Privacy Policy
StepRally is a step counter for walking with friends. This policy explains what we collect, why, who can see it, and how to delete it. We collect as little as possible: steps are counted on your phone, and you can use the app without an account.
What we collect
| Data | Where it is kept | Why |
|---|---|---|
| Daily step totals (one number per day) and the step source used | Your phone; our server only if you sign in | Show your progress, history and leaderboards |
| Daily step goal | Your phone; our server if you sign in | Goal progress and "goal %" rankings |
| Height, weight and step length (optional) | Your phone only | Distance and calorie estimates, and your BMI |
| Email address (if you sign in with email or Google) | Our server | Sign-in codes and account recovery |
| Display name and optional photo | Our server | Shown to members of circles you join |
| Timezone and device details (platform, app version, step source) | Our server | Count each day correctly and keep sync working |
| Facebook app-scoped user ID and which of your Facebook friends also use StepRally (only if you link Facebook) | Our server | Your Facebook friends leaderboard |
| Advertising ID, IP address and how you interact with ads (not after you buy Remove ads) | Collected by Google's ads SDK on your phone; never by our server | Show, measure and protect ads (see Ads) |
We do not collect your location or GPS routes. We never sell your personal data, and your steps, body details and circles are never used for ads.
Step data
StepRally counts steps with your phone's built-in step sensor (pedometer), using Android's "Physical activity" permission. While counting runs in the background, a notification shows today's steps. Daily totals are saved on your phone, so counting works offline. We use step counts only to show your daily totals and, if you choose, share those totals with your circles and linked Facebook friends.
Step data is never used for advertising, never sold, and never shared with third parties except as needed to provide the features described here.
Ads and Remove ads
From version 1.1, StepRally shows a small banner ad from Google AdMob on some screens. From version 1.2 it can also show a full-screen ad when you open the app, at most once every four hours. Ads never appear on leaderboards. To pick, measure and protect ads, Google's ads SDK on your phone may collect your device's advertising ID, your IP address (and the approximate location it implies), and how you interact with ads. Google handles this data under its own privacy policy.
In the EEA, the UK and Switzerland, Google's consent form asks before ads are personalised. Where the law gives you a choice, you can change it any time under Profile → Ad privacy choices. You can also reset or delete your advertising ID in your phone's settings.
StepRally never passes your steps, health or body details, circles or Facebook data to ad requests.
A one-time Remove ads purchase turns ads off on every phone signed in to your Google account. Google Play handles the payment, so we never see your card details. The app asks Google Play on your phone whether your account owns the purchase; we don't keep purchase records on our server.
Who can see your steps
- Circles: when you join a private circle you agree that its members see your display name, photo and daily step totals. Leave a circle at any time.
- Facebook friends: if you link Facebook, your Facebook friends who also use StepRally and linked Facebook see your daily step totals. You can turn this off under Profile → Facebook friends, or disconnect.
- Share cards: nothing is posted for you. A share card leaves the app only when you share it yourself.
- Your body details are never shown to anyone.
Linking Facebook is optional and only for the friends leaderboard. We ask for your public profile and friend list. Facebook gives us only friends who also use StepRally and agreed to share their friend list. We store your app-scoped Facebook user ID and the friend connections between StepRally users. We do not store Facebook access tokens, names, photos or email addresses from Facebook, and we never post to Facebook.
To remove this data, disconnect Facebook in the app, or remove StepRally in your Facebook settings (Settings → Apps and websites). See Facebook data deletion.
Service providers
Our server is hosted by Visansoft. If you use Google or Facebook sign-in, those companies process the sign-in under their own privacy policies. Email sign-in codes are sent by our mail server. Google AdMob shows ads and Google Play processes the Remove ads purchase, under Google's privacy policy.
Keeping and deleting your data
- Data on your phone stays until you delete it (Profile → Privacy and data) or uninstall the app.
- You can export your data from the app at any time.
- Deleting your account (in the app) removes you from leaderboards immediately and deletes your server data within 30 days.
- Disconnecting Facebook deletes your Facebook ID and friend connections immediately.
Security
All traffic between the app and our server is encrypted (HTTPS). Sign-in codes and invite codes are stored as one-way hashes.
Children
StepRally is not directed at children under 16, and we do not knowingly collect their data.
Changes
We will update the effective date when this policy changes, and tell you in the app about important changes.
Contact
Questions or requests about your data: nesasivan@gmail.com.