Last updated: November 6, 2026
Stepdy is a step counter made by Faruk Mert Kapar, an independent developer in Türkiye, who is the data controller for the data described here ("we" in this policy). You can reach us at farukmertkapar@gmail.com.
Stepdy has no ads, sells no data and does not track you across other apps or websites. This policy explains what leaves your iPhone, where it goes, who can see it and how to delete it.
Your detailed Apple Health records stay on your iPhone. What leaves it: your step totals and the profile you chose, so that you can appear on the rankings; the groups, chat messages and races you take part in; and the posts, cheers and comments you choose to share. The rankings, friends and the Feed use Google Firebase, with the data stored in the European Union; groups, chat and races use Apple's CloudKit. Usage statistics go to TelemetryDeck and cannot identify you, and subscriptions are checked with RevenueCat. You can delete your data from inside the app at any time.
With your permission, Stepdy reads the following from Apple Health:
Stepdy uses this data to show you your own steps, activities and statistics in the app. Stepdy writes to Apple Health in one case only: when you record an activity with an Apple Watch, the watch saves it to Apple Health as a workout, with the heart rate and energy it measured. If you discard the activity, nothing is saved. Stepdy never changes or deletes anything else in Health.
Your detailed Health records, such as individual samples, times of day, heart rate, distances, routes and energy, stay on your iPhone. The Health-derived figures that leave it are your step totals for the rankings, described below, and the figures on a post you choose to share on the Feed. Health data is never used for advertising and never sold. You can change Stepdy's access at any time in Settings › Privacy & Security › Health › Stepdy.
To place you on the world, country and friends rankings, Stepdy publishes your step totals for the day, the week, the month and since you joined (and those of the previous day, week and month) to its rankings database in Google Firebase (Cloud Firestore, stored in the European Union). With them it stores the profile you chose (display name, username, country and photo), your join date, when you were last active, your trophy count and whether your profile is verified. Other people using Stepdy can see these.
Stepdy signs you in to Firebase with an account it creates for you. Google Firebase Authentication holds a random sign-in name and password that Stepdy generates and keeps in your iCloud Keychain, so the same account comes back on a new iPhone. You never see or type them, and they contain no personal information.
You join the rankings when you finish setting up the app. To leave them, tap your profile picture on the Steps screen and turn off Publish my steps to leaderboards: your rankings row and its photo are deleted. Your username stays reserved for you. The groups and races you are in keep using your iCloud profile and step counts (see the next section), so their members still see your steps, and while the rankings database cannot be reached the app may show an older board built from those iCloud profiles.
Groups, group chat, races and group challenges use Apple's CloudKit, in a database that belongs to Stepdy and that other people using Stepdy can read. The following is written there:
Apple gives Stepdy an identifier for your iCloud account that only works inside Stepdy. Stepdy never receives your Apple Account email address or your real name, unless you type it in as your display name.
Treat anything you put in your display name, username, a group chat, a post or a comment as public.
When you record an activity in the Activities tab, Stepdy uses your iPhone's location, with your permission and only while a recording is running, to draw the route on the map and to measure distance, pace and climb. Recording carries on with the screen locked until you finish, and iOS shows its location indicator while it does. Indoor activities do not use location.
If you wear an Apple Watch with Stepdy on it, a recording also starts a workout on the watch so that it can measure your heart rate live. The watch and your iPhone exchange the heart rate and energy over Apple's own connection between your devices; no server is involved.
Your activities stay on your iPhone unless you post one to the Feed. Maps are drawn by Apple Maps, which receives the area of the map being shown, as in any app with a map; Apple's privacy policy covers that. You can delete any activity in the app.
These features are optional. They use the same Firebase database as the rankings (Cloud Firestore and Cloud Storage, stored in the European Union). Nothing is posted unless you post it.
Friends. You can add a friend by their username, with a friend link or with a QR code. A friend request stores your display name, username, country and avatar choice so that the other person can see who is asking; once it is accepted, the friendship stores both of your names and usernames. Friends see each other on the Friends board and see the posts you share with friends. You can remove a friend, or turn down a request, at any time.
Posts. When you share today's steps or an activity on the Feed, the post contains your display name, username, country and profile photo, the type of activity, when it took place, and its figures: steps, distance, duration, pace or speed, calories, climb and, if Apple Health recorded it, your average heart rate. You can add a caption. For an activity with a route, the map is included unless you switch off Show the map; before the route leaves your iPhone, its first and last 200 m are removed so that the start and the finish, often your home, are not shown, and the line is simplified. You choose who sees each post: Everyone (anyone using Stepdy) or Friends (the people who were your friends when you posted). New posts start set to Everyone, or to Friends if you have left the rankings.
Photos. You can add a photo to a post or use one as your profile picture. Stepdy uses Apple's photo picker, so it has no access to your photo library and receives only the photo you pick. The photo is cropped and redrawn on your iPhone before it is uploaded, which removes its location and every other piece of metadata.
Cheers and comments. When you cheer a post, your account identifier is added to it; when you comment, the comment is stored with your display name, username and avatar. Both are visible to everyone who can see the post. You can take back a cheer or delete your own comment, and the author of a post can delete any comment on it.
Automatic milestone posts. If you switch on Share milestones automatically, Stepdy posts to your friends, never publicly, when you reach your daily goal, a streak milestone or a personal best. It is off until you switch it on.
Keeping Stepdy safe. Names, captions and comments are checked against a filter for abusive language. Every message, post, comment and profile can be reported and its author blocked; blocking is kept on your iPhone. A report contains the reported content and the reason you chose, and is reviewed within 24 hours.
Deleting the app removes these from your iPhone. Exporting your history (a Pro feature) creates a spreadsheet on your iPhone and hands it to the share sheet; Stepdy uploads nothing.
Stepdy Pro is sold through Apple's In-App Purchase. Apple handles the payment; Stepdy never sees your card, your billing address or your Apple Account. To check whether your subscription is active, Stepdy uses RevenueCat (RevenueCat, Inc., United States), which receives the App Store's record of your purchases, an anonymous customer identifier that RevenueCat creates, basic technical details such as the app version and App Store country, and which version of the first screen after setup you were shown. RevenueCat receives no name, email address or Health data.
To learn which features are used and where the app breaks, Stepdy sends usage signals to TelemetryDeck, an analytics service based in Germany that is designed to work without personal data. A signal is a short event name such as "Race.started" with the app version, the iOS version, the device model, your language and region, and a random identifier that is hashed on your iPhone and again on TelemetryDeck's servers, so that it cannot be traced back to you or your device.
Signals never contain your name, username, messages, posts, photos, comments, routes or locations. Most carry only categories or ranges, such as the kind of activity or "3–5 km". A few carry more specific values: the plan (monthly or yearly) on subscription and paywall events, which version of the first screen after setup you saw, and, in one maintenance event, a step count. The statistics are only looked at in aggregate. TelemetryDeck does not sell this data or use it for advertising. Stepdy has no setting to turn these statistics off.
This website is served by Firebase Hosting, a Google service, which processes your IP address to deliver the pages and may keep it briefly in its server logs. The site sets no cookies and stores nothing in your browser.
To count visits, each page sends TelemetryDeck an anonymous event with the page, the site's language, the site you came from and any campaign tags in the link, your browser's language and time zone, a rough screen size (phone, tablet or desktop), the kind of device (iOS, Android, Mac, Windows or other) and, when you tap an App Store button, which one. A random identifier is made for each page view and never saved, so visits cannot be linked to each other or to you.
Stepdy is run from Türkiye. The rankings, friends and the Feed are stored by Google Firebase in the European Union (Cloud Firestore and Cloud Storage); Firebase Authentication and Firebase Hosting are Google services that may process data in the United States and elsewhere. Groups, chat and races are stored by Apple's CloudKit. Usage statistics are processed by TelemetryDeck in the European Union, and subscription records by RevenueCat in the United States. Where data is transferred out of the European Economic Area or Türkiye, it is protected by the safeguards these providers offer, such as the European Commission's standard contractual clauses.
Where the EU or UK General Data Protection Regulation or Türkiye's Personal Data Protection Law (KVKK, Law No. 6698) applies, we process your Health data and step totals on the basis of your explicit consent, which you give through iOS's Health permission and can withdraw at any time; your profile, groups, races, posts and messages because they are necessary to provide the features you choose to use (our contract with you); and usage statistics, reports and moderation on the basis of our legitimate interest in keeping the app working and safe.
Your rankings row, profile, posts, comments, friendships and group data are kept until you delete them or your account. To delete everything, tap your profile picture on the Steps screen, then Delete account & data and Delete everything. This removes your rankings row and photo, your username, your friendships and friend requests, your posts with their photos and comments, your cheers, your iCloud profile, your group memberships and the groups you run, the messages you sent and your races, and then everything Stepdy keeps on your iPhone. If a server cannot be reached, nothing is deleted and the app asks you to try again.
Some things are not removed this way: a report you sent about someone else that was stored in Firebase because iCloud could not be reached (kept for moderation), the usage statistics (they cannot be linked to you), RevenueCat's anonymous purchase record, and workouts already saved to Apple Health, which you can delete in the Health app. Reset all data clears Stepdy on your iPhone only and does not delete anything on the servers.
Messages already delivered may stay visible on other members' iPhones until their app next syncs.
Stepdy is not directed at children under 13, or the equivalent minimum age in your country, and does not knowingly collect their data. If you believe a child has created a profile, write to farukmertkapar@gmail.com and it will be removed.
Depending on where you live, you can ask to access, correct, export or erase your personal data, to restrict or object to its processing, and to withdraw your consent. Deleting your account in the app erases your data immediately, except as described under Retention and deletion. For anything else, write to farukmertkapar@gmail.com; you will receive a reply within 30 days. You can also complain to your data protection authority; in Türkiye, that is the Personal Data Protection Authority (KVKK).
If this policy changes materially, the date at the top will be updated and the change will be noted in the release notes of the app update that brings it.
Faruk Mert Kapar, developer of Stepdy, Türkiye. Questions? Write to farukmertkapar@gmail.com.
Language: English Bahasa Indonesia Bahasa Melayu Català Čeština Dansk Deutsch Español Français Hrvatski Italiano Magyar Nederlands Norsk bokmål Polski Português (Brasil) Română Slovenčina Suomi Svenska Tiếng Việt Türkçe Ελληνικά Русский Українська עברית العربية हिन्दी ไทย 日本語 한국어 简体中文 繁體中文