Privacy Policy

ClearSteps is a private self-help tool for tracking anxiety and practicing coping skills. It is not a medical service and does not provide diagnosis, treatment, or emergency care. If you are in crisis in the U.S., call or text 988.

When you create an account, we collect information needed to run ClearSteps—typically your email address and authentication details (and, if you use sign-in with Apple or Google, information those providers share with us for login).

When you use the app, we store content you choose to save: daily check-ins (including how you feel and optional tags or notes), journal and activity entries, movement logs, coping skill favorites and preferences, onboarding answers, and profile fields you edit (such as display name or focus areas).

If you subscribe, payment is processed by Stripe. We store subscription status and related billing identifiers so we can unlock the app—we do not store full card numbers on ClearSteps servers.

Your account data is stored in a cloud database provided by Supabase (hosted PostgreSQL), associated with your user ID. The ClearSteps website and app are hosted on Vercel. Connections use HTTPS (encrypted in transit).

Access to your rows is protected by authentication and database row-level security policies so that, under normal use of the app, each signed-in user only sees and changes their own data. Other ClearSteps users cannot query your journal or check-ins through the standard app APIs.

Some preferences may also be kept temporarily in your browser’s local storage (for example as a backup or migration aid). That copy lives on your device.

You can access your data when signed in. ClearSteps is designed so other app users do not see your private entries.

Service providers that help run ClearSteps—including Supabase (database and auth), Vercel (hosting), and Stripe (payments)—process data as needed to provide those services. With administrative access to those systems, operators can access database content; this product does not use end-to-end encryption that would prevent all server-side access.

We do not sell your journal content. We do not turn your check-ins into a public social profile.

In Account settings you can update profile preferences, export your entries, and delete your account. Deleting your account removes associated account data subject to backups and legal retention where required.

On a shared device, sign out after use. Anyone with access to your unlocked device and an active session can use the app as you.

For privacy questions, contact the site operator using the email associated with your ClearSteps account or the contact method listed on clearstepsapp.com.