Steppy iOS application, this website, and related support services (together, the “Services”). In this policy, “Steppy”, “we”, “us” and “our” refer to the provider of the Services.
If you have questions or want to exercise a privacy right, email us at support@trysteppy.com.
2. Information we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account information | Email address, account identifier, sign-in provider, and authentication records. Apple may provide a private relay email address. | To create and secure your account, keep you signed in, and support password recovery. |
| Study content | Assignment titles, subjects, descriptions, due dates, “hardest part” notes, checklist tasks, reminder titles, and reset blockers you enter. | To provide assignment planning, progress tracking, reminders, and AI-assisted features. |
| Activity and settings | Checklist completion, completed assignments, focus sessions, theme, focus defaults, notification preferences, and quick-reminder times. | To save your preferences, show progress, and operate app features. |
| AI usage data | Requests, generated steps, token counts, usage events, credit balance, model information, and error status. | To generate assignment breakdowns and reset steps, manage credits, prevent abuse, and improve reliability. |
| Subscription information | Entitlement status, product identifier, purchase status, and an app-specific RevenueCat identifier if paid features are offered. | To support future Steppy Pro features and purchase restoration. Apple handles payment details. |
| Device and technical data | App version, device platform, diagnostic information, notification identifiers, and security logs. | To deliver notifications, troubleshoot problems, protect the Services, and understand technical performance. |
| Support communications | Your email address and the contents of messages or attachments you send us. | To respond to requests, investigate issues, and keep a record of support. |
3. How information is collected
We collect information directly from you when you create an account, add study content, change settings, purchase a subscription, or contact support. We also receive limited information automatically from the app and from service providers that help us run Steppy.
If you sign in with Apple or Google, that provider authenticates you and shares the account information you authorise. We do not receive your provider password.
4. How we use information
We use information to:
- provide, personalise and maintain the Services;
- create and secure accounts and authenticate sign-ins;
- store assignments, checklists, settings, focus history and progress;
- generate AI-assisted assignment breakdowns and reset steps;
- schedule and display reminders you request;
- manage free AI credits and any Steppy Pro entitlements;
- respond to support, privacy and account-deletion requests;
- detect misuse, protect users, and maintain security;
- diagnose errors and improve reliability and accessibility; and
- comply with legal obligations and enforce our Terms of Use.
5. AI-assisted features
Steppy uses artificial intelligence to turn assignment information into checklist tasks and to suggest a tiny reset step when you feel stuck. When you use these features, relevant content—such as an assignment title, description, hardest part, current checklist task, or blocker—may be sent securely through our server-side systems to our AI provider, DeepSeek.
Do not enter highly sensitive personal information into assignment descriptions, custom blockers, or other AI inputs. AI output can be incomplete or incorrect. You should review generated steps before relying on them.
6. When we share information
We do not sell your personal information. We share information only where needed to provide the Services, comply with law, or protect rights and safety. Service providers may include:
- Supabase, for authentication, database hosting, server-side functions and secure data storage;
- DeepSeek, for AI-generated assignment breakdowns and reset steps;
- RevenueCat, for subscription entitlement management and purchase restoration;
- Apple, for App Store distribution, in-app purchases, Apple Sign-In, and device notifications;
- Google, when you choose Google sign-in; and
- professional advisers, regulators, courts, law enforcement, or a successor organisation where legally required or as part of a legitimate business transfer.
These providers process information under their own terms and privacy policies. They may operate in countries other than Australia, including the United States and other locations where they maintain infrastructure.
7. Legal grounds
Depending on where you live, we rely on one or more legal grounds: performing our contract with you, your consent, our legitimate interests in operating and securing the Services, and compliance with legal obligations. You may withdraw consent where consent is the basis for processing, but this does not affect processing already performed.
8. Data retention
We keep account and study information while your account is active and for a limited period afterwards where needed for recovery, security, dispute resolution, or legal compliance. Support records, transaction records, and security logs may be retained longer where reasonably necessary.
When you request account deletion, we delete or de-identify personal information associated with your account, subject to limited backups and records we must retain by law. Backup copies may persist for a short period before being overwritten.
9. Notifications and device permissions
Steppy requests notification permission only so it can deliver reminders and focus-completion alerts. You can change notification permissions at any time in iOS Settings. Some reminder scheduling information is stored on your device. Steppy does not access your contacts, photos, microphone, camera, precise location, or Apple Health data as part of the features described in this policy.
10. Security
We use reasonable administrative, technical and organisational safeguards, including authenticated access, encrypted network connections, database access controls, and server-side handling of private service credentials. No internet service can guarantee absolute security. You are responsible for protecting your device and account credentials.
11. Your choices and rights
Depending on your location, you may have the right to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also complain to a privacy regulator. Australian users may contact the Office of the Australian Information Commissioner at oaic.gov.au.
You can update many settings inside Steppy. To request access, correction, deletion, or another privacy action, email support@trysteppy.com. We may need to verify that you control the account.
12. Children’s privacy
Steppy is intended for students aged 13 and older. If you are under the age at which you can consent to data processing in your country, a parent or guardian must authorise your use. We do not knowingly collect personal information from children who cannot legally consent without appropriate permission. A parent or guardian who believes a child has provided information without permission should contact us.
13. Website data
This website does not currently use advertising trackers or behavioural analytics. Basic server logs may record technical information such as IP address, request time, browser type, and requested page for security and delivery. If we introduce analytics or non-essential cookies, we will update this policy and provide any legally required choices.
14. Changes to this policy
We may update this policy as Steppy changes. We will post the revised version here and update the “Last updated” date. If a change materially affects your rights, we will provide additional notice where reasonably possible.
15. Contact us
For privacy questions, complaints, or requests, email support@trysteppy.com. For general product support, email support@trysteppy.com.