Privacy policy

Who we are

Stepray is built so that your tasks stay yours. Most of what you put into the app never leaves your phone. This policy explains the few things that do, why, and how you control them. It covers the Stepray app and this website.

Stepray is provided by Abanoub Michael, a private individual based in Egypt ("we"). We decide how the data described here is used (we are the "controller"). For anything about privacy, write to stepray.app@gmail.com.

What stays on your phone

Your tasks, reminders, routines and settings are stored on your phone, and so are your medication reminder and its "taken" log if you use them. Unless you choose to keep a copy in your account, we can't see any of it. If you do (see 4 below), your tasks, routines and settings are also kept in your account; your medication reminder never is.

If you use your phone's own backup, your Stepray data can be included in it like other apps' data. On Android, Stepray allows Google's cloud backup only when the backup is end-to-end encrypted, so only you can read it. On Android 12 and newer, that normally needs a screen lock; if the backup can't be end-to-end encrypted, Stepray data is not sent to Google's cloud backup. On Android 9 to 11, Stepray data goes into a cloud backup only if it is end-to-end encrypted. Moving to a new phone by direct phone-to-phone transfer still works. On Android 7 to 8.1, the older backup rules can't tell these cases apart, so we can't promise that a cloud backup of Stepray data is end-to-end encrypted there. This doesn't change a backup that already exists. We never receive your backup. You manage and delete it in your phone's or Google's backup settings; uninstalling Stepray doesn't delete a backup that already exists. Your sign-in to our server is never included in a backup or in a phone-to-phone transfer.

Medication information is health data. It stays on your phone and in your phone's own backup, if you use one. Signing in and syncing leave it out. Medication notifications always use generic wording and never show your private label. Android keeps a small alarm cache with timing and recent recorded-day metadata; that cache is excluded from backups and device transfer.

Reminders are scheduled on your phone. With discreet mode, which is on unless you turn it off, notifications and lock-screen timers don't show your task titles.

What leaves your phone, and why

1. Splitting a task into steps. When you split a task, the app sends that task's text (up to 200 characters), your app language and, if you set one, its energy level to our server in the EU (Supabase, Frankfurt). Our server asks our AI provider, Anthropic PBC in the USA, for the steps and sends them back. Before your first split the app tells you this and asks you to agree; you can turn splitting off at any time under Me → Privacy, and then nothing is sent. We record the time you agreed on your phone, never the task.

We do not store your task text and never write it to a log. To answer repeated requests faster, we keep the resulting steps for 7 days under a one-way code made from the task; the code can't be turned back into your text. Anthropic processes the text only to produce the steps and doesn't use it to train its models. It deletes it within 30 days, unless a request is flagged for misuse, which it may keep longer to enforce its usage policy. Please leave health details and other sensitive information out of tasks you split.

The limit of 5 splits a week (50 with Stepray Plus) uses your account ID. If you don't have an account yet, your first split creates an anonymous one: a random ID with no name, email or phone number. We store how many splits that ID used this week, and whether you have Plus to know which limit applies, and delete the count after 35 days. The app also checks how many splits you have left; that check sends no task text. We log each request's language, outcome, size and speed, without your text and without your ID, to keep costs and quality in check, and delete those logs after 90 days.

Legal basis: providing the feature you asked for (Art. 6(1)(b) GDPR). For the anonymous cost and quality log: our legitimate interest in running the service well (Art. 6(1)(f)).

2. Usage statistics, only if you turn them on. If you turn on "Share usage statistics" (on the last onboarding page, or under Me → Privacy), the app sends us which features you use, for example "a task was completed", with a few fixed details like the energy level. It never sends your task text or anything you type. With each event it sends a random ID, your app version, phone model, operating system and language. Your country is looked up from your IP address, which is then discarded. We use PostHog (EU cloud, Frankfurt). Until you turn it on, nothing is sent. Turning it off stops it and resets the random ID, so new data can't be linked to old data.

For the body-doubling waitlist, saving your matching preference (anyone, or someone of the same gender) with usage statistics on also sends that preference. We don't ask for your gender, email or task details. With usage statistics off, the preference stays on your phone.

If you use usage statistics, the app also sends a few events about Stepray Plus: when the Plus page was viewed and from where, when a trial started or Plus was bought and which plan, and when a purchase was restored.

Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). You can withdraw it at any time under Me → Privacy.

3. Crash reports, only if you turn them on. If you turn on "Send crash reports" (on the last onboarding page, under Me → Privacy, or when the app asks once after an update), the app sends a report when it crashes or hits an error so we can fix it. The report contains the error, where in the app it happened, the app version, operating system, phone model (not your phone's name) and a random ID for this installation, so we can count how many phones are affected. It contains no screenshots, nothing you typed and no task text. We don't measure performance. We use Sentry (EU data region, Frankfurt).

Until you turn it on, crash reporting doesn't start and no installation ID is created. Turning it off stops it, deletes reports waiting to be sent and deletes the installation ID from your phone; if you turn it on again later, a new ID is created.

Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). You can withdraw it at any time under Me → Privacy.

4. A copy of your tasks and settings, only if you choose (sync). Signing in with Google or email is optional, and signing in doesn't upload anything by itself. After you sign in, the app asks "Keep a copy of your tasks?" Only if you choose Keep a copy (or later turn on Me → Privacy → Keep a copy in my account), the app keeps a copy of your tasks in your account on our server in the EU (Supabase, Frankfurt): each task's title, energy level, time estimate, due day, repeat rule, order, when it was done, archived or moved to Later, and its steps. It also keeps your preferences (appearance, design and palette, language, text size, sounds, vibration, Reduce Motion, discreet mode, reminder intensity and the time your day starts) and your routines (name, days, order and steps, and for each day you tick a routine, which steps you ticked and when you finished it). It sends changes when you open the app, when you come back to it, and a couple of seconds after you change something. Only you can read your copy.

When you delete a task, the copy keeps a small marker without the task's content for 90 days so your other phones remove it too. Days you finished a routine stay in your account after you delete the routine, so your streak keeps them, until you delete your account. Your medication reminder and log, your privacy choices and your export file are never synced. If you keep a copy while signed in to an account that already has tasks, the tasks on this phone are added to it and the account's tasks come to this phone; if you choose Not now, nothing is uploaded or downloaded. If you were already signed in before this choice existed, your copy stays on until you turn it off. When you sign out, you choose whether the tasks stay on this phone; the copy in your account stays until you turn off Keep a copy or delete your account, and the next time you sign in the app asks again. Please keep health details out of task titles.

You can turn this off at any time under Me → Privacy → Keep a copy in my account. The app asks once; if you confirm, it stops syncing and deletes the copy from our server: your synced tasks, steps, routines, preferences and deletion markers. Your phone keeps everything, and your account and Stepray Plus stay. If our server can't be reached, nothing is deleted and the copy stays on; if the deletion is interrupted, the app finishes it the next time you open it while signed in, and uploads nothing in between. Our hosting provider's own backups of the database aren't erased at the same moment; they expire on its schedule.

This choice is per phone: if another phone signed in to the same account still keeps a copy, it will upload its tasks again. Turn it off on every phone to stop.

Your account stores your email or the identifier Google provides, sign-in times and profile details Google provides, such as your name and photo. If you sign in with Google, the Me tab shows your first name and Google photo; your phone loads the photo directly from Google. Google handles its sign-in screen under its own terms. If you sign in with email, we send you a one-time code through Brevo (EU), which processes your email address, the email and delivery records, and keeps the delivery records for up to 1 month.

Legal basis: your consent, given by choosing Keep a copy (Art. 6(1)(a) GDPR). You can withdraw it at any time under Me → Privacy → Keep a copy in my account. For phones already signed in before this choice existed, the basis until you turn it off is providing the backup and new-phone restore you turned on by signing in (Art. 6(1)(b) GDPR).

5. Stepray Plus. Stepray Plus is optional and paid through Google Play; Google is the seller and handles the payment under its own terms. We never see your card or payment details. The app only connects to our subscription provider, RevenueCat, Inc. (USA), when you open the Plus plans or restore a purchase, or when you already have Plus. RevenueCat then gets your Stepray account ID (or, without an account, a random ID it creates), technical details such as app version, operating system and store country, and, if you start a trial, buy or restore, your Google Play purchase token and purchase history for Stepray and the plan you chose. It never gets your tasks, routines or medication data. To recognise a subscriber when the app starts, the phone keeps a small encrypted hint tied to your account; it's excluded from backup, sync and export, and cleared when Plus ends, when you sign out or change account, and when you delete your data.

Our server keeps one small record per account: until when Plus runs, whether you're in the free trial, whether it will renew, which plan, and when this was last updated. We use it to give you the right weekly limit for splits. It's included in your data export. We keep it until 90 days after Plus ends (if you never had Plus, until 90 days after the last check). A daily job then deletes it, and deleting your data removes it at once. This doesn't touch your account or tasks, and your customer record at RevenueCat is removed only when you delete your data.

The reminder 2 days before your trial's first charge is a notification your phone schedules by itself. Nothing is sent for it, and it shows no task text.

Legal basis: providing the subscription you asked for (Art. 6(1)(b) GDPR).

6. Connection data. When the app or this website talks to a server, that server briefly processes your IP address and the time to deliver the request and keep the service secure. Our hosting provider keeps these technical logs only for a short time (1 day for requests to our database). Legal basis: our legitimate interest in a working, secure service (Art. 6(1)(f) GDPR).

7. Voice input, only while you hold +. If you hold + to add a task by voice, the app listens only while you hold (with a screen reader, until you pause or tap Done) and passes the sound to your phone's speech recognition service (on Android, usually Google's). That service turns it into text: on your phone when it can, otherwise online through Google under Google's own terms. Stepray never receives or keeps the recording; only the text you save becomes a task, like a typed one. Voice is optional and needs the microphone permission, which you can turn off in your phone's settings at any time.

Legal basis: providing the feature you asked for (Art. 6(1)(b) GDPR).

This website

This website has no forms and no accounts and sets no cookies. Google Firebase Hosting delivers the pages and processes technical data such as your IP address and browser in short-lived server logs. If we turn on page-view counting, it uses PostHog (EU cloud) without cookies, without storing anything on your device and without identifying you. Legal basis: our legitimate interest in running and improving the website (Art. 6(1)(f) GDPR).

Who processes your data for us

Supabase: What for: Our server, database, accounts, sync; Where: EU (Frankfurt); Safeguard: Data processing agreement.

Anthropic: What for: AI model for splits; Where: USA; Safeguard: Data processing agreement, EU Standard Contractual Clauses.

PostHog: What for: Usage statistics (app, with your consent) and, if turned on, page views (website); Where: EU (Frankfurt); Safeguard: Data processing agreement.

Sentry: What for: Crash reports (with your consent); Where: EU (Frankfurt); account settings in the USA; Safeguard: Data processing agreement, EU-US Data Privacy Framework and Standard Contractual Clauses.

RevenueCat: What for: Stepray Plus subscriptions; Where: USA; Safeguard: Data processing agreement, EU Standard Contractual Clauses.

Brevo: What for: Sign-in code emails; Where: EU; Safeguard: Data processing agreement.

Google: What for: Firebase Hosting for this website; Google sign-in; Where: EU and USA; Safeguard: Google's terms.

Each provider works on our instructions only. Google Play and Google sign-in run under Google's own privacy policy.

How long we keep data

Task text sent for a split: Not stored by us; deleted by Anthropic within 30 days (longer only if flagged for misuse).

Cached steps (under a one-way code): 7 days.

Weekly split count: 35 days.

Anonymous request log: 90 days.

Technical request logs: A short time (1 day for database requests).

Your account (anonymous or signed in): Until you delete your data.

Your synced tasks, routines and preferences: Until you delete them, turn off Keep a copy or delete your account.

Marker for a deleted synced task (no content): 90 days.

Your Plus status record: Until 90 days after Plus ends (90 days after the last check if you never had Plus), then deleted by a daily job; sooner if you delete your data.

Your customer record at RevenueCat: Until you delete your data; removed from RevenueCat's backups on its own schedule.

Usage statistics: Up to 1 year.

Crash reports: 30 days.

Sign-in email delivery records: Up to 1 month.

Your rights

You can ask for access to your data, correction, deletion, restriction or a copy (portability). You can object to processing based on our legitimate interest, and you can withdraw any consent at any time. Write to stepray.app@gmail.com.

You can also export and delete your data yourself in the app, under Me → Privacy → Your data. Export gives you one file with everything on your phone and on our server, and you choose where it goes. To hand it to another app, Stepray keeps one temporary copy on your phone until your next export or until you delete your data. Deleting removes your customer record at RevenueCat, then your account and everything linked to it on our server, then everything on your phone, and turns usage statistics and crash reports off. Deleting your data doesn't cancel a Google Play subscription: cancel it in Google Play first (the Plus page links there). If our server can't be reached, you can delete on your phone only; your anonymous ID then stays on our server until you ask us to remove it. Deleting doesn't remove your phone's own backup (see above).

You can complain to a data protection authority, for example in the EU country where you live, or to Egypt's Personal Data Protection Center.

Age

Stepray is for adults 18 and over.

Not a medical service

Stepray is a productivity tool. It doesn't diagnose or treat anything and never gives dosing advice. If a task suggests you might be in danger, the app shows help resources instead of steps. It isn't an emergency service.

Changes

If we change how we handle your data, we'll update this policy and the date above, and ask for your consent again where needed.