Privacy Policy

1. Overview

Simply Steps ("we", "our", "us") provides visual routine, scheduling, communication, and support tools for families, children, therapists, educators, and support workers. This Privacy Policy explains how we collect, use, and protect personal information when you access our web app, mobile apps, APIs, or support channels.

2. Information We Collect

• Account Data: Names, email addresses, login credentials, roles, and profile details.
• Routine Content: Routines, step descriptions, schedules, rewards, wishlist items, uploaded images, and other content you choose to provide.
• Communication Data: Messages, support requests, demo requests, and attachments shared with our team or through the app.
• Usage Data: IP address, device/browser information, app version, API logs, diagnostics, and error records.

3. How We Use Information

• Provide and secure the Simply Steps platform.
• Create, manage, and share visual routines, schedules, progress records, messages, and rewards.
• Improve routine generation, accessibility, reliability, and user experience.
• Respond to support, demo, and contact requests.
• Comply with legal obligations and respond to lawful requests.

4. Legal Basis & Retention

We process data based on legitimate business interests, contract performance, legal obligations, and user consent where required. Routine, schedule, message, and uploaded content is retained while needed to provide the service or as configured by the user. Login, audit, and diagnostic logs are retained as needed for security, troubleshooting, and compliance.

5. Data Sharing

We never sell personal information. We share data only with trusted processors that enable hosting, storage, authentication, AI-assisted routine generation, email delivery, diagnostics, and customer support. Each processor must protect the information they process and use it only for the services they provide to us.

6. Security

Simply Steps uses safeguards such as encryption in transit and at rest where appropriate, access controls, authentication, monitoring, and regular security reviews. Despite these safeguards, no system is perfectly secure; we notify users of incidents as required by law.

7. International Transfers

We may process data on servers located in Australia, the United States, or other jurisdictions. When transferring data internationally, we rely on appropriate safeguards such as contractual protections and service provider security commitments.

8. Your Rights

Depending on your location, you may request to access, correct, delete, or export your personal data. Submit requests by emailing privacy@simplysteps.com. We may need to verify your identity before fulfilling a request.

9. Third-Party Links & Cookies

Our website or app may link to third-party services, including app stores, support tools, analytics providers, or other services. Their privacy practices are governed by their own policies. We may use essential cookies and analytics cookies to keep the platform functioning and understand product usage.

10. Contact

For privacy questions or to submit a data request, contact us at privacy@simplysteps.com.