small stepPrivacy policy
What this policy covers
Small Step is an iPhone tool for starting everyday tasks, operated by Emir. This policy covers the optional-AI app and these product, privacy and support pages. The app is intended for adults aged 18 and over; it is not a medical or diagnostic service.
Tasks stay on your device
Task descriptions, action steps, progress, dates and drafts are stored in the app’s local container. Language and appearance preferences are stored locally. Manual entry and preset examples work without sending task text. Cloud AI is optional and is described below. It has no account, advertising SDK, tracking or cloud sync.
Records remain until you delete them in the app or delete the app. Removing a task removes its local steps and progress. Device or computer backups may contain app data and are controlled by your Apple/device backup settings. We cannot access, restore or remotely erase those copies.
Optional voice input
Only when you choose Start recording do we request microphone and speech recognition permissions. Transcription is restricted to on-device recognition on supported devices and languages. If it is unavailable, use text input. The app does not save audio or upload it to our server. You choose whether to put a transcript into your task. Revoke these permissions in iPhone Settings at any time.
Optional Cloudflare Workers AI
Starting with build 1.0 (3), you may explicitly agree in the app to send your current task description, current action, up to five relevant completed actions and selected language to our gateway in Shanghai, China, then to Cloudflare Workers AI. Cloudflare processes requests on its global network; processing may take place outside your country. We do not promise US-only processing. No audio, photos or full task history is sent. Use everyday task descriptions and omit unnecessary names, addresses, financial, medical or other sensitive details.
Our gateway processes text in memory and does not save prompts or answers or write API access logs. We use the direct Workers AI API, without AI Gateway content logging or Cloudflare content-storage products. Cloudflare’s Workers AI data policy states that it does not use customer content to train models or improve its or third-party services without explicit consent. We have not given that consent. Its public policy does not give a fixed retention duration for every operational use; we do not promise zero retention. Cloudflare’s privacy policy and applicable service terms also apply.
Apple App Attest verifies each installation before AI use. Our gateway stores an installation-specific public key, verification counter, revocation status and last-use time, plus request identifiers, times and allowance counts for abuse prevention and service limits. These records are linked to the installation, not an account or advertising identifier. They are not sent to the model as task content. Installation records expire after 90 days without activity; request records expire after 90 days and are removed during the next successful service cleanup. Aggregate daily/monthly budget totals contain no task text or installation identifier.
Permission is specific to this provider and policy version. You can decline and write your own steps, or withdraw permission in Settings to stop future requests. Withdrawal or local task deletion cannot recall a request already sent or immediately erase security records. For privacy requests, contact Emir; we may need information sufficient to locate and verify the relevant record without requesting your private task text. AI answers can be wrong: review and edit them before choosing to use them.
Website visits
Opening a web page sends your IP address, requested URL, time and browser information to the website server in Shanghai, China. Standard server access and error logs support delivery, security and troubleshooting. The current access-log configuration rotates daily and retains 14 rotated files; rotation timing and security investigations may affect how long a particular entry remains. These Small Step pages contain no advertising or analytics scripts, forms, tracking cookies or embedded third-party media. Other linked sites have their own policies.
Contacting support
If you email us, we receive your email address, message and any attachments you choose to send through Gmail. We use them to answer your request and resolve problems. Please avoid sending private task details unless needed. Correspondence may be retained to handle follow-up, disputes or legal obligations; contact us to request deletion. We do not sell your personal information or use it for cross-app advertising.
Your choices and requests
You can edit or delete local tasks, stop using voice, manage backups and choose whether to contact support. For access, correction, deletion or privacy questions about information we hold, email swifterfit@gmail.com. We respond as required by applicable law. We do not hold a backup of your task history and cannot restore it for you.
Children and changes
The app is not directed at children and we do not knowingly collect children’s information. Contact us if you believe a child has sent us personal information. Material changes will be explained here with an updated date; new cloud processing will require a separate choice in the app.
隐私政策
生效日期：2026年10月10日。适用 1.0（3）及后续版本和本产品、支持、隐私网页；AI 政策版本 cloudflare-20261010-v1。运营者：Emir；联系方式：swifterfit@gmail.com。小步面向 18 岁及以上成年人，用于开始日常任务，不提供医疗或诊断服务。
任务保存在本机
任务描述、小步、进度、日期、草稿以及语言和外观偏好均保存在设备本地。手动填写和预设示例不发送任务正文；下述云端 AI 为可选功能。App 没有账号、广告 SDK、追踪或云同步。
记录保留至你在 App 内删除任务或删除 App；删除任务也会移除其本地小步和进度。设备或电脑备份可能包含 App 数据，由你自己的备份设置控制，我们不能访问、恢复或远程删除这些备份。
可选语音输入
点击“开始录音”后才申请麦克风和语音识别权限，仅使用支持的设备及语言上的本地转写；无法本地识别时请改用文字。App 不保存录音，也不向我们的服务器上传录音。转写内容由你确认后放入任务。可随时在 iPhone 设置撤销权限。
可选 Cloudflare Workers AI
从 1.0（3）开始，只有你在 App 内明确同意后，当前任务描述、当前动作、最多五条相关已完成动作和语言才会经中国上海的中转服务器发送至 Cloudflare Workers AI。Cloudflare 使用全球网络，可能在你所在国家或地区以外处理，不承诺仅在美国处理。不会发送录音、照片或完整任务历史。请仅描述日常任务，省略不必要的姓名、地址、财务、医疗等敏感详情。
中转服务只在内存处理正文，不保存输入或回答，也不记录 API 访问日志。我们直接调用 Workers AI，没有启用 AI Gateway 正文日志或 Cloudflare 内容存储产品。Cloudflare 数据条款声明，未经明确同意，不会用客户内容训练模型或改进其自身或第三方服务；我们未给予此类同意。公开条款未为所有运行处理给出固定留存天数，因此不承诺零留存。同时适用其隐私政策及服务条款。
AI 使用前通过 Apple App Attest 验证安装。为防滥用和控制额度，中转保存安装专用公钥、验证计数器、撤销状态、最后使用时间，以及请求标识、时间和额度计数。这些信息与本次安装相关联，没有用户账号或广告标识符，也不会作为任务内容发送给模型。安装记录在连续 90 天不活跃后过期，请求记录在 90 天后过期，并于下一次成功的服务清理时删除；汇总日/月预算不含任务正文或安装标识。
同意只适用于指定服务商及政策版本。你可拒绝并手动填写，或在设置撤回以停止后续请求。撤回或删除本地任务无法收回已发送的请求，也不会立即删除安全记录。可联系 Emir 提出隐私请求；为定位和核实记录，可能需要必要的识别信息，无需提供私人任务正文。AI 建议可能出错，请检查、编辑后再使用。
访问网站
打开网页会将 IP 地址、请求网址、时间及浏览器信息发送到中国上海的网站服务器。访问和错误日志用于提供网页、维护安全和排错。当前访问日志每天轮转，保留 14 个轮转文件；实际轮转时间及安全事件处理可能影响个别记录的保留时间。小步网页没有广告、统计脚本、表单、追踪 Cookie 或第三方嵌入媒体；外部链接适用其各自政策。
支持邮件
你发邮件时，我们通过 Gmail 接收邮箱地址、正文和主动提供的附件，仅用于答复及排查问题。请避免发送不必要的私人任务详情。往来邮件可能为后续处理、争议或法定义务保留；你可联系申请删除。我们不出售个人信息，也不用于跨 App 广告。
选择与联系
你可编辑或删除本地任务、停止语音、管理备份，也可自行决定是否联系支持。就我们持有的信息提出查阅、更正、删除或隐私问题，请联系上述邮箱，我们会依法处理。我们不保存任务历史备份，无法代为恢复。
儿童与政策变更
本产品不面向儿童，不有意收集儿童信息；若你认为儿童曾向我们发送个人信息，请联系。重大变化会更新页面及日期，新云端处理会另行征求同意。