Privacy policy

Who we are

Steelman is made by Ohad Gadassi, an independent developer based in Israel. “We” and “us” in this policy mean them. This policy covers the website at playsteelman.vercel.app and the Steelman app for iPhone and Android. Questions or requests: playsteelman@gmail.com.

What we collect on this website

• The waitlist, if you join it: your email address, whether you offered to test the app, which of our links brought you (for example, the link on our TikTok profile), which page you joined from, and when.
• Visit counts. Vercel Web Analytics records the pages viewed, the site that sent you, and general information about your device, browser, operating system and country. It doesn’t use cookies, and it doesn’t identify you or follow you to other sites.
• Hosting data. Our host, Vercel, processes technical data such as IP addresses to deliver the site and keep it secure.

This website doesn’t set cookies.

What we collect in the app

• Your account: your email address, how you sign in (email and password, Google or Apple), and a name if you add one or your Google or Apple account shares it. If you use Sign in with Apple and hide your email, we only get Apple’s relay address. Passwords are stored by our sign-in provider in a form no one can read, including us.
• Your progress: lessons, answers, scores, streaks and settings, so your progress is saved and follows you to your other devices.
• How the app is used: a short record when you do something in the app, such as opening it, starting or finishing a round, opening a lesson, answering the Daily Challenge or viewing the Pro plans. Each record holds your account ID, your platform, the app version and the time. It never includes your name, your email or anything you type.
• Two optional questions, if you answer them: how you heard about Steelman, and a week later, how likely you are to recommend it and three words you’d use for it. You can skip both.
• Purchases. Pro is bought through the App Store or Google Play. RevenueCat, our subscription service, tells us which plan you have and when it renews or ends. We never see your card or payment details.
• Support emails: your email address and what you wrote, if you contact us.

How we use it

• To run the app: signing in, saving and syncing your progress, and unlocking Pro.
• To email you: launch news and testing invitations if you joined the waitlist, and account emails such as sign-in codes and password resets. Every waitlist and marketing email has an unsubscribe link.
• To improve Steelman: which features are used, where people get stuck, and which of our links bring people who stay. We look at these numbers in total, not to watch individuals.
• To keep the app and site secure, and to fix problems.

Where the law asks for a legal basis (for example, in the EU and UK), we rely on your consent for the waitlist, the optional questions and marketing emails; on our contract with you to run your account and purchases; and on our legitimate interest in improving and securing Steelman for usage records. You can object to that last use by emailing us.

What we don’t do

• We don’t sell or rent personal data, or share it for advertising.
• We don’t show ads or use advertising tools, and we don’t track you across other companies’ apps or websites.
• We don’t make automated decisions about you that have legal or similar effects.

Who processes data for us

• Supabase: our database and sign-in (accounts, progress, usage records, answers, the waitlist).
• Vercel: hosts this website and counts visits.
• RevenueCat: keeps track of subscriptions.
• Apple and Google: the app stores, payments, and Sign in with Apple and Google.
• Google (Gmail): sends our emails.

They use the data only to provide their service to us. Some of them process data in the United States or other countries; where the law requires it, those transfers are covered by safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

• Waitlist: until you unsubscribe or ask us to delete it, and no longer than 12 months after the app launches.
• Your account, progress, usage records and answers: while you have an account. When you delete your account, they’re deleted within 30 days, unless the law requires us to keep something.
• Purchase records: kept by Apple, Google and RevenueCat under their own policies and tax rules.
• Support emails: up to two years.

Your choices and rights

• Delete your account in the app: Profile, then Account, then Delete account. Your progress is deleted with it.
• Unsubscribe from any waitlist or marketing email with the link at the bottom.
• Ask to see, correct, export or delete your data, or to stop a particular use of it, by emailing playsteelman@gmail.com. We’ll answer within 30 days.
• You can also complain to a data protection authority: in Israel, the Privacy Protection Authority; in the EU or UK, the authority where you live.
• California residents: we don’t sell or share personal information as the California Consumer Privacy Act defines those terms. You can ask to know, correct or delete your information, and we won’t treat you differently for asking.

Children

Steelman isn’t meant for children under 13, and we don’t knowingly collect their data. Where the law sets a higher age for agreeing to this on your own, you need a parent’s or guardian’s permission to create an account. If you believe a child under 13 has given us personal data, email playsteelman@gmail.com and we’ll delete it.

Security

Data is encrypted on its way to and from our servers. Each account’s data is protected so that no one else can read it through the app, and the waitlist can’t be read through the website at all. Only the developer can access the stored data. No system is perfectly secure, but we take reasonable care.

Changes

If this policy changes, we’ll update the date at the top. If a change is significant, we’ll tell you in the app or by email before it takes effect.