Privacy Policy
One Small Step is made by Soulspark Studio. The app needs no registration, login or profile. This policy explains what data the app and its servers use, and why.
1. How we recognize you
You are an anonymous user. The first time you open the app, it creates a long random code (a user key) and keeps it in your phone's secure storage: iCloud Keychain on iPhone, Google Block Store on Android. This is how the app recognises you after a reinstall or on a new phone with the same Apple ID or Google account. Our servers store only a one-way fingerprint (a hash) of this code, never the code itself. We do not know your name, email address or phone number, and we cannot work out who you are from it.
2. What our servers record
Our backend runs on Supabase, in the European Union (Ireland). To give you one card a day and to understand how the app is used, it records:
- your device type and model, your time zone, your language setting and your approximate location (country or region), worked out from your IP address;
- which daily cards you have received;
- when you open the app and for how long;
- when you share a card, which card it was, whether you shared the wisdom or the task, and which app you chose to share it with (not who you sent it to);
- your subscription or purchase status, if you have one, and whether your welcome gift has been given.
None of this is linked to your name or contact details. Shared images are created on your phone and leave it only when you send them.
3. Ads
The free version shows ads through Google AdMob, including optional rewarded ads that you can choose to watch. To show and measure ads, AdMob may collect your device's advertising ID, approximate location based on your IP address, and app diagnostics. Google processes this data under its own privacy policy: policies.google.com/privacy.
If you are in the European Economic Area, the UK or Switzerland, the app first asks for your consent, using Google's consent form, and you can change your choice later in the app. If you decline, you still see ads, but they are not personalised. On iPhone, the app asks for your permission before it uses your advertising ID for tracking, and you can change this in your iPhone's settings. If you decline, you still see ads, but they are not tailored to you.
4. App analytics and crash reports
We use Google Firebase Analytics and Firebase Crashlytics to understand how the app is used and to find and fix problems. They collect app interactions (for example which screens are opened), a random app instance ID, your device model and operating system version, and crash logs and diagnostics. They never receive the text of the cards. The data is not linked to your name, Google processes it for us as a service provider under its own privacy policy (policies.google.com/privacy), and it is deleted automatically after a limited retention period.
5. Advertising measurement (Meta and TikTok)
We use the Meta (Facebook) and TikTok SDKs to measure how well our advertising works, for example whether someone installed and opened the app after seeing an ad. They may receive your device's advertising ID and app events such as installs and app opens. They process this data under their own privacy policies: facebook.com/privacy/policy and tiktok.com/legal/page/global/privacy-policy.
6. Notifications
The app can send you a gentle morning reminder. It is optional: the app asks first, and you can switch it on or off at any time in the app's Settings or in your phone's settings. The reminder is created and shown by your phone itself. No data is sent to us for it.
In the future we may also send notifications from our servers, for example about special offers on subscription fees. These would need your permission, and the app would then send us a push address from your phone so that we can reach it. If you decline, the app works the same without them.
7. Purchases
Any purchase or subscription is handled entirely by the Apple App Store or Google Play. We never receive your card or bank details. We only learn whether your purchase is active. You can cancel a subscription in your App Store or Google Play account settings.
8. Support emails
If you write to us, we use your email address and message only to reply to you. We do not share them with anyone.
9. Deleting your data
- In the app: Settings → Delete my data erases the activity, sharing and card records our servers hold for you. It does not cancel a subscription, which you manage in your store account. To prevent the welcome gift being given again, we keep your anonymous code fingerprint and a note that the gift was given.
- Analytics and crash data: deleted automatically after a limited period. Uninstalling the app also resets its app instance ID, so new data is no longer linked to earlier data.
- On your phone: uninstalling the app removes the app's local data.
- Advertising data: reset your advertising ID or limit ad tracking in your phone's settings.
- Anything else: email [email protected] and we will help.
10. Children
The app is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used the app, contact us.
11. Changes
If we change this policy we will update the date at the top of this page.