What we collect
- Account: email and a hashed password (handled by Supabase).
- Profile: name, age (optional), values, strengths, frustrations, stability scores, MTP, discoveries, journal entries, conversations, check-ins, and roadmap items — everything you generate inside the app.
- Standard request metadata (IP, user agent, timestamps).
Where it goes
- Supabase — your account and profile data live in a Supabase project. Row-level security ensures only you can read your own rows.
- OpenAI — when you generate a snapshot, hold a discovery conversation, or save a journal entry, the relevant content is sent to OpenAI for inference under their API terms. We do not opt into OpenAI's training pipelines.
- That's it. No third-party advertising, no analytics that share your inputs.
Why we collect it
- To run the service and produce the AI output you're asking for.
- To let you continue your profile across sessions and devices.
- To debug and improve North Step (aggregate, non-identifying patterns only).
Your rights
- Access — everything you've created is visible inside the app, plus exportable as a Markdown Founder Brief.
- Reset (Settings, Reset everything) wipes your profile, journal, conversations, check-ins, roadmap, and the stored copy of your generated snapshot. Your login stays so you can start over.
- Delete (Settings, Delete my account) permanently removes your login and everything above. It cannot be undone, and we keep no copy.
Security
We use industry-standard encryption in transit (HTTPS) and at rest (Supabase-managed Postgres). We don't store API keys or payment data on the user side; OpenAI calls go through a server route so the key stays server-side.
Children
North Step is not directed at children under 16 and we don't knowingly collect data from them.
Where we operate
Oldman AI Solutions Inc. is based in Alberta, Canada, and handles personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). Data is stored on servers run by our hosting providers, which may be located outside Canada, and your conversations are processed by OpenAI.
Contact
greg@oldmanaisolutions.com