Privacy Policy

Last updated: 6 September 2026

Stepdy is built by an independent developer. There are no ads, no data brokers and no tracking. The only thing that leaves your phone besides your own iCloud data is a small set of anonymous usage statistics, described in section 7. This page explains exactly what leaves your phone and what does not.

1. Who is responsible

Stepdy is developed and operated by Faruk Mert Kapar, an individual developer based in Türkiye. For any privacy question or request, write to farukmertkapar@gmail.com.

2. Apple Health data

With your permission, Stepdy reads the following from Apple Health:

• Step count
• Walking + running distance
• Active energy burned

This data draws your own screens inside the app — today's total, your week, your history, your streak and your goal progress — and, as described below, the single step total that represents you on a leaderboard.

Stepdy never writes to Apple Health. Your detailed Health records — individual samples, times of day, distances and energy — stay on your device and are never uploaded. You can revoke access at any time in Settings › Privacy & Security › Health › Stepdy.

What does leave your device is a step total: one number each for your day, week, month and lifetime, published to our leaderboard database (Google Firebase, hosted in the European Union) so that other people can be ranked against you. It is stored under an anonymous identifier, alongside the profile you chose — display name, username, country and photo. No other Health data is sent, and none of it is ever used for advertising, sold, or shared with third parties. Deleting your account removes it.

3. Motion data and leaderboards

Two measurements exist, and which one is published depends on where it is going. The figure on the global and country leaderboards is the total Apple Health has merged for you, which includes steps an Apple Watch counted while your phone was somewhere else. The figure stored in iCloud — which is what groups, chat and races use — is measured separately by the motion coprocessor (CoreMotion) in your iPhone and, if you have one, your Apple Watch, because Apple’s rules do not permit Health readings to be stored in iCloud. Where both devices counted the same day, the larger figure is used — never the sum. If you deny both Health and motion access you can still use the app; you simply will not appear on shared boards.

4. What is stored in iCloud

Stepdy uses Apple's CloudKit. Your data lives in Apple's infrastructure under your own Apple Account — Stepdy runs no servers of its own. The following is written to a shared CloudKit database that other Stepdy users can read:

• Your display name, username, country and avatar choice
• Your published step totals for the day, week, month and since joining
• Your trophy count, join date and last‑active time
• Groups you create or join, their names, emoji and invite codes
• Messages you send in a group chat, with your display name attached
• Races you start, their targets and results
• Reports you submit about other people's content

Apple provides Stepdy with an opaque per‑app identifier for your Apple Account. Stepdy never receives your Apple ID, your email address, or your real name unless you type it in yourself as a display name.

Treat anything you put in your display name, username or a group chat as public. Do not put information there that you would not want other users to see.

5. What is stored only on your device

• Your daily history, goal, streak and settings
• Your list of blocked users
• Your Apple Health readings

Deleting the app removes all of this.

6. Purchases

Stepdy Pro is sold through Apple's In‑App Purchase. Payment is handled entirely by Apple; Stepdy never sees your card, billing address or Apple ID. Subscription status is verified on your device using Apple's StoreKit. No purchase information is sent anywhere else, and no third‑party payment or subscription service is involved.

7. Anonymous usage statistics

To learn which features are used and where the app breaks, Stepdy sends anonymous usage signals to TelemetryDeck, an analytics service based in Germany that is designed to work without personal data. A signal is a short event name such as “Race.created” together with the app version, the iOS version, the device model, your language and region, and a random identifier that Apple assigns to Stepdy on your device.

That identifier is hashed on your device before it is sent and hashed again with a secret on TelemetryDeck's servers, so it cannot be turned back into your device or your Apple Account. No signal contains your name, username, step counts, Apple Health readings, messages, purchases or anything else from the sections above. The statistics are only ever looked at in aggregate. TelemetryDeck does not sell or share this data, does not use it for advertising, and does not track you across other apps or websites.

8. What Stepdy does not do

• No advertising and no advertising identifiers
• No tracking across apps or websites, and no analytics that can identify you
• No selling, renting or sharing of personal data
• No access to contacts, photos, microphone or precise location

9. Retention and deletion

Your published profile stays until you delete it. To remove everything, open Stepdy and go to You › Settings › Delete account & data. This permanently deletes your public profile, your group memberships, the messages you sent and your local history. Deletion is immediate and cannot be undone.

Messages already delivered to a group may remain visible in other members' local copies until their device next syncs.

The anonymous usage signals in section 7 are not linked to you, so there is nothing there that could be looked up or deleted for one person.

10. Children

Stepdy is not directed at children under 13 (or the equivalent minimum age in your country) and does not knowingly collect their data. If you believe a child has created a profile, write to farukmertkapar@gmail.com and it will be removed.

11. Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, and to object to its processing. The in‑app deletion above satisfies erasure immediately. For anything else, write to farukmertkapar@gmail.com and you will receive a reply within 30 days.

12. Changes

If this policy changes materially, the date at the top will be updated and the change will be announced in the app before it takes effect.