Privacy Policy

Step ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the App.

1. Information We Collect

1.1 Information You Provide

During onboarding, we collect profile information that you voluntarily provide:

• Gender
• Age
• Height and weight
• Target weight
• Fitness goals (weight loss, stay fit, daily activity)
• Preferred walking plan

This information is stored locally on your device and is not transmitted to our servers.

1.2 Health & Fitness Data

The App accesses health and fitness data through Apple's HealthKit framework:

• Step count
• Distance walking/running
• Active energy burned
• GPS location data during active workout sessions only

1.3 Automatically Collected Data

We collect the following data through Firebase Analytics and Crashlytics:

• App usage patterns (screen views, feature interactions)
• Device information (model, OS version)
• Crash reports and performance data

This data is anonymized and cannot be used to identify you personally.

1.4 Purchase Information

Subscription purchases are processed by Apple's App Store. We receive the following purchase-related information:

• Subscription status (active/expired)
• Product identifier
• Transaction identifier
• Expiration date

We do not receive or store your payment card details. All payments are handled securely by Apple.

2. How We Use Your Information

We use the collected information for the following purposes:

• Step Tracking: To count your daily steps and display your progress
• Calorie & Fat Loss Estimation: To calculate estimated calories burned and fat loss based on your profile data and activity
• Workout Tracking: To record GPS routes, distance, pace, and duration during active workout sessions
• Personalized Goals: To tailor daily step targets to your fitness level and goals
• Subscription Management: To manage your premium access and entitlements
• App Improvement: To analyze usage patterns and fix crashes through Firebase Analytics and Crashlytics
• Notifications: To send daily step reminders (only if you opt in)

3. Data Storage & Security

All personal data is stored locally on your device using:

• SQLite (Drift): For profile data, daily activity records, workout sessions, and GPS route points
• iOS Keychain: For secure settings such as onboarding status, notification preferences, and subscription entitlements

We do not maintain a backend server that collects or stores your personal data. Your workout and activity data remains on your device.

4. Third-Party Services

The App integrates the following third-party services:

Apple HealthKit

We read and write step count, distance, and energy data through Apple HealthKit. HealthKit data is subject to Apple's privacy policies. We only access data you explicitly authorize during the permission request flow.

Firebase (Google)

We use Firebase Analytics and Crashlytics to understand app usage and improve stability. Firebase may collect:

• Device identifiers (IDFV)
• Operating system version
• Screen view events
• Custom events (e.g., purchase success, workout completion)

You can learn more about Google's privacy practices at policies.google.com/privacy.

Apple App Store

Subscription purchases and payments are processed by Apple. Apple's App Store privacy policy applies to all transaction data. We do not process or store payment information.

5. Location Data

Location data is collected only during active workout sessions that you manually initiate. We use CoreLocation to:

• Record your walking or running route on a map
• Calculate distance traveled during the workout

Location tracking is automatically stopped when you end a workout session. We do not track your location outside of active workouts, and we do not share location data with any third parties.

Location accuracy is set to "Nearest Ten Meters" to balance GPS precision with battery efficiency.

6. Data Sharing

We do not sell, trade, or rent your personal data to third parties. Data is only shared in the following limited circumstances:

• With Apple: HealthKit data read/write is managed through Apple's framework under your control
• With Firebase (Google): Anonymized analytics and crash data for app improvement
• As required by law: If we are legally obligated to do so

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will take appropriate steps to remove it.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data in a machine-readable format
• Opt-out: Disable analytics tracking through your device settings

To exercise any of these rights, please contact us at the email address provided below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically for any changes.

10. Contact Us