1st Step is a mobile app for learning practical, income-relevant skills — AI, media buying, web development, copywriting, and more. This page explains, plainly, what information we collect, how it's used, who we share it with, and how you can delete it.
This policy applies to everyone who uses the 1st Step mobile app on Android or iOS. It's written by the team that builds and operates the app, not a template — every practice described below reflects what the app actually does today.
| Category | What we collect | Why |
|---|---|---|
| Account | Email address and password (or a magic-link sign-in), handled by our authentication provider, Supabase | To create and secure your account, and let you sign back in |
| Profile | Display name (optional), preferred language (Arabic/English), your current skill and learning path | To personalize the app and show content in your language |
| Learning activity | Onboarding answers, lesson/quiz progress, completed challenges, certificates issued | To track your progress and unlock the right content |
| Community content | Posts, comments, likes, and chat messages you choose to publish in the Community section | To run the Community features you actively participate in |
| Device & network | Basic connectivity status (online/offline) | To show accurate loading and error states |
We do not collect your location, contacts, camera roll, or microphone — the app has no code that accesses any of these.
1st Step is built on a small number of third-party infrastructure providers. We don't build our own servers from scratch — here's exactly who processes your data and why:
Supabase hosts our database, handles sign-in, and stores everything described in section 2. Access to your data is restricted by database-level security rules (row-level security) so that, by design, you can only read and write your own data through the app.
Not active in this release The app includes support for optional paid plans in the future, via RevenueCat and Google Play's / Apple's billing systems. In the current release, no payment feature is enabled and no purchase data is collected or transmitted — this section will be updated with specifics if and when payments are turned on.
Lesson videos are hosted on YouTube. Playing a video sends standard playback requests to YouTube's servers, subject to Google's own privacy policy.
You can permanently delete your account at any time, directly in the app: Settings → Delete account. This immediately and permanently removes your profile, learning progress, certificates, and community posts/comments/messages — deletion cascades across every table tied to your account, it isn't a soft "hide."
If you no longer have the app installed, you can request deletion the same way described on our account deletion page.
Note on backups: like most cloud-hosted services, our infrastructure provider retains routine, encrypted operational backups for a limited period after deletion, purely for disaster-recovery purposes — these are not accessible through the app or used for any other purpose, and are cycled out automatically.
Wherever you're located, you can ask us to:
To exercise any of these, use the in-app options where available, or contact us using the details below.
1st Step is intended for people who are old enough to start building a career or income-earning skill, and is not directed at children under 13. We don't knowingly collect personal information from children under 13; if you believe a child has provided us with personal data, contact us and we'll remove it.
Our infrastructure providers may process and store data in countries other than your own. Wherever your data is processed, we require it to be handled consistently with this policy.
If we make material changes to this policy, we'll update the effective date at the top of this page. Significant changes affecting how we handle your data will be communicated in the app.
Questions about this policy or your data? Reach out — a real person reads this inbox.