Privacy Policy for ShapeStep
Last updated: October 3, 2026
ShapeStep is a personal movement and fitness visualization app created by Egils Broks. This Privacy Policy explains what information the app handles, how it is used, where it is stored, and the choices available to you.
1. Data controller
For privacy matters relating to ShapeStep, the data controller is:
Egils Broks
broks.tech@gmail.com
2. How ShapeStep is designed
ShapeStep does not require an account. HealthKit movement information and ShapeStep contour history are processed and stored locally on your device. ShapeStep does not send your HealthKit step count, walking or running distance, contour history, selected body profile, daily step goal, or HealthKit permission choices to the developer, ActivationPal, or RevenueCat.
ShapeStep uses ActivationPal for product analytics and RevenueCat for purchase management. These services receive the limited information described below. ShapeStep does not sell personal information and does not track you across apps or websites owned by other companies.
3. Health and locally stored information
If you choose to connect Apple Health, ShapeStep requests read access to:
• Step count.
• Walking and running distance.
ShapeStep may read today's values and daily values from the date on which your contour tracking began. The app does not request permission to write information to Apple Health.
The app stores the following settings and derived information locally on your device:
• Your chosen body profile: man, woman, or neutral.
• Your selected daily step goal, currently adjustable between 3,000 and 25,000 steps.
• Daily contour records, including date, steps, walking and running distance, the goal used that day, and a derived contour level.
• The date contour tracking began.
• Onboarding completion and progress, preview values, and whether Health or preview mode is selected.
• Whether goal congratulations are enabled and the date of the most recent goal notification.
Preview mode uses sample values and does not represent your real movement.
4. Analytics information
ShapeStep uses ActivationPal to understand app usage and purchases. ActivationPal may receive:
• A randomly generated installation identifier, session identifier, and the RevenueCat app user identifier.
• Event timestamps and app interactions, including app opens, onboarding progress, paywall views and selections, purchases, settings actions, goal-setting actions, restore actions, and Health connection completion. Event names do not contain your step count, distance, contour values, body profile, daily goal value, or HealthKit permission status.
• App version, build number, operating-system version, device model, language, locale, time zone, App Store storefront, and approximate installation date.
• Approximate country and city derived from the network request's IP address. ShapeStep does not request precise location permission.
• Apple Search Ads attribution information, when available, to measure whether an installation resulted from an Apple Search Ad. ShapeStep does not access the advertising identifier (IDFA).
ActivationPal stores analytics data in the United States using infrastructure provided by Supabase/AWS and Vercel. ActivationPal states that it does not provide an advertising tracking network or sell event data. More information: https://activationpal.com/docs/privacy-security
5. Purchases and subscriptions
ShapeStep uses Apple's In-App Purchase system and RevenueCat to provide subscriptions, lifetime purchases, entitlement status, purchase restoration, and purchase-related support. RevenueCat may process an anonymous app user identifier, product and entitlement identifiers, transaction status, purchase dates, subscription status, trial status, renewal status, refund information, storefront, and related technical information.
Payment-card details are handled by Apple and are not provided to ShapeStep. RevenueCat purchase events are shared with ActivationPal through a signed server webhook so purchase results can be included in ShapeStep analytics.
RevenueCat's privacy policy: https://www.revenuecat.com/privacy/
6. How information is used
ShapeStep uses information to:
• Display today's step count, distance, and progress toward your selected goal.
• Generate and animate the motivational contour visualization.
• Build local daily and trend history.
• Preserve your goal, body profile, onboarding state, and app preferences.
• Send one optional on-device congratulations alert when your daily goal is reached.
• Provide and restore paid access.
• Measure onboarding completion, paywall performance, purchases, feature use, audience characteristics, and Apple Search Ads effectiveness.
• Diagnose an issue when you voluntarily contact support and provide relevant details.
The contour is motivational feedback. It is not a measurement or prediction of your body shape, body composition, weight, health, or fitness outcome.
7. Apple Health and your choices
Apple Health access is optional and controlled by you through the iOS permission screen. ShapeStep asks only for read access to step count and walking and running distance. It does not write Health data.
You can deny or revoke access at any time in iOS Settings or the Apple Health app. ShapeStep remains usable with clearly labeled sample data in preview mode. Revoking access stops future reads but does not automatically erase contour records already stored locally by ShapeStep; use Reset contour progress or delete the app to remove those records.
ShapeStep does not use HealthKit information for advertising, marketing, profiling, eligibility decisions, or data mining. The app does not send HealthKit information to the developer, ActivationPal, RevenueCat, or any other third party.
8. Local storage, security, and notifications
ShapeStep stores Health-derived data, app settings, and contour records locally using Apple platform storage. It does not sync this information to a developer-controlled cloud service.
Analytics and purchase information is transmitted using HTTPS. RevenueCat, ActivationPal, Apple, and their infrastructure providers apply their own security measures. No storage or transmission method is completely secure.
Goal congratulations are optional. If enabled, ShapeStep asks for notification permission and may use HealthKit background delivery to check whether your goal has been reached. You can turn congratulations off in ShapeStep and change notification permission in iOS Settings.
9. Information not transmitted for analytics
ShapeStep does not transmit the following information to the developer, ActivationPal, or RevenueCat for analytics:
• Your step counts or walking and running distance.
• Your contour levels or contour history.
• Your selected body profile or daily step goal.
• Your HealthKit permission choices.
• Precise location, contacts, photos, or payment-card information.
• The advertising identifier (IDFA).
10. Retention and deletion
Local settings and contour records remain on your device until you change or delete them, reset contour progress, or delete the app. Deleting the app generally removes its locally stored app data, subject to Apple's backup and restore behavior. It does not delete information from Apple Health because ShapeStep does not own or write that data.
ActivationPal states that analytics events, installation identifiers, and approximate location do not have an automatic age-based deletion period and may remain until explicitly deleted. RevenueCat retains purchase records according to its policies and legal obligations.
To request access to or deletion of analytics or purchase information, email broks.tech@gmail.com. Include enough information to locate the record, such as the ActivationPal device identifier or RevenueCat app user identifier if available. Do not include Health information or passwords. Some provider logs, backups, transaction records, or information required for legal, fraud-prevention, accounting, or security purposes may remain for a limited period.
11. Support communications
If you contact us by email, we receive your email address, message, and any information you choose to include. We use that information to respond, provide support, protect the app, or comply with legal obligations. Please do not include Health information or other sensitive personal information unless necessary for your request.
12. Your privacy rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information and to withdraw consent.
Because movement, contour, and preference data are stored locally and are not accessible to the developer, you exercise most choices directly by changing app settings, resetting contour progress, changing iOS permissions, or deleting the app. For analytics, purchase information, or information sent directly to support, contact broks.tech@gmail.com.
If European data protection law applies, you may lodge a complaint with the data protection authority in your country or with the Latvian Data State Inspectorate: https://www.dvi.gov.lv/en
13. Children
ShapeStep is a general-audience fitness utility and is not directed specifically to children under 13 or below the minimum age required by local law. ShapeStep does not knowingly send children's HealthKit data to the developer or analytics providers. A parent or guardian should supervise a child's use of fitness goals and Apple Health features where appropriate.
14. Changes to this Privacy Policy
We may update this Privacy Policy when the app, our practices, service providers, or legal requirements change. The revised policy will show a new Last updated date.
15. Contact
For questions or requests concerning this Privacy Policy, contact:
Egils Broks
broks.tech@gmail.com