NextStep App Privacy Policy

1. Data We Collect

To provide our services, we collect the following types of data:

• Personal Information: When you create an account, we collect your email address and profile name (via Google Sign-In or email registration) for authentication purposes.

• User-Generated Content: Routines, tasks, and schedules you create within the app are collected and synced.

• App Activity and Performance: We collect anonymized crash logs, diagnostics, and app performance data to improve stability.

2. How We Use Your Data

Your data is used strictly for the following purposes:

• To provide, maintain, and improve the NextStep core functionality (syncing tasks across devices).

• To authenticate your identity and secure your account.

• To analyze crashes and troubleshoot performance issues (using Firebase Crashlytics).

3. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. Your data is only shared with trusted service providers necessary to operate the app:

• Google Firebase: Used for database hosting (Firestore), authentication (Firebase Auth), and analytics/crash reporting. Your data is stored securely on Google's cloud infrastructure.

4. Data Security (Encryption in Transit and at Rest)

We take data security seriously. All data transmitted between the NextStep app and our servers is encrypted in transit using industry-standard HTTPS/TLS protocols.

Furthermore, all user data, including tasks and routines, is encrypted at rest on our Firebase Firestore databases.

5. Device Permissions

NextStep requests specific on-device permissions only when necessary for core app features:

• Alarms & Reminders (Android): Required to deliver accurate, scheduled notifications and persistent alert sheets for your routines.

The app does not access your location, camera, microphone, or contacts.

6. Data Retention Policy

We retain your user data (routines, tasks, schedules) only for as long as you maintain an active account with us to provide seamless cross-device syncing.

Anonymized analytics data and crash reports are retained for a maximum of 90 days before being automatically deleted.

7. Data Deletion Policy & Instructions

You have the right to request the complete deletion of your account and all associated personal data at any time. Upon deletion, your data is permanently and irreversibly removed from active databases immediately. Encrypted database backups are purged within 30 days.

You can delete your data using either of these methods:

• In-App Deletion: Open NextStep, navigate to Settings > Account, and tap 'Delete Account'. Follow the prompts for immediate deletion.

• Web Deletion Request: Visit our secure portal at https://vx9studio.com/data-deletion to request deletion without logging in.

• Email Request: Contact us at hello@vx9studio.com.

8. Children's Privacy

NextStep does not target and is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how your data is handled, please contact the developer, VX9Studio, at hello@vx9studio.com.