Privacy

What we store

• Your account: email address, display name, and a hashed password (we never see the password itself).
• Your journeys, steps, categories and check-ins — the content you type into Nextep.
• Preferences: timezone, weekly step target, energy default.
• Product analytics about how the app is used: event names like step_completed with ids, counts and settings — never the text of a step or journey, and never your email.

What we never do

• We do not sell your data, rent it, or share it with advertisers.
• We do not train AI models on your content.
• We do not run third-party analytics or advertising trackers that receive your content.
• Nothing you write leaves our database unless you trigger it: sharing a card, inviting a buddy, or asking an AI feature for help. Each AI action shows a Privacy Receipt listing exactly what was sent.

Where it lives

Your data is stored in Supabase (Postgres) and served by Vercel. Each person's rows are isolated by database-level row security, so one account cannot read another's. See the Security page for detail. [FOUNDER TO REVIEW] Region: confirm the Supabase project region and state it here.

Your rights

• Export: Me → Export my data gives you every row you own as a JSON file, any time.
• Delete: Me → Delete my account removes your account and all of its data immediately and permanently. There is no retention period and no soft delete.
• Correct: everything is editable in the app. Email us for anything you cannot change yourself.

[FOUNDER TO REVIEW] If you are in the EU/UK or California, these are your GDPR and CCPA rights; confirm the legal basis (contract / legitimate interest) and whether a data-processing addendum with Supabase and Vercel is in place.

Google Calendar

Calendar sync is optional and off until you set it up. It does not use a Google sign-in. Instead you share one calendar with Nextep's own calendar address (a Google “service account”), exactly as you would share it with a colleague, with the permission “Make changes to events”.

• What Nextep reads: when you are busy (free/busy blocks, no titles, no attendees, no details) and the events Nextep itself created, which it tags. The titles of your own events are fetched only while the “Titles” switch in the Calendar tab is on, are shown on that device only, and are never stored in our database or written to any log. Switch it off and they are no longer requested.
• What Nextep writes: one event per upcoming step, titled “Nextep: …” with the journey name and a link back to the app. It only ever updates or deletes events carrying its own tag.
• What we store: the calendar ID you entered, when you connected, when it last synced, and on each step the slot chosen and the id of its event.
• How to stop: tap Disconnect in Me → Google Calendar (Nextep removes its events), or remove the share in Google Calendar's settings at any time — Nextep then loses access immediately.

Voice

[FOUNDER TO REVIEW] FOUNDER TO REVIEW: confirm the processor details and retention below before switching voice on.

Voice is off until you turn it on. The first time you open Voice Mode, Nextep asks before anything is recorded, and you can stop using it at any time.

• The processor: Groq (United States), used to turn speech into text and, for commands Nextep's own rules cannot place, to work out what was meant.
• What is sent: the audio clip of each command. For commands the rules cannot understand, also the words of the command with emails, phone numbers, links and handles removed, plus the titles of your journeys and steps under short aliases. No account identifier, name or email travels with them.
• What is kept: by default, nothing. Nextep does not store the audio or the words, and does not write either to a log. If you switch on “Help improve voice”, the words of commands Nextep did not understand are kept for 30 days and then deleted; you can read, export or delete them sooner.
• What happens on your device: most commands are understood there, by fixed rules, and the one sentence Nextep says when you ask it to speak is read by your device's own voice.

Cookies

We use only the cookies needed to keep you signed in and, during the private beta, to remember that you entered an invite code. If you arrive through a friend's invite link, a first-party cookie remembers that for 30 days so we can thank them. No advertising cookies.

Children

Nextep is not directed at children under 13, and we do not knowingly collect their data. [FOUNDER TO REVIEW] Confirm the age threshold for your launch regions (16 in parts of the EU).

Changes

If this page changes in a way that matters, we will say so in the app before it takes effect. The date at the top is the last change.