Privacy Policy — StepPath: Step Tracker

Last updated: August 9, 2026

This Privacy Policy describes how StepPath ("we", "our", "the app") collects, uses, and protects your information when you use our mobile application.

1. Information We Collect

• Account information: When you sign in with Google, we receive your name, email address, and profile photo.

• Date of birth: Collected during onboarding to verify age and apply appropriate protections for users under the legal age threshold in their country.

• Physical activity data: Step count, collected automatically using your device's built-in motion sensors.

• Location data: Used only to generate walking routes and calculate distance. Location is not collected unless you grant permission.

• Weight and fitness goals (optional, Pro plan only): Used to personalize your daily step goal and calorie calculations.

• Public profile alias (optional, Pro plan only): A display name and photo you choose for the leaderboard, separate from your real account information.

2. How We Use Your Information

We use your information to:

• Track your daily steps and progress toward your goal

• Generate walking routes to help you reach your step goal

• Calculate estimated calories burned and distance walked

• Display your ranking on the leaderboard, if you choose to participate (Pro plan only)

• Manage your subscription through RevenueCat and Google Play Billing

• Comply with legal requirements regarding age verification

3. Data Sharing

We do not sell your personal data. We share data only with the following service providers, strictly to operate the app:

• Firebase (Google): authentication and data storage

• RevenueCat: subscription management

• OpenStreetMap/OSRM: route calculation (no personal data is shared with this service beyond coordinates needed to calculate a route)

4. Data Security

• All data transmitted between the app and our servers is encrypted (HTTPS/TLS).

• Sensitive data (date of birth, location, weight) is encrypted at rest.

• We do not store passwords; authentication is handled securely through Sign in with Google.

• Access to your data is restricted so that only you can read or modify your own information.

5. Children's Privacy

StepPath applies age-based restrictions depending on the country you select:

• Users below the applicable age threshold (13 in the United States under COPPA, 14 in Spain, 16 by default elsewhere in the EU unless a member state sets a lower age) have restricted access to social features. Their leaderboard position is never publicly displayed, and their data collection is limited to what is strictly necessary for the app to function.

• We do not use data from underage users for targeted advertising or behavioral profiling.

6. Your Rights

You have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Delete your account and all associated data at any time, directly from the app's settings screen

• Withdraw consent for optional permissions (location, notifications) at any time through your device settings

These rights are available to all users, in accordance with GDPR (European Union) and CCPA/CPRA (California, United States).

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed from our systems.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: [stepphath@gmail.com ]