Step Up Privacy Policy

Last updated: August 30, 2026

Step Up helps you plan habits, tasks, reminders, notes, calendar items, focus sessions, and progress reflections. This policy explains what information the app handles, how it is protected, and how it is used.

Information We Collect

• Account information, such as your email address and display name when you create or sign in to an account.
• Content you add to the app, including habits, tasks, reminders, calendar events, notes, videos, streaks, ratings, reflections, and progress data.
• Subscription and purchase status needed to unlock paid features. Payments are processed by Apple and subscription status may be verified through RevenueCat.
• Technical information needed to operate and secure the app, such as device platform, authentication state, app diagnostics, notification scheduling information, encryption metadata, trusted-device information, and security or recovery records.

Encryption and Security

Step Up uses client-side encryption for protected user content. Protected content is encrypted on your device before being stored or synchronized with Supabase and is decrypted on your device when needed.

Step Up may store encrypted content, wrapped encryption keys, encryption metadata, and recovery information on its backend. Encryption keys used directly to decrypt protected content are not stored in plaintext in Supabase.

Step Up may offer different security and recovery options:

• Standard Security is designed to make account recovery and access on new devices easier. Step Up's backend may assist with recovering protected encryption key material after your account has been authenticated.
• Enhanced Privacy provides stronger protection by requiring trusted-device approval, a recovery passphrase, or another authorized recovery method. It is designed so that backend or database access alone is not sufficient to decrypt protected user content.

The availability and exact behavior of these options may depend on your device and the security settings you choose.

How We Use Information

• To provide the app's planning, reminder, note, subscription, reflection, and progress-tracking features.
• To synchronize encrypted information across devices and restore access when you sign back in.
• To provide encryption, account recovery, and trusted-device security features.
• To send reminders and notifications that you choose to enable.
• To maintain app security, troubleshoot issues, and improve reliability.

Storage and Service Providers

Step Up uses Supabase for authentication, encrypted database storage, file storage, and certain account recovery and security functions.

Apple processes App Store purchases and provides certain device security features. RevenueCat may be used to validate subscription and purchase status.

These providers process information only as necessary to provide their services to Step Up.

Data Sharing

We do not sell your personal information.

We share information only with service providers necessary to operate Step Up, when required by law, or when necessary to protect the app, its users, or the public.

Your Choices

• You can edit or delete habits, tasks, reminders, notes, calendar events, and other content inside the app.
• You may be able to choose between available encryption and account-recovery security options.
• You can manage notification permissions in iOS Settings.
• You can manage or cancel subscriptions through your Apple Account subscription settings.
• You can request account or data deletion by emailing stepupappsupport@gmail.com.

Data Retention

We keep account information and app content for as long as necessary to provide Step Up, unless you delete it or request deletion.

Encrypted records, security metadata, recovery information, and certain transaction or backup records may be retained when necessary for security, legal requirements, backup integrity, or account recovery.

Children

Step Up is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy when Step Up's features, security systems, service providers, or legal requirements change. The updated version will be posted at this URL with a new "Last updated" date.