Privacy Policy

What We Collect

When you join our waitlist or purchase StepSafe:

• Email address to send you product updates and launch information
• Name (optional) only if you choose to provide it
• Country or region for shipping estimation

We do NOT collect data about your child at this stage. Once StepSafe devices ship (early 2027), we will provide a separate, COPPA compliant signup process for parents that includes verifiable parental consent before any child data is collected or transmitted.

Payment Information: When you make a payment (such as the $1 VIP reservation), we use Stripe Inc. as our third-party payment processor. We do not store your full credit card information on our servers. Stripe collects and processes your payment information in accordance with their Privacy Policy (stripe.com/privacy). We receive only confirmation of payment and limited identification information (your email address and a payment ID) for the purpose of fulfilling your reservation.

How We Use Your Information

• Send you StepSafe product updates, launch announcements, and shipping information
• Respond to your questions and requests
• Improve our product based on your feedback

We do NOT sell, rent, or share your personal information with third parties for marketing purposes.

Email Communications

We only add you to a mailing list (the StepSafe waitlist, the waitlist for the version for adults living with dementia, or our blog emails) if you tick the box that says so. We keep a record of that consent: when you gave it, on which page, the exact words of the box, and a scrambled (hashed) form of your IP address. Every email we send has a link to unsubscribe from that list or from everything, and you can also unsubscribe by emailing support@stepsafetech.com.

Service Providers

We use a small number of companies to run the StepSafe app and this website. Here is who they are, what each one does, and where.

• Supabase stores StepSafe app accounts, sign-in details, family settings and device locations. The app's database is in Supabase's Canada region (Montreal). Our website keeps its own records, such as orders and sign-ups, in a separate Supabase database. Supabase is a US company, so some support and platform services may process data outside Canada.
• Zoho Mail sends app sign-in codes, caregiver invitations and our support emails, from Zoho's Canadian data centre.
• Expo delivers the app's alerts and notifications to phones, through Apple's and Google's push notification services. They may process data outside Canada.
• Google and Apple confirm who you are if you choose the optional “Continue with Google” or “Sign in with Apple” when signing in to the app. They may process data outside Canada.
• Vercel hosts this website and receives visitors' IP addresses and page requests. It may process data outside Canada.
• Stripe processes payments on this website. Stripe may collect device information, IP address, and transaction details to detect and prevent fraud. It may process data outside Canada. Their privacy practices are governed by Stripe’s Privacy Policy at stripe.com/privacy.
• Resend sends this website's emails: order and reservation confirmations, and our waitlist and blog emails. Our mailing lists themselves are kept in our own database (Supabase), not by an email marketing company. It may process data outside Canada.
• Google Analytics, the Meta Pixel and Vercel Analytics measure visits to this website and how our ads perform. They are not part of the StepSafe app. They may process data outside Canada.

StepSafe App: Optional Anonymous Usage Counts

The StepSafe app can send us anonymous usage counts to help us improve it. This is off unless you turn it on: the app asks once at the end of setup, and you can change your choice at any time in the app under Settings, Help improve StepSafe.

If you say yes, the app sends at most once a day: which setup steps were reached, which features are used, rough ranges such as the number of zones and caregivers (for example 1 to 3), which Help articles are opened, how quickly screens and main buttons respond, when a request fails, the app version, the phone's system and main version, and the app's language.

These counts never include locations, names, email addresses, phone numbers, anything about the person who wears the StepSafe, what you type (including Help searches), device or advertising identifiers, or your account. They carry a random code that changes every month and is not linked to your account, and we do not store your IP address with them. They are kept on our own servers (no third-party analytics service) for 13 months and then deleted. Turning the setting off deletes the counts waiting on your phone and its random code.

Data Security

Your information is stored using industry standard encryption (AES 256 encryption at rest, TLS in transit). Only the StepSafe team has access, and we follow standard security practices to protect your data.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Withdraw consent at any time

To exercise any of these rights, email support@stepsafetech.com.

Children's Privacy (COPPA and PIPEDA)

StepSafe will be a product for children, but our pre launch waitlist is intended for parents, guardians, and adults aged 18 and over. We do not knowingly collect information from children under 13.

When the product launches, the StepSafe app will collect children's location data only with verifiable parental consent in accordance with COPPA, PIPEDA (Canada), and applicable privacy laws.

Updates to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email.

Contact

Questions? Email us at contact@stepsafetech.com