Legal
Privacy policy
How StepWise collects, uses, shares, retains, and protects personal and study data.
Effective July 19, 2026 · StepWise, operated by Muzzammil Hussain
Data we collect
We collect account identifiers (name, email, verification state), study content and responses, blocks, flashcards, planner preferences, referral relationships, subscription and order records, support messages, and security/audit events. Optional analytics are loaded only after consent. Do not place sensitive medical records or payment credentials in free-text fields.
How data is used
We use data to authenticate users, deliver question practice and explanations, calculate personal progress, apply trial and subscription entitlements, prevent abuse, process payments, send transactional email, answer support requests, and maintain reliability. We do not sell question-level history or use it for third-party advertising.
Processors and sharing
StepWise uses Appwrite for authentication, database, and storage; Vercel for hosting; Resend for transactional email; and Safepay for payment processing when checkout is enabled. These providers receive only the data needed for their function. We may disclose information when required by law or to protect users and the service.
Shared peer analytics
A verified referral relationship unlocks shared error analytics only when both peers have explicitly opted in. The algorithm requires at least three eligible profiles and at least 20 questions per profile before aggregates unlock. Results are thresholded aggregates; names, question-level history, raw answers, and individual scores are not returned. Revoking consent deactivates the link and removes it from future aggregates.
Retention and your choices
Account and learning data are retained while your account is active and normally for up to 30 days after a verified deletion request, subject to legal holds. Security logs are retained for up to 12 months; financial and referral records for up to 7 years; encrypted backups may persist for up to 90 days. You may request access, correction, export, deletion, or consent withdrawal by emailing support@stepwise.page.
Security and international processing
We use least-privilege server access, encrypted transport, provider security controls, signed payment webhooks, and audit records. No online system is risk-free. Service providers may process data in countries outside your location; we require contractual and technical safeguards appropriate to the service.
Questions or corrections?
Contact support@stepwise.page. For billing issues, include your order reference and never send a password or payment secret.