Privacy Policy

1. Who we are

OneStep is a productivity and focus application operated by Mosia Marate in South Africa.

OneStep helps users check in with their mood, choose one task, run a focus session, reflect afterwards, and review their focus history.

For questions about this Privacy Policy or your personal information, contact us at mosiamarate@gmail.com.

2. Information we collect

The information OneStep handles depends on the features you use.

Account information

• Your name or display name.
• Your email address.
• Your Firebase user identifier.
• Your sign-in provider, such as email and password or Google sign-in.
• Your account creation and update dates.

Information you add to OneStep

• Mood selections before and after focus sessions.
• Optional mood or reflection notes.
• Tasks you create.
• Selected focus-session durations.
• Completed, reset, or ended focus sessions.
• Focus-session history and progress information.
• Preferences and settings that may be added in the future.

Technical information

Our technology providers may automatically process information needed to operate and secure the service. This can include IP addresses, browser or device information, authentication logs, request logs, security events, and general usage information.

3. Mood information and sensitive content

Mood selections and optional notes may reveal personal or sensitive information about how you feel. Adding a mood note is optional.

Please avoid entering medical diagnoses, emergency information, or other highly sensitive information that is not necessary for using OneStep.

OneStep is a productivity tool. It is not a medical, counselling, psychological, or emergency service.

4. How we use information

We use information to:

• Create and manage your account.
• Authenticate you and keep your account signed in.
• Save your moods, tasks, sessions, and history.
• Display personal dashboard statistics and progress.
• Provide password reset and account-security features.
• Operate, maintain, troubleshoot, and secure OneStep.
• Respond to questions and support requests.
• Understand and improve how OneStep works.
• Comply with applicable legal obligations.

We process personal information with your consent, to provide the service you request, for legitimate operational and security purposes, and where otherwise permitted or required by applicable law.

5. Service providers

OneStep uses third-party providers to operate the application.

Google Firebase

Firebase provides authentication, Google sign-in, password reset, database storage, and related security services. Information processed through Firebase may be processed outside South Africa, including in the United States.

Vercel

Vercel hosts and delivers the OneStep web application. Vercel may process technical information required to provide hosting, security, performance, and request-delivery services.

These providers process information according to their own legal terms, privacy notices, and data-processing arrangements.

6. When information may be shared

We do not sell your personal information.

Information may be shared only where reasonably necessary:

• With providers that operate OneStep on our behalf.
• To protect the security, rights, and integrity of OneStep.
• To investigate fraud, abuse, or unlawful activity.
• When required by law, regulation, or a lawful authority.
• As part of a lawful business transfer, restructuring, or change of ownership.

7. Browser storage and cookies

OneStep and its providers may use essential browser storage, authentication tokens, cookies, IndexedDB, local storage, cached files, or service-worker storage.

These technologies may be used to keep you signed in, remember app state, support PWA installation, improve performance, detect updates, and protect the service.

OneStep does not currently use personal information for third-party advertising.

8. Data storage and international processing

OneStep is operated from South Africa, but Firebase, Vercel, and their providers may store or process information in other countries.

Where personal information is transferred internationally, we take reasonable steps to use providers and arrangements intended to protect that information in accordance with applicable law.

9. How long we keep information

We retain account information and user-created content while your account remains active or while it is reasonably needed to provide OneStep.

Some information may be kept for longer where necessary for security, fraud prevention, legal compliance, dispute resolution, or backup recovery.

You may request account and data deletion by contacting mosiamarate@gmail.com.

10. Security

We use reasonable technical and organisational safeguards intended to protect personal information. These may include authentication, access-control rules, secure connections, and security features provided by Firebase and Vercel.

No online system can guarantee complete security. You are responsible for keeping your password confidential and for protecting access to your email account and devices.

11. Your privacy rights

Subject to applicable law, you may have the right to:

• Ask whether we hold personal information about you.
• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of information where legally permitted.
• Object to or restrict certain processing.
• Withdraw consent where processing depends on consent.
• Submit a complaint to the Information Regulator.

To submit a request, email mosiamarate@gmail.com. We may need to verify your identity before processing the request.

You may also learn about privacy complaints through the South African Information Regulator.

12. Users under 18

Users under 18 should use OneStep only with permission from a parent or legal guardian who is legally able to provide consent.

If we learn that a child’s personal information was processed without the required permission or another lawful basis, we may restrict the account and delete the information where appropriate.

A parent or guardian may contact us at mosiamarate@gmail.com with a privacy request.

13. Changes to this policy

We may update this Privacy Policy when OneStep’s features, providers, or legal obligations change.

When changes are important, we may notify users through the application, an update notice, email, or an updated date on this page.

14. Contact

Privacy questions and requests can be sent to: