Privacy Policy

Last updated: June 24, 2026

1. Introduction

This Privacy Policy explains how OpenStep ("we", "us") handles personal information when you use openstep.uk and the OpenStep app.

2. Information We Collect

• Account & contact: the email address you provide at checkout and when you log in to the app.
• Quiz responses: the answers you give in our quiz to generate your personalized plan.
• Subscription details: your plan and billing status, processed by Paddle.
• Technical & usage: IP address, device and browser information, and basic usage analytics.
• On-device data: OpenStep is local-first — your practice logs, check-ins, and notes are stored on your device, not on our servers.

3. How We Use Your Information

We use your information to create your plan and run the app, process payments, communicate with you about your account, measure and improve the service, and detect fraud or abuse.

4. How We Share Information

We do not sell your personal information. We share it with:

• Paddle — our payment provider and Merchant of Record.
• Google Cloud / Firebase — hosting and infrastructure.
• Meta — advertising measurement via its Conversions API.
• Law enforcement or authorities — where required by law.

5. Data Storage and Security

Account and subscription data are stored in Google Cloud (Firestore) infrastructure. We use HTTPS/TLS in transit and access controls. No method of transmission or storage is 100% secure.

6. Cookies & Tracking

Our website may use essential cookies and an advertising/measurement pixel (Meta) to understand campaign performance. You can control cookies through your browser settings and your ad preferences through Meta.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. Contact support@openstep.uk to exercise these rights.

8. Data Retention

We keep account data while your account is active. Deletion requests are processed within 30 days, unless we must retain data to comply with the law.

9. Children's Privacy

OpenStep is not intended for anyone under 18. We do not knowingly collect data from children; if we learn we have, we will delete it.

10. International Transfers

Your information may be processed in countries other than your own, including the United States. By using the service you consent to these transfers.

11. Health-Related Information

Some quiz answers may relate to your mental wellbeing. We handle this information with care, use it only to personalize your plan and run the service, and do not use it to target advertising content.

12. Changes to This Policy

We may update this policy; material changes are reflected in the "Last updated" date. Continued use means you accept the updated policy.

13. Contact

Questions about privacy? Email support@openstep.uk.