Privacy Policy

Effective 6 September 2026

Stepli is a calm daily-focus app. This policy explains what data it collects, why, and how you control it. There are no ads in Stepli and your data is never sold.

The data controller is Zaraar Digital Ltd, a company registered in England and Wales (company number 17347766), registered office 562 High Street, Winsford, CW7 2EA, United Kingdom. You can reach us at support@stepli-app.com.

The short version

• Using Stepli without an account: your steps and settings stay on your device. On supported store builds, RevenueCat still receives an anonymous customer identifier and purchase information needed to show products and recognise entitlements.
• Creating an account: your email and your steps sync to our servers so Stepli works on more than one device.
• We never sell your data, and we do not run ads.
• You can delete your account and everything synced with it at any time, from Settings.

What we collect

If you never create an account

Your steps, tasks and settings are stored only on your device. We never see that content. On iOS and Android builds that support purchases, RevenueCat uses an app-generated anonymous customer identifier and receives purchase and entitlement information from the relevant store. This is separate from a Stepli account.

If you create an account

• Email address, to sign you in and let you reset your password.
• Your name, if you choose to add one. It is optional.
• Your steps and tasks (titles, dates, completion status, optional notes), synced so your progress follows you across devices.
• Your settings, meaning your theme choice, whether daily reminders are on, and when your free preview began.
• Purchase status, meaning whether a Premium subscription or Lifetime purchase is active. This is handled by our purchase provider, RevenueCat, on top of the App Store or Google Play. It is not linked to your Stepli account, and we never see your card details.

Security logs

Like any service, our database provider records technical logs of requests and sign-in attempts, including IP addresses, to keep accounts secure and to diagnose faults. These logs are not used to build a profile of you, are not linked to the content of your steps, and are not shared with anyone.

What we do not do

• We do not run ads or use advertising identifiers.
• We do not sell or rent your data to anyone.
• The app uses no third-party product analytics and no crash reporting. If that ever changes, this policy will change first, and the app will carry a control you can switch off.
• We do not read the content of your steps for any purpose other than showing them back to you.

This website

The website is separate from the app and does collect a little, which is worth stating plainly rather than leaving to a footnote.

• Cookieless analytics, always on. We use Cloudflare Web Analytics, which counts page views, referrers and rough country without setting any cookie, storing anything on your device, or building a profile. Because it stores nothing, it needs no permission.
• Google Analytics, only if you agree. It sets cookies, so we ask first and load nothing at all unless you say yes. Declining costs you nothing and the site works identically. You can change your answer with the Cookie choice link in the footer.
• Hosting logs. Our host, Vercel, records standard request logs including IP addresses, as any web server does.
• Error monitoring. We use Sentry to diagnose website faults. When an error occurs it may receive the affected page, browser and device details, a stack trace, and IP-derived approximate location. We also collect a sample of technical performance traces from the website's server runtime. Sentry processes this information for us in the EU. We do not use Sentry Session Replay. Contact us if you need the current event retention period applied to our account.

None of this touches the app. Installing Stepli does not opt you into anything you agreed to here, and visiting this site does not create an account or link you to one.

Your controls

• Export your data at any time: Settings, then Export my steps. It copies everything as JSON for you to keep wherever you like.
• Delete your account and all associated data at any time: Settings, then Delete account. This is permanent and cannot be undone. See the account deletion page.
• Reset local data at any time when you have no account: Settings, then Reset local data.
• Turn off notifications at any time: Settings, then Daily invitation, or your device settings.

Where your data lives

Account data is stored with our database provider, Supabase. Purchases are processed by the App Store or Google Play, with subscription status relayed by RevenueCat. Website error diagnostics are processed by Sentry in the EU. These providers act on our instructions and do not use your data for their own purposes. Synced account data helps Stepli work across devices; it is not a separate backup service, so you should use the JSON export if you want an independent copy.

Children

Stepli is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If we make a material change we will update the effective date above and, where required, tell you inside the app.

Contact

Questions about this policy or your data: support@stepli-app.com