Privacy Policy

1. Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address and username.
• Profile Information: You may optionally upload a profile avatar.
• User-Generated Content: Group names you create when setting up leaderboard groups.

Health Data

Stepio accesses step count data from Apple HealthKit (iOS) and Google Health Connect (Android) to display your daily activity and enable leaderboard features.

Your step count data is transmitted to and stored on our servers (hosted by Supabase) to enable the following features:

• Real-time leaderboard rankings with friends and groups
• Cloud backup and sync across multiple devices
• Social features such as sharing progress with friends

You can revoke health data access at any time through your device settings (Apple Health or Google Health Connect).

Automatically Collected Information

We do not currently collect analytics, crash reports, or usage statistics. This may change in the future, and we will update this policy accordingly.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your username, avatar, and step counts on leaderboards visible to other users
• Enable social features such as groups and friend connections
• Communicate with you about your account or the App
• Improve and develop new features for the App

3. Information Shared With Others

Other Users

When you use Stepio's social features, the following information is visible to other users:

• Username
• Profile avatar
• Step counts (on leaderboards)
• Group memberships

Third-Party Services

We use the following third-party services:

• Supabase: For authentication, database services, and storing your step count data. Your email, username, and step counts are stored on Supabase servers. See Supabase Privacy Policy.
• Apple HealthKit / Google Health Connect: To read step data from your device, which is then synced to our servers as described above. Access is governed by Apple's and Google's respective privacy policies.
• Google AdMob: For displaying contextual advertisements. AdMob may collect device identifiers and ad interaction data. We do not share your personal information with AdMob for ad targeting. See Google Privacy Policy.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Advertising

Stepio displays advertisements through Google AdMob. These ads are contextual (non-personalized), meaning they are not based on your personal information or browsing history.

Regarding advertising:

• We do not share your personal information with advertisers for ad targeting purposes
• AdMob may collect device identifiers and information about your interaction with ads
• You can learn more about Google's advertising practices in the Google Ads Help Center

5. Push Notifications & Email

We do not currently send push notifications or marketing emails. We may introduce these features in the future. You will be able to opt out of marketing communications at any time.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure.

8. Children's Privacy

Stepio is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@getstep.io.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

To exercise these rights, contact us at support@getstep.io.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights regarding their personal information. We do not sell personal information.

10. Account Deletion

You can request deletion of your account at any time through the Profile section in the App. Upon deletion, we will remove your personal data within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

SW Software LLC
Email: support@getstep.io