Step Two is designed with your right to privacy in mind. Step Two does not collect any usage or analytics information. None of your data in Step Two ever even leaves your device unless you use iCloud.
Step Two uses iCloud (specifically CloudKit) to securely back up your in-app preferences and two-step codes, and make them available on all your devices. CloudKit encrypts your data in transit and at rest on Apple’s servers. Using iCloud with Step Two is an optional feature and can be turned off at any time. You can also remove your data from iCloud at any time through the Settings app on your iPhone or iPad, or through System Preferences on your Mac. Furthermore, I (the developer of Step Two) have no access to any of your data in iCloud, as Apple does not give developers access to data in a user’s private CloudKit database.
This website collects basic, anonymized analytics information, such as information about your device hardware, operating system, browser, and IP address. IP address logs are deleted after 7 days. Other analytics information may be stored indefinitely.
Feel free to contact me if you have any questions.
Last updated on April 4, 2019.