Next Step data processing, storage and your choices.
Updated: September 13, 2026
Next Step is operated by Henry Koskinen. For privacy and support, contact info@yhdessapeli.fi. This policy covers the Next Step 1.0 iPhone app and its Apple Watch companion.
Your name, age, height, weight, goals, questionnaire answers, food and workout entries, recipes, favourites and settings are stored locally on your iPhone. They are used on your device to display your diary, summaries and goal estimates. The app does not send this information to the operator. This version does not require an account or provide cloud sync.
Apple handles payment and your Apple Account information. The app uses Apple-verified purchase information to check the product, subscription validity, expiration and renewal status. Payment-card details are not passed to the app. Subscription verification does not send your diary, profile or Health data to Apple or the operator. The app does not send purchase receipts to the operator or maintain an operator-managed subscriber database. Apple’s store services follow Apple’s privacy policies.
Your paired Apple Watch receives daily calorie totals and budget, protein amount and target, date, update time, selected language and whether setup is complete. The summary is cached locally on the watch for the app and watch-face complications. Food names, profile information, weight, raw Health records and diary history are not transferred to the watch. The operator does not receive the summary and it is not sent to our server. Deleting all your data on iPhone clears the watch summary on the next connection. While disconnected, the watch may retain its previous same-day summary until it reconnects. The watch also receives the verified Plus expiration time. Nutrition summaries are hidden without an active subscription.
When you type in food search or scan a barcode, your search terms or the product barcode are sent to Open Food Facts (world.openfoodfacts.org and search.openfoodfacts.org). It also receives your connection’s IP address and a general app identifier. We do not attach your name, profile, weight, diary or an advertising identifier. The Open Food Facts privacy policy, updated in June 2026, states that visit IP addresses and logs are retained for three years for security, technical analysis and popularity measurement. Open Food Facts is responsible for its own processing; its privacy rights contact is privacy@openfoodfacts.org. You can log your own foods without online search.
Camera access is requested when you open the barcode reader. It is used to read product barcodes. Images and videos are not stored or transmitted. You may deny access and type a barcode in the search field.
You may grant permission to read workouts from Apple Health. Import is started by you in the workout view. Workout type, time, duration, distance, energy and a technical identifier are copied to your local diary. If you enable workout calories, the energy is added to your daily calorie budget. The app does not write Health data, use it for advertising or send it to a server. You may revoke access in Apple Health. Revoking access alone does not remove previously imported copies; you can delete these in Next Step settings.
Local data remains until you delete it. Settings → Other settings → My data offers JSON export and deletion of all local data. Individual entries or just imported Health workouts can also be deleted. Deletion does not remove original Apple Health records or export copies you keep elsewhere. Export includes personal data and any imported workouts; you choose its destination and recipients. The temporary export file is removed from the app cache after sharing. The app does not back up the diary to a cloud service and does not promise automatic recovery when you change phones. Importing export files is not supported in this version.
The app has no advertising, ad tracking or separate usage analytics. If you send a support message, we process the contact details and message you provide to handle your request, based on our legitimate interest in providing support. Do not include health information or your full diary. Support messages are kept as long as needed to handle the request and any related claims. Website cookies, analytics and contact channels are described separately in the website policy.
You can edit, export and delete your local information in the app. The operator cannot access your local diary. For information you send to the operator, you may request access, correction, deletion or restriction and object to processing based on legitimate interests by contacting the address above. Rights may be subject to legal limitations. You may lodge a complaint with your data protection authority.
Choose optional cookies: Google analytics helps improve the site. Meta Pixel measures advertising and supports personalised ads on Facebook and Instagram. You can change your choices in the footer. Privacy Policy