StepUp – Privacy Policy

Last updated: May 4, 2026

StepUp ("we", "our", or "us") is a group fitness app that helps you track daily activity, compete with friends, and stay motivated together. This policy explains what data we collect, why we collect it, and how you can control it.

1. Data We Collect

Health & Fitness Data

With your explicit permission, StepUp reads the following data from Apple HealthKit:

• Step count
• Active energy burned (calories)
• Exercise minutes
• Walking + running distance
• Flights climbed
• Workout sessions (count only)

HealthKit data is never sold, shared with advertisers, or used for any purpose other than displaying your progress within the app. We do not share HealthKit data with third parties.

Account Information

• Display name
• Email address (if signing in with email)
• Avatar emoji (chosen by you)

If you sign in with Apple, we receive only the information Apple provides (name, email). You may choose to hide your email using Apple's private relay.

Activity & Progress Data

Your daily step count, active energy, exercise minutes, distance, and flights climbed are synced to our cloud database so group members can see the leaderboard. This data is associated with your account.

Group & Social Data

• Groups you belong to and your role (member or admin)
• Cheers you send or receive
• Missions and challenges within your groups

Device & Notification Data

We store an FCM (Firebase Cloud Messaging) token for your device to send push notifications. You can disable notifications at any time in iOS Settings.

2. How We Use Your Data

• Display your daily and weekly activity on leaderboards visible to your group members
• Calculate streaks, badges, and mission progress
• Send push notifications about group activity, missions, and challenges
• Sync data across your devices

We do not use your data for advertising, analytics platforms, or sell it to any third party.

3. Data Storage & Security

Data is stored in Google Firebase (Firestore and Firebase Authentication), hosted in the United States. Firebase is certified under ISO 27001, SOC 1/2/3, and other security standards. Connections to our servers are encrypted using TLS. We apply Firestore security rules so users can only access their own data and the groups they belong to.

4. Data Sharing

We share your data only in the following limited cases:

• Group members: Your display name, avatar, and daily step count are visible to members of groups you join.
• Google Firebase: Our cloud infrastructure provider. See Firebase Privacy Policy.
• Apple HealthKit: We read but do not write health data. HealthKit data is not shared with Firebase or any third party.
• Legal requirements: We may disclose data if required by law.

5. Your Rights & Controls

• Revoke HealthKit access: iOS Settings → Privacy & Security → Health → StepUp
• Disable notifications: iOS Settings → StepUp → Notifications
• Edit your profile: Change your display name and avatar in the Profile tab
• Leave a group: Open the group and tap the leave icon in the top-right
• Delete your account: Profile tab → Settings → Delete Account. This permanently removes your account, all activity data, and removes you from all groups.

6. Data Retention

Your data is retained as long as your account is active. When you delete your account, all associated data is permanently deleted within 30 days.

7. Children

StepUp is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us personal information, contact us and we will delete it.

8. Health Disclaimer & Limitation of Liability

StepUp is a motivational tool only. We do not provide medical advice, and nothing in this app constitutes a recommendation to perform any specific number of steps or any level of physical activity.

All activity goals, challenges, and step targets within the app are set by you or your group. By using StepUp, you confirm that:

• You are aware of your own health and physical condition.
• You have determined, at your own discretion, what level of physical activity is appropriate for you.
• You accept full responsibility for any physical activity you undertake as a result of using this app.

StepUp and its developers shall not be liable for any injury, health issue, or other harm arising from physical activity performed in connection with using the app. If you have any medical concerns, consult a qualified healthcare professional before starting any exercise program.

9. Changes to This Policy

We may update this policy. Material changes will be announced in the app. Continued use of the app after changes constitutes acceptance.

10. Contact

Questions or requests: stepupfeedback@gmail.com