One Small Stride

Privacy policy

Last updated 11 October 2026

One Small Stride is the home of your practices. In Strength it keeps a record of your training, food, sleep and recovery from the short updates you speak; in Yoga it keeps the practices you do and how they went. That record is personal, and some of it is health information. This page explains what we collect, why we collect it, who else handles it, and how you stay in control of it.

The short version

We collect what you tell One Small Stride so that we can keep your record. We do not sell it, and we do not use it for advertising.
Your voice is turned into text so the app can fill your record. We do not keep your recordings on our servers after they are transcribed.
Your Strength coach sees your Strength plan and record, apart from any habit you keep private. Your Yoga is yours alone. Nobody else in the app sees either.
A small number of service providers process your data on our behalf. The kinds of provider are listed below, and we will name them if you ask.
You can ask to see, correct, export or delete your data at any time by writing to hello@onesmallstride.com.

Who we are

One Small Stride is a research preview. It is being piloted with a small group of people and coaches, and you can use it at app.onesmallstride.com and in the One Small Stride apps. It holds two practices so far: Strength, which you follow with a coach or on your own, and Yoga, which you practise on your own. One Small Stride (“we”, “us”) is the name it runs under. There is no company behind it yet: the preview is run by an individual based in Ireland.

The person who runs the preview is the controller of the personal data described here. This means they decide how and why it is used. If a company is formed to run One Small Stride, it will take over that role, and we will tell you before it does. You can reach us at hello@onesmallstride.com about anything on this page.

This policy covers onesmallstride.com, One Small Stride on the web and on phones, and the emails that One Small Stride sends.

What we collect

Your account

Your email address, your name and your password. The password is stored only as a secure hash, and we cannot read it.
If you sign in with Google or Apple, the name and email address that the service shares with us.
Which practices you keep, whether you use Strength as a person following a plan, as a coach, or as both, and which coach or client you are connected to.
Invitations. When a coach invites you, we store your email address and the invitation until you accept it or it expires after 30 days.

Your plan and your record

The plan you build with your coach, including exercises, targets, meals and daily habits.
What you log: sets, reps, weights, distances and times; meals and portions; sleep; body measurements such as weight; daily check-ins, reflections and notes.
The text of each spoken update, and the entries One Small Stride filled from it, including where each value came from (spoken, carried from your plan, or carried from your last session) and how sure the app was.
Notes and plan changes that you or your coach add.

Your Yoga

How you like to practise: when you like, on set days and for a set length, or towards a pose you are working on, with the goal in your own words.
Each practice you do: when, how long, what kind and what it focused on, and how far you got.
What you tell us afterwards, if you choose to: how it felt and anything you noticed (for example “my right hip was tight”), which shapes what the app suggests next, and the tries you log towards a goal pose.
Flows you change or save, and the days and time of any Yoga reminder.

Lily’s voice in Yoga is recorded in advance. When you play a flow, our server joins her recorded sentences into one audio file for that flow; nothing you say is recorded, and the file holds nothing about you.

Much of this is health data, which the law treats as a special category of personal data. We hold it only to run One Small Stride for you, and we protect it accordingly.

Your voice

When you tap the microphone, One Small Stride records what you say and sends the audio to our speech-to-text provider, which returns the words. If you have no connection, the recording waits on your device and is sent when the connection returns. We keep the transcript and the record filled from it, and we do not store the audio on our servers.

Reminders and notifications

If you turn on reminders, we store the times you chose and a notification token that your phone or browser gives us so we can deliver them.

Technical data

Your IP address, browser and device type, and the times of your requests, which our servers log for security and to fix faults.
Information stored on your own device: your sign-in session, and any updates queued while you are offline. These stay on your device and are not used to track you.

We do not use advertising cookies, tracking pixels or third-party analytics. The pages on onesmallstride.com load their fonts from Google Fonts, which means Google receives your IP address when those pages load.

How we use it, and our legal basis

To run One Small Stride for you. This covers keeping your account, turning your spoken updates into your record, showing your progress, sharing it with your coach and sending the emails and reminders you expect. Our legal basis is our contract with you.
To process your health data. We rely on your explicit consent, which you give by ticking the consent box when you create your account or the first time you sign in. It covers running One Small Stride for you and improving it during the research preview. You can withdraw it at any time by deleting your account, although One Small Stride cannot work without it.
To keep One Small Stride safe and working. This covers preventing abuse, securing accounts, fixing faults and checking that the app fills records correctly. Our legal basis is our legitimate interest in running a reliable, secure service.
To meet legal duties, such as answering a lawful request from an authority.

We use automated tools, including AI language models, to read your transcript against your plan and fill your record. When the app is unsure of a value, it asks you instead of guessing. These tools fill in your log. They make no decisions about you that have legal or similarly significant effects.

We will not sell your data, use it for advertising, or share it with anyone for their own marketing.

Who can see your data

You.
Your coach. A Strength coach you are connected to can see your Strength plan and record, and can edit your plan. They cannot see a habit you have made private. Yoga has no coach: your coach sees nothing of your Yoga. Access is enforced in our database, so the rule holds even outside the app screens. When the connection ends, they lose access.
Our service providers, listed below. They process data only on our instructions and under contracts that require them to protect it.
Authorities, if the law requires us to share it.
A buyer or successor, if One Small Stride is ever sold or merged. They would be bound by this policy, and we would tell you first.

Service providers

Kind of provider	What it does for us	What it sees
Hosting and database	Runs our servers, stores your data and handles sign-in	Your account, plan and record
Speech to text	Turns your spoken updates into words	The audio of your spoken updates
AI models	Fill your record from your words and check the result	Transcripts, your plan and recent entries
Email	Sends our emails and receives yours	Your email address, name and messages
Sign-in with Google or Apple	Signs you in, if you choose it	That you signed in to One Small Stride
Push notifications	Deliver your reminders	A notification token and the reminder text

Write to us for the current list of providers by name.

International transfers

Some of our providers are based in, or store data in, the United States. When your data leaves the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified under it, and on the EU Standard Contractual Clauses where it is not.

How long we keep it

We keep your account, plan and record for as long as your account is open, because that history is what One Small Stride shows you.
When you delete your account, we delete your data within 30 days. Copies in our backups are overwritten within a further 30 days.
We keep server logs for no more than 30 days.
An invitation that nobody accepts expires after 30 days.
We keep data for longer only when the law requires it.

Your rights

Under the EU General Data Protection Regulation (GDPR), you can:

ask for a copy of your data;
correct anything that is wrong (you can also correct any logged value in the app);
have your data deleted;
receive your data in a portable, machine-readable format;
object to, or ask us to restrict, how we use it;
withdraw your consent at any time.

To use any of these rights, write to hello@onesmallstride.com from the email address on your account. We will reply within one month. If you are unhappy with our answer, you can complain to the Data Protection Commission in Ireland at dataprotection.ie, or to the data protection authority where you live.

How we protect it

Data is encrypted in transit and at rest. Access rules sit in the database itself, so each person reaches only their own record and their coach reaches only their clients’ records. Only the people who run One Small Stride can reach the systems behind it, and only when they need to. If a breach ever puts your data at risk, we will tell you and the regulator as the law requires.

Children

One Small Stride is only for adults aged 18 or over, and by creating an account you confirm that you are. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete its data. If you believe this has happened, please write to us.

Changes to this policy

We may change this policy at any time. The new version applies from the date at the top of this page. We will not use data you have already given us for a new purpose without telling you first and, where the law requires it, asking for your consent.