Privacy note

Last updated 18 October 2026

What this covers

This note covers this website. The OneStep app keeps its data on your phone first and has its own settings for export and deletion. One app feature is described here too, because it works through a server: Trusted contacts.

What this site collects

No personal information through forms: the waitlist isn't open yet, so the site has no form and stores no email addresses. Requests to the site are still processed to deliver the pages; see “Hosting”.

Cookies and analytics

This site sets no cookies of its own and runs no analytics.

What your browser keeps

Three small values, in your own browser and never sent to us: the language you chose, whether you turned the page's Motion control off or on, and, for the current tab only, where you were on the page so Back and reload return you there.

The demonstrations

“Try a small moment”, the theme preview and the step-by-step previews run entirely in your browser. They ask for no answers, use no microphone, camera or account, and save or send nothing.

Trusted contacts in the app

This app feature is still in development and isn't running on a hosted service yet; it has been verified against a local test copy of the service. It is the one part of OneStep that works through a server, so both people need an account (a forgotten password can be reset with an email you ask for). When you create an invitation, the contact's name, relationship, phone, email and priority are copied to your account. The server makes the eight-character invite code and stores it only as a one-way keyed hash; it works once, expires after 72 hours, and making a new code ends the old one. Your sharing switches (all off to begin with), the short note for that contact (only while its switch is on), one status record per day and, only if you turn on your safety plan's cloud sync, a reduced copy of the plan (warning signs, grounding steps and safe places) are kept there too. The daily record holds a status label, the figure behind it, the time of your last check-in and yes/no answers for today.

An accepted contact can't read those records directly. Their view comes from one server function that returns only the items you switched on, and never the status label, the figure or the warning signs. Ending the connection, from either side, removes their access: the function then returns nothing to them, and old codes are refused. This has been verified against a local test copy of the service with made-up accounts, not yet on a hosted service. Notes, Journal, Mood Scan answers, guided reflection, message drafts, medications, location and Health data have no route to them. OneStep sends contacts no messages and no alerts.

Hosting

The site is hosted by Cloudflare, Inc. As with any website, Cloudflare handles the technical details of each visit in order to deliver the pages; that is described in Cloudflare's privacy policy.

When the waitlist opens

This note will be updated before then, to say what is stored, where, for how long, and how to have it removed.