Privacy Policy

Contents

• Who we are
• Steps
• Coins record
• Account
• Advertising
• Analytics
• Feedback
• Notifications
• Website
• Not collected
• Sharing
• Retention
• Choices
• Deletion
• Children
• Contact

1. Who we are

Stepjar is the operator of the Stepjar app and of https://stepjar.fit (“Stepjar”, “we”). The app is an Android step counter. Its package name is com.stepjar.walk. This policy covers that app and this website. It does not cover a third-party site that an advertisement opens.

If a law that applies to you requires our legal name or postal address, email privacy@stepjar.fit and we will provide it for that request.

2. What the app does

Stepjar shows a step total, a daily check-in, and in-app coins. Coins are spent on shoes inside the app. A shoe can make steps count faster for a limited time. Coins are not electronic money, not a stored-value balance, not wages, and not cryptocurrency. They cannot be sold, transferred, or withdrawn. There are no in-app purchases in this version.

Step counts are estimates from the phone. Stepjar is not a medical device and does not diagnose, treat, or predict a health condition.

3. Steps

If you allow Physical activity (ACTIVITY_RECOGNITION), the app reads the phone’s step sensor and shows today’s steps on the device. While counting is running, Android requires a health foreground service, so the phone shows an ongoing notification that says today’s steps are being counted. If you already allowed counting, the app may start that counter again after the phone restarts.

We do not request the device location permission. We do not collect GPS coordinates, a route, altitude, or places you visited.

If you deny Physical activity, the app can still open. It cannot count steps or collect step coins until you allow it. You can change this in Android settings.

4. The coin record

Coins, the day’s claim, and unlocked shoes are kept for the install so the balance can be shown again. When you tap Collect, the app sends our servers:

• an identifier for this app install
• the local date and time zone
• the step snapshot for that claim

We use that to record in-app coins, to apply the daily goal, and to stop the same day from being collected twice. The install identifier is not the advertising identifier. Without a network connection, the phone can still show the local step total, and the claim is not recorded.

The same connection also carries an IP address. We use it to return the result and to protect the service. We do not use it to draw where you walked.

5. Account

You can count steps and unlock shoes without an account. An account is required only to claim a one-time welcome amount of in-app coins. You can sign in in one of three ways:

• Email. We store the email address and a sign-in credential. The password is not sent to advertising or analytics providers.
• Google. If you choose Continue with Google, Google authenticates you and may share your name and email with us. Google’s own privacy policy applies to Google’s processing.
• Guest. A session on the phone, without an email address. The install identifier still ties the in-app balance to that phone.

Shoes already unlocked stay on that phone after you sign out. They are tied to the install, not only to the email.

6. Advertising

The app shows ads from Google AdMob. The formats are:

• an app-open ad, which can appear at a cold start after the introduction, and again after you have been away
• an interstitial, which can appear after you tap Collect and before the coins are recorded, and when you leave the shoe cabinet
• banners above the tab bar on Home, Shop, Coins, and Me
• rewarded ads, which start only when you tap a control such as Watch, a missed check-in day, or a shop discount

A rewarded ad can grant in-app coins, restore a missed check-in, advance a temporary step-rate unlock, or reveal a lower coin price. If you close it before the reward is granted, nothing is granted. Rewards are never cash, gift cards, or cryptocurrency.

To request, show, measure, and limit ads, Google and advertising partners can receive:

• the Android advertising identifier
• IP address, and a coarse region inferred from it, such as a country or city
• device type, operating system, language, app version, and general device information
• ad events: request, fill, impression, click, close, and whether a reward completed

We do not send your step history to AdMob as a health or fitness targeting segment. We do not sell personal information.

Elsewhere, you can reset or delete the advertising identifier, and turn off ad personalization, in Android Settings under Privacy, then Ads. AdMob is expected to honor that device setting.

7. Analytics

We use Google Firebase and AppsFlyer to see whether the app opened, which screen was shown, and whether a claim, check-in, shoe unlock, or ad event completed. These services can receive:

• app version, platform (Android), language, and a timestamp
• the install identifier or advertising identifier, depending on the provider
• the screen or tab name, and whether a permission was granted or denied
• on a claim or coin event: the step count in that snapshot, the in-app coin amount, the coin source, and the shoe id if coins were spent
• ad placement, ad format, and whether the ad filled, was shown, was clicked, or granted a reward

They do not receive your password. We use this to operate and understand the app, not to sell a profile of your health. Firebase and AppsFlyer process this under their own terms as our service providers. A link opened from outside the app can also be recorded as a deep link so the app can land on the right screen.

8. Feedback

If you send feedback in the app, we store the text you typed so we can read it and fix problems. The form does not require an email address. If you are signed in, we may keep the note with that account. Please do not include another person’s private information, or information you would not want stored. We do not use feedback text to target ads.

9. Notifications

The ongoing “steps are being counted” notice is part of the step counter described above. If you allow notifications, we may also use them for a reminder you can turn off, such as a daily step goal. We do not read the contents of your other notifications. Denying the notification permission does not by itself stop the step sensor from counting, but Android may still require the ongoing service notice while counting runs.

10. This website

https://stepjar.fit is a static site. Pages are Home, this policy, and the terms. The site does not set its own analytics cookies and does not embed advertising. It does not ask you to create an account.

If you email privacy@stepjar.fit or support@stepjar.fit, we keep the message and your email address long enough to answer and to complete a deletion or access request. The host that serves the site may keep ordinary connection logs, including IP address, date, and browser type, for security, for up to 90 days.

11. What we do not collect

We do not collect, for Stepjar’s own features:

• precise location, GPS, or a route
• contacts, photos, microphone audio, SMS, or files
• payment card, bank account, or government identity numbers — this version has no purchases and no withdrawals
• records from a hospital, insurer, or other health app
• a cryptocurrency wallet

An advertising provider may still infer a coarse region from an IP address, as section 6 describes. That is not a location permission from Stepjar.

12. Why we use information

• to count steps and show progress on the phone
• to record check-ins, in-app coins, and shoe unlocks, and to prevent a repeated claim for the same day
• to show ads and know whether a rewarded ad finished
• to understand which screens and features are used
• to answer feedback and deletion requests
• to show a counting notification, and a reminder if you allowed one

Where the laws of the European Economic Area or the United Kingdom apply, we rely on: performance of the service you asked for (steps, coins, shoes, and an account you create); legitimate interests (security, one claim per day, basic product analytics, and answering you), which you can object to; consent (notification permission, and personalized ads where consent is required); and a legal duty where one applies.

13. Who else receives it

We do not sell personal information for money. We do not share step histories with data brokers. We may disclose information if a law requires it, or to investigate misuse of the step counter or the coin ledger.

Sharing an advertising identifier with Google for personalized ads can be treated as “sharing” under the California Consumer Privacy Act, as amended. You can opt out with the choices in the next section, or by emailing privacy@stepjar.fit with the subject “Do not sell or share”.

14. How long we keep it

• On the phone. Steps, the local session, and unlocked shoes stay until you clear the app’s storage or uninstall it.
• Coin ledger, step snapshots, and account. Kept while the install is in use. After a deletion request we can match, we delete them within 30 days, unless a shorter or longer period is required to finish a legal duty or an active abuse investigation. We then delete what that duty no longer needs.
• Feedback. Up to 24 months, or sooner if you ask us to delete it and we can match the note.
• Analytics. Up to 14 months, then deleted or aggregated under the provider settings we control.
• Ads. Measurement logs are kept by Google under AdMob’s retention.
• Website logs and support email. Website logs up to 90 days. A support or privacy email is kept until the request is finished, and then up to 24 months if we still need it as a record of the request.

Uninstalling the app removes the copy on the phone. It does not tell our servers to delete the install, so the server record remains until you use the deletion path below.

15. Your choices

• Deny Physical activity if you do not want steps counted.
• Turn off the ongoing notice or other Stepjar notifications in Android notification settings.
• Sign out. Shoes already unlocked remain on that phone.
• Reset or delete the advertising identifier, or turn off ad personalization, in Android settings.
• In the EEA, UK, and Switzerland, refuse personalized ads in the consent message.
• Email privacy@stepjar.fit to object to analytics based on legitimate interests, or to ask us to stop using an identifier we can match.

Refusing personalized ads or analytics does not turn the step counter off. Denying Physical activity does stop step counting.

16. Access, correction, and deletion

You can ask us to access, correct, or delete the personal information we can match to you. Depending on where you live, you may also have the right to a copy, to restrict processing, to object, and to withdraw consent. You may lodge a complaint with a privacy regulator. We will not cut off the step counter merely because you made a request.

We may ask for enough detail to find the right record and to avoid deleting someone else’s. If we cannot match a guest install, we will say so. California residents can use the same address to request access, correction, or deletion. We do not offer payments for personal information, and we do not respond differently because a browser sends a global privacy control to this static website; use the email above for a “Do not sell or share” request.

17. Children

Stepjar is not directed to children under 13, and we do not knowingly collect personal information from them. The in-app coins and ads are not a children’s service. If you believe a child under 13 has provided information, email privacy@stepjar.fit and we will delete it.

18. Security

Data sent between the app and our servers uses HTTPS. Access to coin and account records is limited to people who operate the service. No storage or transmission method is perfect, and we cannot promise that a record will never be lost or opened by someone it should not be.

19. Where it is processed

Our servers, Google, and AppsFlyer may process information in countries other than yours, including the United States. Those countries may have different privacy laws. Where the law that applies to you requires a safeguard for that transfer, we use the safeguard the provider makes available, such as standard contractual clauses, or we rely on a decision that the destination is adequate.

20. Fitness information

A step count can be fitness information. We use it to show progress and to record in-app coins. We do not use it for medical advice, insurance, employment, or credit. We do not sell it. Analytics of a claim can include the step snapshot, as section 7 says. Advertising does not receive that snapshot as a targeting segment we set.

21. Changes

If we change this policy, we will post the new version at https://stepjar.fit/privacy/ and change the effective date. If a change materially expands how we use step data or advertising data, we will also show a notice in the app when that is practical. The English text on this page is the policy. The app interface is in English.

22. Contact

Privacy requests: privacy@stepjar.fit
Product help: support@stepjar.fit
Policy URL: https://stepjar.fit/privacy/
Deletion instructions: https://stepjar.fit/privacy/#delete

The terms for using the app are at stepjar.fit/terms.