Privacy Policy
Last updated:
This Privacy Policy explains what information One Step ("the app", "we", "us") collects when you use it, how that information is used, and the choices you have. One Step is a personal habit-tracking application. We do not sell your data.
1. Information we collect
Account information. If you create an account, we collect a username/email and a securely hashed password, handled through Firebase Authentication. You may also sign in anonymously as a guest, in which case no personal identifiers are collected.
Content you create. Habits, streak history, agenda/task entries, notes (including any images you attach), and entries you make in the Vitals log. This content is stored in Firebase (Firestore) tied to your account so it can sync across your devices.
Vitals / symptom data. The Vitals tab is optional and lets you log symptoms or how you're feeling. This information is only stored to help you track your own history — it is never analyzed, shared, or used for any purpose beyond displaying it back to you.
Push notification tokens. If you enable notifications, we store a device token (via Firebase Cloud Messaging) so we can deliver reminders you've asked for. You can disable this at any time in your device or browser settings.
Usage analytics. We use Google Analytics to understand general usage patterns (such as which features are used), which may involve cookies and standard device/browser information. Analytics data is aggregated and is not linked to your habit or note content.
2. How we use this information
- To provide the core functionality of the app — saving and syncing your habits, tasks, notes, and vitals across sessions and devices.
- To authenticate you and keep your account secure.
- To send reminder notifications you've explicitly opted into.
- To understand aggregate usage so we can fix bugs and improve the app.
3. Third-party services
One Step relies on the following third-party services to operate:
- Google Firebase (Authentication, Firestore, Cloud Messaging) — stores your account and app data, and delivers push notifications.
- Google Analytics — aggregate, anonymized usage statistics.
- Tailwind CSS and Font Awesome CDNs — used to deliver styling and icons; these may log standard request metadata (such as IP address) as part of normal web hosting.
Each of these providers has its own privacy policy governing how it handles data on our behalf.
4. Data storage and security
Your data is stored in Firebase and access is restricted so that only your authenticated account can read or write it. One Step also caches app content locally on your device (via your browser and a local offline cache) so the app continues to work without a connection; this local copy stays on your device.
5. Your choices and rights
- Export. You can export your data at any time using the Export option in the app.
- Delete. You can delete individual habits, tasks, notes, or vitals entries directly in the app. To delete your account and all associated data entirely, contact us using the details below.
- Notifications. You can turn push notifications on or off at any time.
- Guest mode. You can use the app anonymously without providing an email or username; note that guest data is tied to your device and not recoverable if you clear your browser data.
6. Children's privacy
One Step is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
7. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of the app after changes are posted constitutes acceptance of those changes.
8. Contact us
If you have questions about this Privacy Policy or want to request deletion of your data, please visit the Contact page.