StepTok Privacy Policy

Last updated: September 28, 2026

StepTok is operated by Sukhman Singh. This policy explains how the app processes information for walking progress, optional app restrictions, friend challenges, and subscriptions. Contact: gillsukhman209@gmail.com.

Apple Health and private weight tracking

With your permission, StepTok reads step counts and source information from Apple Health to calculate progress. Optional weight tracking reads body mass only after you connect it. StepTok does not write to Apple Health. Raw Health samples and source names are processed on your device and are not sent to product analytics. Weight readings from Health are held in memory. Manual weight entries are stored in a protected file on your device, excluded from backups, and never uploaded to challenges or analytics. You can edit or delete manual entries in Weight history. Turning weight tracking off hides it and pauses Health reads and weight reminders; it does not erase your manual history. Weight reminders do not display measurements.

Local tracking and Screen Time

Walking insights, personal walking-plan calculations, step history, goals, and preferences are stored or calculated locally. Widgets and Live Activities use a local snapshot in shared app storage. Challenge widget snapshots may include participant names, avatars, and derived progress. Apple's Screen Time services give StepTok opaque selection tokens. The identities of selected apps and local restriction settings are not uploaded to our challenge or analytics services.

Cloud challenges and messages

Firebase provides an anonymous cloud account, challenge profiles, invitations, schedules, memberships, progress, messages, moderation reports, blocks, and notifications. A display name and avatar identify you to your group. Derived step totals, daily goal results, recent challenge-day totals, and aggregate morning steps are shared with the challenge service and relevant participants. Daily First to Goal additionally shares a derived goal-finish time at one-minute precision. Raw minute-by-minute Health samples are not uploaded. Limited, explicitly enabled manual step additions also contribute to shared progress and are identified in the app.

Messages to everyone are available to current group members. Selected-recipient messages are available only to their sender and selected current members. This is server-enforced access control, not end-to-end encryption. Message text, challenge names, and invite codes are not sent to product analytics. Push delivery uses Apple and Firebase notification tokens, an installation identifier, time zone, and locale. Notifications can include challenge activity and message content according to your notification settings.

StepTok no longer provides challenge location sharing. The app does not collect live location for challenges, and the retired service rejects location-sharing requests.

Analytics, purchases, and attribution

PostHog processes an installation identifier, app/build version, device category, language/locale, time zone, app interactions, permission-flow outcomes, selected step goal, challenge state, and paywall/subscription events. An anonymous challenge identifier may have been associated with the installation's analytics profile. These identifiers can link activity from the same installation; they are not anonymous aggregate statistics. We do not enable session replay or send raw Health samples, weight measurements, selected-app identities, or message text to PostHog.

Apple handles payment. StoreKit and Superwall process product identifiers, purchase and subscription status, trial eligibility, an app-user identifier, and paywall performance information. StepTok does not receive your full payment-card information. Apple's AdServices and Superwall may provide Apple Ads campaign attribution, such as campaign, ad-group, keyword, and conversion identifiers. StepTok does not sell your personal information or track you across other companies' apps or websites for advertising. We do not request App Tracking Transparency permission.

You can turn product analytics off under Settings → Privacy & help → Your data. Turning it off stops optional product analytics; it does not disable the services needed to provide purchases or cloud features you choose to use.

Providers and purposes

Information is processed to provide the features you select, deliver notifications, manage and restore subscriptions, maintain security, respond to support requests, and understand app reliability and usage. Service providers include Apple, Firebase/Google, PostHog, and Superwall. Providers may process information outside your country under their applicable privacy and security terms. We may disclose information when legally required or necessary to protect users and the service. We do not use Health data for advertising.

Retention and deletion

Cloud challenge records are retained to provide the challenge and its history until deleted. In Settings → Privacy & help → Your data, choose Delete cloud account to close your anonymous cloud account and request permanent deletion of its profile, messages, shared progress, and hosted challenges. You are removed from other challenges. Hosted challenges are deleted for everyone; the app asks you to confirm this. Access is closed when the server accepts the request. Data deletion then runs on our servers and normally completes within a few minutes, retrying if a service is temporarily unavailable. A minimal account-closure marker is retained for about two to three days to prevent cached authentication tokens from reopening the account, then removed. Deletion continues if the app is closed.

Account deletion clears the app's challenge cache and turns off optional product analytics. It preserves local walking and weight history and does not alter Apple Health records or cancel an Apple subscription. Use Apple's subscription settings to cancel a subscription. Creating a new runner later starts a new cloud account and does not restore deleted challenge data.

Installation analytics and provider-managed purchase records are separate from the Firebase challenge account. To request deletion of those records, or other service data, contact gillsukhman209@gmail.com. We may need your installation or transaction details to locate the correct records. Information that must be kept for legal, accounting, fraud prevention, or security reasons may be retained for those purposes. Operational logs and backups expire according to the relevant service retention schedules; deleted data is not intentionally restored to the active service.

Deleting the app removes its local data, including manual weight history, but does not by itself delete cloud data or cancel a subscription. You can revoke Health and Screen Time permissions through Apple's settings.

Children and changes

StepTok is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information. We may update this policy as the app changes; the date above identifies the current version.