Legal
Privacy Policy
StepScribe is a recovery journaling product. Some of what you write is deeply personal. This policy explains what we collect, why, who sees it, and how you can delete it.
Who is responsible
Veritas Nexus LLC (an Arizona limited liability company) operates StepScribe. Contact: contact@pixelspacetech.com.
Three different products
- This marketing site (stepscribe.org) — public pages. No account.
- StepScribe Cloud (app.stepscribe.org) — hosted journal with an account, optional paid plan, and AI features.
- StepScribe Desktop — an open-source app that runs on your computer. We do not receive your journal from Desktop.
Marketing site (stepscribe.org)
Browsing this site does not require an account. We keep ordinary server and reverse-proxy logs (IP address, time, URL, user-agent) for security and operations. We do not run advertising pixels or sell this data. Links to GitHub, Stripe (for Cloud billing), and the Cloud app send you to those services under their own policies.
Desktop app
The Desktop edition is designed to keep recovery writing on your machine. It does not require an account on our servers. If you enable a local AI model (for example via Ollama), that processing happens on your computer unless you configure a remote model yourself. GitHub release checks from the download page may contact GitHub; that is GitHub’s policy, not a journal upload.
Cloud (app.stepscribe.org)
Account
To use Cloud you create an account with an email address, password, and optional display name. We hash the password. We send verification and password-reset mail from noreply@stepscribe.org. You may enable time-based multi-factor authentication (TOTP); the authenticator secret is stored encrypted.
Journal and recovery content
Entries, drafts, mood check-ins (“Inner Weather”), faith notes, about-me text, group journal content you join, AI sponsor conversations, and related memory are stored so the product can work. Sensitive text fields are encrypted at rest. We treat this material as private. Staff do not read journals for marketing. Access is limited to operating the service, security, billing support, and legal obligations.
AI features
If you use the AI sponsor or related memory features, relevant text you provide is sent to our configured inference provider (currently Ollama Cloud or a self-hosted Ollama endpoint) to generate a reply. Providers process that text to return a result. Do not put information in the AI chat that you are not willing to send to that processor. We do not use your journal to train a public model of our own.
Voice
Optional voice input may upload audio to transcribe it. Audio is used for that transcription and is not published.
Billing
Paid plans are processed by Stripe. Stripe receives the payment details you enter on Stripe’s forms, plus identifiers we need to attach a subscription to your account (such as email and a Stripe customer id). We do not store full card numbers on our servers. See Stripe’s privacy policy. Promo or access codes you enter are checked against our billing records.
Technical data
We store session tokens (including HTTP-only refresh cookies where used), last sign-in time, subscription status and trial dates, and server logs (IP, user-agent) for authentication, abuse prevention, and uptime. The Cloud app may sign you out after idle time to reduce the chance of someone else using an open session.
How we use Cloud data
- To provide the journal, sync, export, and AI features you ask for
- To create and secure your account, including email verification and MFA
- To bill, apply promo codes, and send transactional mail (not marketing blasts from this policy)
- To keep the service available and to investigate abuse or security incidents
We do not sell personal information. We do not use recovery journals for advertising.
Sharing
We share information only:
- With processors who help us run Cloud (hosting, email delivery, Stripe, AI inference, certificate issuance)
- If you export or share content yourself (for example a journal book download or a group journal)
- If required by law, or to protect someone’s safety in a genuine emergency
Retention and deletion
Cloud account data is kept while the account exists. You can export your journal and permanently delete your account from Settings. Deletion removes journal content and profile data we control; billing records Stripe is required to keep may remain with Stripe. Backups rotate on a schedule and will drop deleted data as those backups expire. Server logs are retained only as long as needed for operations and security.
Your choices
- Use Desktop instead of Cloud if you do not want a hosted account
- Skip AI, voice, and paid billing features
- Request access, correction, or deletion of Cloud account data by using in-app delete or emailing us
Depending on where you live (including the EU/UK GDPR and US state privacy laws such as the CCPA), you may have additional rights to know, delete, or opt out of sale/share. We do not sell personal information. To exercise a right, email contact@pixelspacetech.com.
Children
StepScribe is not directed at children under 13. We do not knowingly collect their information.
Not medical care
StepScribe is a journaling tool. It is not a substitute for professional medical advice, diagnosis, or treatment, and it is not a crisis service.
Changes
If we change this policy we will update the effective date on this page.
Contact
Veritas Nexus LLC · Arizona, United States
contact@pixelspacetech.com
· also published at app.stepscribe.org/privacy