01Who we are
42Step is a software company building mobile and web products for developing markets. In this policy, “42Step”, “we”, “us” and “our” mean 42Step; “you” means anyone who visits this website or uses one of our products.
For anything in this policy, you can reach us at baraka@42step.com.
02What this policy covers
This policy covers 42step.com and the 42Step apps and services that link to it. Individual products may publish an additional notice that explains anything specific to that product; where they do, that notice adds to this one rather than replacing it.
03Information we collect
We keep collection to what a service actually needs to work.
Information you give us
- Contact details and message content when you email us or fill in a form — typically your name, email address, and whatever you choose to write.
- Account details if you create an account in one of our products — such as a name, phone number, or email address.
Information collected automatically
- Standard server and security logs: IP address, browser and device type, the pages or screens requested, and the date and time. This is what lets us serve the site, spot abuse, and fix faults.
What we don’t collect
- We don’t ask for sensitive personal information — such as health, religious, or biometric data — and you shouldn’t send it to us.
- This website has no advertising pixels, no third-party trackers, and no cross-site profiling.
04How we use information
We use the information above only to:
- reply to you and provide the service you asked for;
- operate, maintain, and secure our website and products;
- understand faults and improve how our products work in aggregate;
- meet legal, accounting, or regulatory obligations.
We don’t use your information to build advertising profiles, and we don’t make decisions about you by automated means that have a legal or similarly significant effect.
05We don't sell or share your data
42Step does not sell, rent, or trade personal information, and we do not share it with third parties for advertising, marketing, or profiling. Ever.
There are four narrow exceptions, and none of them involve selling anything:
- Service providers. Infrastructure we run on — hosting, content delivery, email delivery, error reporting — necessarily processes data on our behalf. They act on our instructions, may only use the data to provide their service to us, and may not use it for their own purposes.
- At your request. When you explicitly ask us to share something, for example connecting an account you own.
- Legal obligation. Where we are required by valid law or court order, or where it is necessary to protect the rights, safety, or property of users, the public, or 42Step.
- Business transfer. If 42Step is ever involved in a merger, acquisition, or sale of assets, data may transfer as part of it. We will say so beforehand, and this policy continues to apply until you are given notice of any change.
06Signing in with a third-party account
Some of our products let you sign in with an account you already have, such as Facebook, Google, or Apple. If you choose that option, we receive only the basic profile details you approve — typically your name, email address, profile picture, and the account identifier issued by that provider — and we use them solely to create and secure your 42Step account.
- We never receive or store your password for that account.
- We don’t post, message, or take any action on your behalf on those platforms.
- We don’t request friend lists, contacts, or any permission beyond what sign-in requires.
You can disconnect the provider at any time from that provider’s own settings, or ask us to remove it (see deleting your data).
08How long we keep it
We keep personal information only as long as it serves the purpose it was collected for. In practice: correspondence for as long as it is useful for the conversation and any follow-up, account data for as long as the account is active, and security logs for a short rolling period. After that we delete it, or anonymise it so it can no longer be linked to you.
09Your rights and choices
You can ask us at any time to:
- tell you what personal information we hold about you;
- give you a copy of it;
- correct anything that is wrong or out of date;
- delete it;
- stop or limit a particular use of it.
Email baraka@42step.com and we will respond within 30 days. We won’t charge you for this, and we won’t treat you differently for asking. Depending on where you live, local data protection law may give you additional rights, including the right to complain to a data protection authority.
10Deleting your data
To have your data deleted, email baraka@42step.com with the subject line “Data deletion request”, telling us which product or account it concerns. If a product has an in-app delete option, you can use that instead — it does the same thing.
We will verify that the request comes from you, delete your personal information and any account created through a third-party sign-in, and confirm once it is done — normally within 30 days. We may retain a minimal record where the law requires it (for example, transaction records for tax purposes), and anonymised data that can no longer identify you may remain in aggregate statistics.
11Security
We protect data with encryption in transit, access controls that limit who on our side can see it, and infrastructure kept current with security updates. No system is perfectly secure, so we also keep the amount of data we hold small on purpose. If a breach ever affects your personal information, we will notify you and the relevant authority as required by law.
12Children
Our website and products are not directed at children under 13, and we do not knowingly collect their personal information. Where local law sets a higher age of digital consent, that higher age applies. If you believe a child has given us personal information, contact us and we will delete it.
13Where your data is processed
42Step operates internationally and our infrastructure providers run servers in several countries, so your information may be processed outside the country you live in. Wherever it is processed, it stays subject to this policy and to appropriate contractual safeguards with our providers.
14Links to other sites
Our site may link to services we don’t operate. We aren’t responsible for their content or their privacy practices — read their policies before giving them your information.
15Changes to this policy
If we change this policy we will update the date at the top of the page. For material changes we will give clear notice on this site, and in-product where relevant, before they take effect.
16Contact us
Questions, requests, or complaints about privacy go to baraka@42step.com. We read every message.