Privacy
Last updated September 12, 2026
What we collect
Your display name and email (or the identifier Apple or Google gives us when you sign in with them). If you set a password, we store only a one-way hash of it. Your daily step totals: one number per day, which devices recorded it, and how many steps were excluded and why. Your time zone, so plans and habits know what “now” is. Anything you add yourself: leagues, walks, habits, a daily goal.
What stays on your phone
Raw Health samples never leave your device. The app reads Apple Health and the motion sensor on the phone and sends only daily and hourly totals. We never write to Health.
What other people see
Members of a league you join see your display name, whether you are still in, today's steps, your total, and which kind of device recorded your steps. Anyone with a league's six-character code can see the same standings on its live page. Your email is never shown to anyone.
Payments
Purchases are handled by RevenueCat and the app store or card processor behind it. We never see your card number. We keep a record of what you bought and when.
Where it lives
Data is stored on Cloudflare's network. Connections are encrypted. Step reports from the app are signed by Apple's App Attest so we can tell they came from a real copy of the app.
Deleting your data
Open the You tab in the app and choose Delete account. Your account, step history, walks, habits, purchase records and sign-in keys are removed immediately. Leagues you host with other players are handed to their longest-standing member; leagues with nobody else are deleted. You can also email hello@stepr.io from your account email.
Reports
If you report a player or a league, we keep the report, your account id and the reason so we can act on it. Reports are reviewed within 24 hours.
No tracking
There are no advertising trackers and no analytics scripts on the site or in the app.