Company
Legal
steps
A journal is the most personal record a person keeps. What you're grateful for, what you're working on, what yesterday taught you — that deserves absolute privacy. Protecting it isn't a feature of Steps, it's the reason Steps exists. Here are our promises, in plain words. Where they conflict with growth, the promises win.
A phone number, so Steps can text you. The words you send each morning — a few per question is enough. And the schedule you chose. No mood scores, no location, no contacts, no photos: a journal needs your words and nothing else.
Steps texts from a plain phone number — no caller ID, no business name, no app icon. You save the contact under any name you like, and that name is the only thing anyone glancing at your lock screen, your watch, or your car screen will ever see. Privacy that stops at our servers isn't privacy.
Never sold, never used for advertising, never shown to anyone. What you write on your best morning or your worst will never be a targeting segment or an engagement metric. We store your record for exactly one reader: you.
A deliberately simple AI asks the four questions and files your answers — that's its whole job. It never analyzes your life, never interprets what you wrote, never offers advice, and nothing you write ever trains a model, ours or anyone's. The guardrails are public, at steps.org/safety.
A skipped morning is logged like any other day — the product has no opinion about it. No shame mechanics, no guilt-trip notifications, no streak-confetti that makes a quiet week feel like failure. One gentle nudge, and the next text arrives on your schedule, like always.
The trends Steps shows you are simple counts of your own words — family, 31 mornings this year — computed for you and shown only to you. No sentiment scores, no "insights", nothing inferred about your mental state, nothing derived that you couldn't check by hand.
What exists on our servers is exactly this: dates, the short messages you sent, and your schedule. We keep delivery logs as metadata — never your words — and we tell you all of this plainly instead of pretending a perfect black box exists.
Take everything with you anytime. Delete your account and everything — your journal, your schedule, your number — is permanently erased within 30 days. There is no "deactivated" limbo.
Steps is operated by Pipedesk OÜ in Estonia and your data is stored encrypted in EU data centers, under the GDPR — enforceable rights, not promises. The legal version of this page is the Privacy Policy.
Questions about any of this — or something that seems to fall short of it? [email protected]. The enforceable version lives in the Privacy Policy and Terms.