Who we are
In Step (“we”, “us”) provides the In Step iOS app and the website in-step.app. We are responsible for the personal data described here.
For any privacy question or request, write to privacy@in-step.app.
What we collect in the app
- Account details: your email address and the name your partner sees. If you sign in with Apple, we receive a stable Apple account identifier and the email address Apple shares with us — which may be Apple’s private relay address — and your name if you choose to share it.
- What you write in the app: your answers to questions, your profile choices, shared facts, discussion notes, summaries, plans, quarterly reviews, and the meeting schedule and time zone you agree on. Questions cover topics such as relationships, home, money, work, children and health, so your answers may include sensitive information about you and your partner. Please share only what you are comfortable sharing.
- Pairing: which account is paired with yours, invitations, and the status of each stage, including readiness and confirmations.
- Technical data: when the app talks to our servers, our hosting provider records technical logs, such as IP address, device and app information, and request times, to operate and secure the service.
We do not collect your location, contacts, photos, health data from your device, or advertising identifiers. The app contains no advertising and no third-party analytics or tracking.
Some data stays only on your device: your sign-in session (in the iOS Keychain), your app language choice and unsaved drafts.
What your partner sees
- Your individual answers stay visible only to you until both of you explicitly choose to open them for discussion. Before that, your partner does not see your answers or your progress.
- In the introduction, your answers are yours until you tap Share; after that your partner can see them. Once both of you have shared, the app combines both versions into one common profile that both of you can edit and each of you confirms.
- Optional private answers stay closed even after the discussion, until you choose to reveal them.
- Shared facts, summaries, notes and plans are shared by design: both of you see them, and each change needs both confirmations.
How we use data
- To create and secure your account and sign you in, including sending sign-in codes by email.
- To run the app: store your answers, pair you with your partner, and show each of you what the sharing rules allow.
- To keep the service reliable and protect it against abuse.
- To reply when you contact us.
We do not sell your personal data, use it for advertising, or share it with data brokers. We do not use your answers to train AI models. We do not access the content of your answers except when you ask us to help with a specific problem or when the law requires it.
Where the GDPR or similar laws apply, we rely on: performing our agreement with you to provide the app; your explicit consent for sensitive information you choose to enter, which you can withdraw by deleting it or your account; and our legitimate interest in keeping the service secure.
Service providers
We use a small number of providers that process data on our behalf, under their data processing terms:
- Supabase — database, authentication and sign-in emails. Your app data is stored in the European Union (Frankfurt, Germany).
- Apple — Sign in with Apple, if you choose it, and app distribution through the App Store and TestFlight.
- Cloudflare — hosting and security for the in-step.app website.
Some providers are based in the United States. Where data is transferred outside your country, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We may disclose data if required by law or to protect the rights and safety of people using In Step.
How long we keep data
We keep your account and app data while your account exists, so that you and your partner can return to earlier stages and plans.
When you delete your account, we delete your account details and sign-in identities and remove the link between you and what you wrote. Your individual answers are deleted or irreversibly anonymized. Summaries and plans that you and your partner confirmed together belong to both of you, so they remain available to your partner without your account details. Technical logs and backup copies are removed in the normal rotation of our providers.
Either of you can end your pair in the app; the other person’s agreement is not needed, and it cannot be undone. Nothing is deleted: shared summaries, plans and the common profile stay with both of you, read-only; your own answers stay visible to you; answers that were never opened stay hidden. Nothing can be added to an ended pair. Your account remains, and you can pair with someone again — with the same partner, that is a new pair from the start.
Your choices and rights
You can delete your account in the app in Settings → Delete account, or by writing to privacy@in-step.app from the email address linked to your account. You can sign out at any time; your data remains on the server until you delete the account. To end your pair without deleting your account, use Settings → End the pair.
Depending on where you live, you may have the right to access, correct, export or delete your data, to restrict or object to processing, and to withdraw consent. To use these rights, write to privacy@in-step.app. We will reply within 30 days and may need to confirm that the request comes from the account owner. You may also complain to your local data protection authority.
Security
Data is encrypted in transit. Access rules on our servers enforce who can read each answer; the app does not decide that on its own. Your session is stored in the iOS Keychain. No system is perfectly secure, so if you suspect unauthorized access to your account, contact us.
The in-step.app website
The website has no accounts, forms or analytics. It sets one cookie, in_step_locale, only when you choose a language, and keeps it for one year. On your first visit, Cloudflare tells the site your country so it can choose a language; the site does not store your IP address. Cloudflare processes standard request data to deliver and protect the site.
Age
In Step is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us at privacy@in-step.app.
Changes to this policy
We will update this page when our data practices change and change the date above. If a change materially affects how we use data you have already given us, we will tell you in the app before it takes effect.