Last updated July 20, 2026 · Built by Tiago · Operated by Pipedesk OÜ, Estonia
Steps (steps.org) is operated by Pipedesk OÜ, a company registered in Estonia, in the European Union. Pipedesk OÜ is the data controller for your personal data under the GDPR.
Your phone number (so Steps can text you on iMessage), the journal entries you send — the words are yours; a few per question is enough — your chosen schedule (which mornings, and the hour), and your plan and payment status. We also keep operational logs about message delivery, and records of your conversations with Steps with identifiers masked — your name, email addresses, and phone numbers are replaced with placeholders before anything is stored — which we use only to improve how Steps responds. These records stay linked to your account so deleting your account deletes them too. Payments are handled by our payment processor — we never see or store card numbers. steps.org collects basic, privacy-respecting analytics.
To send your morning questions, keep your journal and its history, manage your account and billing — and, with identifiers masked, to make Steps respond better. Nothing else. Your entries are never used to train AI models, never sold, and never used for advertising.
A deliberately limited AI reads your messages for exactly one purpose: to file your answers under the right question and day, and to answer questions about your own account and record. It never analyzes, interprets, or scores what you wrote, never generates advice or commentary, and nothing you send is ever used to train AI models, ours or anyone else's. The trends Steps shows you are simple tallies of your own words, computed for you and shown only to you. When we review how Steps is responding, we work from conversation records with identifiers masked before storage, and what we learn only ever changes how Steps behaves, never how you're treated as a customer.
Your data is encrypted at rest and stored in EU data centers, with strict access controls and audit logging.
Under the GDPR you can access, correct, export, or permanently delete everything at any time — self-serve at steps.org, or by writing to us. You may also lodge a complaint with the Estonian Data Protection Inspectorate (AKI).
We keep your data for as long as your account exists. If you delete your account, all data is permanently erased within 30 days.
Privacy questions: [email protected].
