In plain English: what we collect, where it goes, and how to get it removed.
Last updated 12 August 2026
When you sign in with Google we receive your name, email address and profile picture, and store them so we can show you your account and keep you signed in. We never see your Google password.
We store the material you create: your pages, the questions you ask, and the quizzes and flashcard decks generated from them.
Your account and your workspace content are held in our Supabase database. Access is restricted so that you and the people you invite into a workspace are the only ones who can read its content.
To answer a question or generate a quiz or deck, we send the relevant pages from your workspace to a large language model provider, such as OpenAI or Google. This happens only when you ask for it, and only the material needed for that request is sent.
Paid plans are handled by Paddle, which acts as merchant of record. Card details are entered with Paddle and never reach our servers — we only receive the status of your subscription.
We use PostHog to understand which parts of the product get used and where people get stuck. This covers page views and feature usage, not the contents of your notes.
You can delete a workspace at any time, which removes its pages, quizzes and decks. If you want your account and everything in it deleted, or a copy of your data, email us and we will take care of it.
Anything about your data, ask us at hello@onestepa.day.
Your notes, turned into answers, quizzes and flashcards. Built for the way students actually revise.