Privacy
Last updated October 20, 2026
What we collect
Your display name and email (or the identifier Apple or Google gives us when you sign in with them). If you set a password, we store only a one-way hash of it. Your daily step totals: one number per day, which devices recorded it, and how many steps were excluded and why. Your time zone, so plans and habits know what “now” is. Anything you add yourself: leagues, walks, habits, a daily goal.
What stays on your phone
Raw Health samples never leave your device. The app reads Apple Health and the motion sensor on the phone and sends only daily and hourly totals. We never write to Health.
What other people see
Members of a league you join see your display name, whether you are still in, today's steps, your total, and which kind of device recorded your steps. Anyone with a league's six-character code can see the same standings on its live page. Friends you accept see your display name, photo, today's steps, this week's total and when your steps last synced; nothing is shared with someone until you both agree, and removing a friend stops it immediately. Your email is never shown to anyone.
Journeys
If you start a journey, we store the start and destination you chose and the route between them. Choosing “use my location” reads your position once, on the phone, to set the start; it is not tracked afterwards. To plot the route and name the stops along it we send those points, and only those points, to OSRM (routing), OpenStreetMap's Nominatim (place names) and Wikipedia (facts). Place searches you type go to Nominatim through our server. Maps are drawn from OpenStreetMap data served by OpenFreeMap and OpenStreetMap, with terrain from open elevation tiles on AWS, which means your phone fetches map tiles from those servers while a map is on screen.
Payments
Purchases are handled by RevenueCat and the app store or card processor behind it. We never see your card number. We keep a record of what you bought and when.
Where it lives
Data is stored on Cloudflare's network. Connections are encrypted. Step reports from the app are signed by Apple's App Attest so we can tell they came from a real copy of the app.
Deleting your data
Open the You tab in the app and choose Delete account. Your account, step history, walks, habits, purchase records and sign-in keys are removed immediately. Leagues you host with other players are handed to their longest-standing member; leagues with nobody else are deleted. You can also email hello@stepr.io from your account email.
Reports
If you report a player or a league, we keep the report, your account id and the reason so we can act on it. Reports are reviewed within 24 hours.
No tracking
There are no advertising trackers and no analytics scripts on the site or in the app.