Privacy Policy

This Privacy Policy explains what information Stepzy uses, where it goes, and the choices you have. The short version: your health data is processed on your own devices. We do not send it to our servers, we do not store it in iCloud, and we never sell it or use it for advertising.

1. Information We Collect

Stepzy is designed to work without an account. We do not ask for your name, email address or phone number, and we collect only what the App needs to work and to stay reliable.

1.1 Health Data (via Apple HealthKit)

With your permission, Stepzy may read the following from Apple Health:

• Steps
• Walking and running distance
• Flights climbed
• Active energy
• Heart rate, resting heart rate and heart rate variability
• Respiratory rate and VO2 max
• Workouts, including the GPS route recorded with a workout
• Height and weight (body mass)
• Date of birth, used only to estimate your heart rate zones

With your permission, Stepzy may also write to Apple Health the height and weight you enter yourself in Body measurements. It does not write any other data to Apple Health.

You choose which of these types Stepzy can read or write, and you can change that at any time (see Section 6). Stepzy does not request your device location. Workout routes come from Apple Health, not from the App tracking where you are.

1.2 Settings You Enter

Your step goals, activity level, theme, reminder preferences, skipped days and similar settings are stored on your device.

1.3 App Usage and Diagnostic Data

To understand which features are used and to fix crashes, Stepzy uses Google Firebase Analytics, Firebase Crashlytics and Firebase Performance Monitoring. These may collect:

• App usage events, such as screens viewed and features tapped
• Device model, operating system version and app version
• Crash reports and performance traces
• A Firebase app-instance identifier, a random ID created for this installation of the App

This data does not include your name, email address, or any health data or values derived from it, such as your step counts or workouts.

1.4 Subscription and Purchase Information

Stepzy Pro is purchased through Apple's in-app purchase system and managed by RevenueCat. When you buy, restore or check a subscription, RevenueCat receives:

• An app user identifier. This is either a random anonymous ID or a pseudonymous ID tied to your iCloud account for this App, so your purchase follows you to your other devices. It does not reveal your name, email or Apple Account.
• Subscription status (for example active, expired or in a trial)
• Transaction history for Stepzy purchases

We never receive your name, email, payment details or Apple Account credentials. All billing is handled by Apple.

1.5 Community (Reddit)

The App links to the r/StepzyApp community on Reddit. Joining is optional. If you visit or post there, Reddit collects information under its own privacy policy. Stepzy does not receive your Reddit data.

2. How We Use Your Information

We use information only to provide and improve Stepzy, specifically to:

• Show your steps, workouts, routes and activity insights
• Calculate goals, streaks, trends, awards and heart rate zones
• Schedule reminders on your device
• Unlock Stepzy Pro features
• Find and fix crashes and improve performance and stability
• Understand which features are used, so we know what to improve

We do not use your data for advertising. Stepzy does not track you across other companies' apps or websites, does not use the advertising identifier (IDFA), and does not show the App Tracking Transparency prompt because it has no reason to.

3. Where Your Data Lives

3.1 On Your Device

Health data is read and processed on your device. It is not sent to Suvysoft servers and is not stored in iCloud or CloudKit.

3.2 Apple Watch and Widgets

The Stepzy Apple Watch app and widgets read Health data on the device they run on. Your iPhone also shares today's step count, goal and streak with your own paired Apple Watch through Apple's WatchConnectivity, and with Stepzy's widgets through storage on your iPhone that only Stepzy can access. This information stays on your own devices.

3.3 AI Coach

On devices that support Apple Intelligence, the AI Coach runs entirely on your device using Apple's on-device model. Nothing you ask it, and nothing it reads, leaves your device. On other devices, Stepzy shows insights calculated on your device instead. If we ever introduce a cloud-based feature, the App will ask for your consent before sending anything, and we will update this policy first.

3.4 Notifications and Exports

Reminders are local notifications scheduled on your device. We do not send marketing push notifications. If you export your data as a CSV file, the file is created on your device and goes only where you choose to send it.

3.5 Security

Our service providers receive data over encrypted HTTPS connections. On your device, your data is protected by iOS and watchOS security, including your passcode and device encryption.

4. Sharing and Third-Party Services

We do not sell your personal information, and we do not share, sell or transfer HealthKit data to anyone. Stepzy relies on these services:

4.1 Apple

Apple HealthKit provides your health data with your permission. Apple processes payments and subscriptions, and Apple Intelligence powers the on-device AI Coach.

4.2 Google Firebase

Analytics, crash reporting and performance monitoring, as described in Section 1.3. Firebase does not receive health data.

4.3 RevenueCat

Subscription and entitlement management, as described in Section 1.4. RevenueCat does not receive health data.

4.4 Reddit (optional)

Only if you choose to visit the Stepzy community. Reddit's own privacy policy applies.

We may also disclose information if required by law, or to protect the rights and safety of our users or Suvysoft.

5. How Long We Keep Data

• Data stored on your device stays there until you delete it or delete the App. Data you allowed Stepzy to write to Apple Health remains in Apple Health until you remove it there.
• Analytics and performance data is kept by Firebase for a limited period under its retention settings, then deleted. Crash reports are kept for up to 90 days.
• Subscription records are kept by RevenueCat and Apple for as long as needed to provide your purchases and meet legal and accounting obligations.

6. Your Choices and Controls

You can:

• Change or revoke Health access at any time in Settings > Privacy & Security > Health > Stepzy, or in the Health app
• Turn reminders on or off in the App or in Settings > Notifications
• Delete the App to remove all data it stored on your device
• Manage or cancel subscriptions in Settings > [your name] > Subscriptions
• Contact us to ask about, or object to, analytics and diagnostic collection

7. Users in the EU, EEA and UK

If you live in the European Union, the European Economic Area or the United Kingdom, Suvysoft is the controller of the personal data described in this policy.

7.1 Legal Bases

• Consent: for access to your Apple Health data. You give it in Apple's permission screen and can withdraw it at any time.
• Contract: for providing Stepzy Pro when you purchase it.
• Legitimate interests: for crash reporting, performance monitoring and usage analytics, which keep the App working and help us improve it. You can object to this processing at any time.

7.2 Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Object to processing based on legitimate interests
• Receive your data in a portable format (the App's CSV export covers the activity data it shows)
• Lodge a complaint with your local data protection supervisory authority

Most of your data never reaches us, so the quickest way to delete on-device data is to delete the App. To exercise any other right, email us at [email protected]. We will respond within the time required by law and may ask for information that helps us locate the data, such as identifiers shown in the App.

7.3 International Transfers

Our service providers may process data in the United States and other countries. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. California and Other US States

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Depending on your state, you may have the right to know what personal information we collect, to access it, to correct it and to delete it. You can exercise these rights by emailing us, and we will not discriminate against you for doing so.

9. Children's Privacy

Stepzy is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Translations

The App is available in English, Spanish, French, German and Simplified Chinese. Translations of the App, its store listing or this policy are provided for convenience. If there is any difference between versions, the English version of this policy governs.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" above shows the latest version. If a change materially affects how we handle your data, we will let you know in the App or on this page before it takes effect.

12. Contact Us

If you have questions about this Privacy Policy, contact us:

• Email: [email protected]
• Website: www.suvysoft.com
• Business: Suvy LLC DBA Suvysoft
• Location: Olathe, Kansas, United States