Privacy policy

Last updated 5 November 2026 · draft — have it reviewed before launch.

What we collect

• Account: your name, email address (or the ID Apple/Google gives us when you sign in with them), an avatar colour and, if you add one, a profile photo.
• Health data you allow: daily totals of steps, distance, active energy, exercise minutes, sleep and water from Apple Health or Health Connect. We read daily totals only, never raw samples.
• Messages: group chat messages and direct messages you send in Stepr, plus any reports you file.
• Location, only when you record a walk: the route points of that walk (see Walk routes below).
• Motion data: step counts from your phone’s motion sensor while you have a challenge screen open (see Live step counting).
• What you create: groups, challenges, checklist ticks and water or calorie entries.
• Technical and security logs: request logs (IP address, time, endpoint) and an audit log (see Logs below).

How we use it

Only to run Stepr: show your progress, rank you in challenges you join, let group members chat and see each other on leaderboards, and keep the community safe. Members of your groups and challenges see your name, profile photo or avatar colour and the score for that challenge — not your email or other health data.

We don’t sell your data, show ads, or use Health data for advertising or marketing. Health data is never shared with third parties except the hosting providers that run Stepr for us.

Chat and moderation

• Group chats can be read by the members of that group and, for safety and moderation, by Stepr admins.
• Direct messages are between you and the other person. Stepr admins can only read a direct message conversation after a user reports it.
• Every admin view is logged in the audit log: who looked, at what, and when.
• Messages are stored on our servers so they sync across your devices. They are deleted when you delete your account.

Blocking and reporting

You can block anyone from their profile or a chat. Blocking stops that person from messaging you. You can unblock them at any time. You can report a message or a person from the app. A report makes the reported conversation available to Stepr admins for review.

Profile photos

A profile photo is optional. If you add one it is stored on our servers and shown to people in your groups and challenges, and in chats you take part in. You can change or remove it at any time; removing it deletes the file.

Walk routes and location

• Stepr records your location only while you are recording a walk. It doesn’t track you in the background, and it doesn’t collect location otherwise.
• A recorded route is private to you unless you choose to share it with a group. Sharing is opt-in, per walk, and you can stop sharing at any time.
• When a route is shared, the first and last 200 metres are always hidden from other people, so your home or workplace isn’t revealed. Trimmed sections are removed before the route is sent to others.

Live step counting

To show your steps as they happen, Stepr reads your phone’s motion sensor (Motion & Fitness on iPhone, activity recognition on Android) while a challenge is open. We use it to count steps only. We store the resulting step count, not a stream of raw sensor readings.

Apple Health & Health Connect

• Read: daily totals of steps, distance, active energy, exercise minutes, sleep and water.
• Write: only water. When you log water in Stepr’s water tracker, it is saved to Apple Health or Health Connect. We don’t write anything else.

Stepr’s use of information received from HealthKit and Health Connect follows Apple’s HealthKit guidelines and the Health Connect Permissions policy, including its Limited Use requirements. You can revoke access at any time in the Health app or Health Connect settings. Watches and fitness brands that sync into Apple Health or Health Connect reach Stepr the same way; we don’t connect to them directly yet.

Home-screen widgets

Stepr’s widgets show your steps, rank and water on your home screen and, if you add a lock-screen widget, on your lock screen. Anyone who can see your phone’s lock screen can see that information without unlocking it. Remove the widget, or change what the lock screen shows in your phone’s settings, if you don’t want that.

Logs and retention

• Request logs (IP address, time, endpoint) are kept for security for 30 days.
• Audit logs (admin actions, including every admin view of a chat or report, and sign-in and account events) are kept for 1 year.

Your choices

• Leave any group or challenge at any time.
• Block or report people, remove your profile photo, stop sharing a walk, and turn off Health, motion or location permissions in your phone’s settings.
• Delete your account in the app (Account → Delete account). This permanently removes your profile, photo, messages, routes, Health-derived totals and everything you created. Audit logs that record admin actions are kept for their 1-year period, and request logs for 30 days, and then deleted.
• Email privacy@stepr.download for a copy of your data or any question.

Where it’s stored

On servers we control, encrypted in transit (TLS). Sign-in emails are sent through our email provider, Resend.