Last Updated: October 6, 2026
This Privacy Policy explains how TORC LABS ("we", "us", or "our") collects, uses, processes, and protects your information when you download, install, and use the StepCash: Pedometer & Rewards mobile application (the "App").
By accessing or using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
StepCash is not a medical device. The step counts, estimated distances, and energy expenditure provided by the App are intended solely for fitness tracking, gamification, and reward calculation purposes. The App does not diagnose, treat, cure, or prevent any illness or medical condition. Consult a qualified healthcare professional before starting any new physical exercise routine.
A. Physical Activity & Sensor Data
Sensors Accessed: We request runtime permission to access physical activity recognition (android.permission.ACTIVITY_RECOGNITION) and your device's hardware step counter / accelerometer sensors.
Purpose: To calculate daily steps, verify movement milestones, update leaderboard rankings, and determine challenge outcomes. Sensor data is processed on-device and synchronized with our secure cloud servers to prevent duplicate or automated reward redemptions.
B. Account & Identity Information
Authentication: When you register or sign in (via Google Sign-In or email credentials), we collect your email address, unique Firebase User ID (UID), and display name.
Purpose: To maintain your player profile, synchronize data across sessions, and prevent duplicate account abuse.
C. Rewards and Payout Details
In-App Records: We maintain records of your accumulated reward balance, completed challenges, and withdrawal history.
Payout Data: When requesting a disbursement, we collect the necessary payment recipient identifier (such as your digital wallet address or payout account email) strictly to execute the transfer.
D. Device & Diagnostic Telemetry
Automated technical details—including device model, operating system version, crash reports, and IP address—collected strictly to ensure app stability, monitor network security, and debug errors.
We process user data strictly for the following purposes:
Powering core step-counting, leaderboard synchronization, and reward disbursements.
Detecting and preventing fraud, step emulation, sensor spoofing, and automated bot accounts.
Assisting with user support and payout inquiries.
Monitoring database stability and app performance.
We do not sell, rent, or trade your personal or sensor data to third-party data brokers or advertising networks.
We utilize trusted third-party cloud infrastructure to manage authentication, cloud databases, and core functionality:
Google Firebase & Google Play Services (Google LLC):
Firebase Authentication: User identity verification and secure session tokens.
Cloud Firestore & Realtime Database: Encrypted cloud persistence for user profiles, step counts, and balances.
Google Privacy Policy: https://policies.google.com/privacy
We implement standard administrative and technical safeguards:
All communication between the App and backend servers is encrypted in transit using TLS / HTTPS.
Database documents are protected by backend security rules restricting access solely to authenticated owners.
In compliance with Google Play's User Data and Account Deletion policies, you have full control over your information:
Retention Period: We retain your account data as long as your profile remains active or as required to resolve disputes, comply with financial record-keeping, and protect against fraudulent claims.
In-App Deletion: You can delete your account and all associated data directly inside the App by tapping Settings > Delete Account and confirming your request.
Email Deletion Request: If you do not have the App installed, you can submit a full deletion request at any time by emailing hamza.jerfawii@gmail.com with the subject line "StepCash Data Deletion Request". Include your registered account email.
Effect of Deletion: Once confirmed, your user profile, authentication record, step history, and reward balances are permanently purged from our active databases within 30 days.
The App is not directed toward children under 13 years of age (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you become aware that a minor has registered an account without parental consent, contact us immediately to remove the profile and associated data.
We may update this Privacy Policy from time to time. Any changes will be posted to this document with a revised "Last Updated" date.
For questions, feedback, or data privacy requests regarding StepCash, contact us at:
Publisher / Developer: TORC LABS
Contact Email: hamza.jerfawii@gmail.com