Privacy Policy

Summary

We collect as little as we can. Your step screenshots and watch photos are read on your phone and are never uploaded. Apple Health data is only read with your permission, only for your step count, and is never sold, shared for advertising, or used for anything other than your own step log.

What stays on your device

• Step screenshots and watch scans. The number is read on your device. The image is not uploaded. We keep only a one-way fingerprint (hash) of each screenshot so the same image can’t be counted twice.
• Your avatar and step log are stored in your browser or app storage on your device.

What we store if you use a key

If you unlock with an App Store purchase (and on any device where you sign in with the personal key it gives you), we store your avatar settings, step log (dates and step counts) and unlocked items against that key, so they sync between your devices. A signed cookie keeps the app unlocked.

Apple Health (iPhone app only)

• With your permission, the app reads your daily step count from Apple Health. It does not read other health data and does not write anything to Apple Health.
• Steps read from Apple Health are added to your step log like any other entry. They are stored on your device, and against your key if you use one (see above).
• We do not use Apple Health data for advertising or marketing, do not sell it, and do not share it with third parties. We do not store it in iCloud.
• You can turn access off at any time in the Health app: Sharing › Apps › Step Avatar.

Camera and photos

The camera is used only when you tap “Scan Smart Watch”, to read the step count shown on your watch. Photos you pick are used only to read a step count. Neither is uploaded.

Leaderboards and groups (opt-in)

Leaderboards are off unless you turn them on. If you join the global leaderboard or a group, your display name, country flag, monthly step total and avatar are shown to other people who view that board or have the group link. You can opt out under My Groups at any time. No offensive names: anyone can report a name or hide a person with the ⋯ menu on a board, and reported names are reviewed within 24 hours. A report stores the reported display name, an anonymous member reference (never your key), the group code, the reason and the time, and is deleted after 90 days. Group creators can remove members from their group.

Purchases

In the iPhone app, the one-time unlock is sold through Apple’s App Store; Apple processes the payment and we never see your payment details. We use RevenueCat to confirm App Store purchases: RevenueCat receives the purchase record from Apple and an anonymous app user ID (no name or email), and we check it to unlock your builder on your devices. RevenueCat’s privacy policy applies to that processing.

Basic logs

Our hosting provider (Cloudflare) processes requests to serve the site. We log buy-button clicks with the date, the button, the referring site’s domain and a country code, to count interest. We do not use advertising trackers in the app.

Children

Step Avatar is not directed at children under 13.

Deleting your data

You can delete your data yourself, in the app or on the website: in the Avatar Builder, tap Delete my data (next to Sign out) and confirm. This deletes your avatar, step log, gear, leaderboard entries (every month) and group memberships from our servers right away, signs out your devices and clears the device you used. Groups you created stay open for their other members, and the oldest remaining member becomes the group’s owner. Your personal key and any App Store purchase stay valid, so Restore Purchases or signing in with your key starts fresh. Deletion can’t be undone. Clearing the app’s or browser’s storage removes on-device data only. For any privacy question, contact contact@properlimit.com.

Changes

If this policy changes, we will update this page and its effective date.