STEP ON IT

Your information

Privacy policy

Last updated: 19 October 2026 · iPhone beta

Your privacy, at a glance

Step On It is a walking challenge app operated by Jennifer Emele. For privacy questions or requests, email support@steponit.app.

What we use and why

Step On It does not change your Apple Health records. We do not use Health information for advertising or sell it. This website includes no advertising or analytics scripts.

Your choices and our lawful bases

We use information necessary to provide the account and challenge service you request to perform our contract with you. Optional photo sharing and optional Health access and cloud step sharing rely on your consent. Where Health information is special category data, we rely on your explicit consent for that processing. We rely on legitimate interests to secure the service, prevent abuse and answer support requests, balanced against your rights.

You can refuse Health access or challenge step sharing and still have an account; shared progress features will then be unavailable or show no shared readings. You can stop cloud sharing in the challenge and remove your uploaded photo in Profile. Stopping sharing removes the saved shared progress for that challenge. Revoke device Health access in iPhone Settings or the Health app. Withdrawing consent does not affect processing that was lawful before withdrawal.

Who can see your information

Challenge members can view the shared membership and progress information for their challenge. Your email address is not included in challenge member lists. Profile photos can be fetched by signed-in users; they are not restricted to one challenge. Invitations are intended to be shared only with people you want to invite. Anyone with a valid code may be able to join an open challenge.

Google Firebase provides authentication, Firestore, photo storage, hosting and server functions. Microsoft 365 processes support email. Service providers may process technical records for operation and security. Firestore and the photo bucket are configured in London; this does not mean that all authentication, email, hosting or support processing stays in the UK. Provider processing can involve other countries. For transfers outside the UK, the applicable provider terms use safeguards such as standard contractual clauses with UK provisions, or an adequacy arrangement where applicable. Google describes its UK Extension to the EU–US Data Privacy Framework certification in its privacy information. Details are available in Firebase’s privacy information, the Firebase data processing terms, the Google Cloud data processing addendum and Microsoft’s data protection addendum. Email us to ask which safeguards apply to a particular transfer and how to obtain a copy.

Challenge contributions and payments are handled offline by the organiser. Step On It shows calculated amounts owed and does not collect card or bank details for those contributions. Other participants may retain screenshots or messages they have already received.

Reminders

Challenge reminders are optional local iPhone notifications. Preferences are stored on your device for your account. They are personal check-ins, not messages sent to the group, and do not assess your live step total. Notification content can appear on your lock screen according to your iPhone settings. Turn reminders off inside the challenge or in iPhone notification settings. Times follow UK time.

How long information is kept

Account and profile information is kept while your account is active, unless you remove an optional photo earlier. Shared step results remain while sharing is enabled and their challenge records remain stored. Archiving or removing a challenge from your personal list hides it; that action alone does not erase the shared challenge data.

Account deletion removes your authentication account, private profile and preferences, uploaded photo files, membership records and shared step results from our active services. Unused solo challenges are removed. Group challenges you organise are cancelled if still upcoming or running; other members’ records and shared challenge names and descriptions may remain so their history is available. Contact us if retained shared text contains your personal information.

Accepted deletion continues on the server and is retried if interrupted. We keep a minimal account identifier and deletion status for 30 days after completion to confirm the request and prevent old credentials from recreating erased records; the scheduled cleanup then removes that receipt. Pending requests are kept until resolved. Deletion from active app records does not mean every provider recovery copy or technical record disappears immediately. Provider backups, storage recovery copies and security logs may persist under their settings and retention schedules. Firebase states that authentication data is removed from its live and backup systems within 180 days after user deletion is initiated; authentication IP logs are kept for a few weeks and Hosting IP records for a few months. See Firebase’s published retention information. Recovery copies are not used by us to recreate an active account after deletion.

Support correspondence is kept for as long as reasonably needed to resolve the enquiry and any related dispute or security issue. You can ask us about a specific message or record.

Account deletion and your rights

To delete your account, open Profile → Account → Delete my account, confirm your password and approve the final confirmation. You can also contact support to request deletion. Removing the app alone does not delete your account. Apple Health data stays under your control on your device.

Depending on the processing and applicable law, you can request access, correction, erasure, restriction or a portable copy of your information. You can withdraw consent at any time. Some rights have legal exceptions; we will explain any that apply and may need to verify your identity.

Your right to object: you can object to processing based on legitimate interests by emailing support@steponit.app.

If you are concerned about how we use your information, contact us. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

How results are calculated

Depending on the challenge, rankings use recorded step totals or completed days or weeks meeting the target. Exempt periods are neither met nor missed and add no missed-target charge. Missing readings stay pending and results can change when devices sync. Ask your organiser about disputed results or offline contributions.

Age and help for younger users

Step On It is intended for people aged 13 and over. Do not create an account if you are under 13. During registration, you select an age range. If you select 13–17, you are asked to confirm permission from a parent or guardian before continuing. This is a self-declaration, not independent verification of your age or your guardian’s permission. Your selection is used on your device during registration and is not saved to your account.

Parental or guardian authorisation and involvement may also be required under the law that applies where you live. If you are unsure, ask a parent or guardian to help you before registering or sharing information. These registration declarations do not independently establish a person’s age or legal capacity. You can keep your photo and Health access off, and challenge step sharing starts only when you enable it. If you or a parent believe an under-13 has registered, or need help with information shared in the app, contact support@steponit.app.

Updates

We update this notice when the service or its data use changes. Significant new sharing choices will be explained in the app before they apply.