Privacy Policy

Last Updated: January 28, 2026

Welcome to Step Task ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Personal Information

When you register for an account, we may collect:

• Email address (for email registration)
• Third-party authentication tokens (for Apple, Google, or Facebook login)
• Username and profile information
• Device identifiers

1.2 Health and Fitness Data

With your explicit permission, we collect:

• Step count data from your device's pedometer or health tracking system
• Walking distance and calories burned (calculated from step data)
• Daily activity statistics

Important: We only access step count data. We do not access any other health information such as heart rate, sleep data, or medical records.

1.3 Usage Information

We automatically collect:

• App usage statistics and feature interactions
• Task completion records
• Reward redemption history
• Check-in history
• Device information (model, operating system version)
• Log data and crash reports

1.4 Future Advertising Data

In future versions of the app, we may collect:

• Advertising identifiers (IDFA on iOS, AAID on Android)
• Ad interaction data
• Ad performance metrics

Note: The current version does not display advertisements. We will update this policy and notify you before implementing advertising features.

2. How We Use Your Information

We use the collected information for the following purposes:

• Account Management: To create and manage your user account
• App Functionality: To track your steps, calculate rewards, and provide core app features
• Task System: To manage daily tasks, achievements, and reward distribution
• Rewards Program: To process energy points and reward redemptions
• Personalization: To customize your app experience
• Analytics: To understand app usage and improve our services
• Communication: To send important updates about your account or app changes
• Security: To detect and prevent fraud or unauthorized access
• Legal Compliance: To comply with applicable laws and regulations

3. Data Sharing and Disclosure

3.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Cloud hosting and data storage
• Analytics and app performance monitoring
• Authentication services (Apple, Google, Facebook)
• Future advertising partners (when ads are implemented)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes or government requests
• Protection of our rights, property, or safety
• Investigation of potential violations of our Terms of Service
• Prevention of fraud or security threats

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication using JWT tokens
• Regular security audits and updates
• Access controls and authentication requirements
• Secure server infrastructure

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Receive your data in a structured format
• Opt-Out: Disable step tracking or withdraw permissions

5.2 Health Data Permissions

You can revoke step tracking permissions at any time through your device settings:

• iOS: Settings > Privacy > Motion & Fitness or Health
• Android: Settings > Apps > Step Task > Permissions

5.3 Account Deletion

To delete your account and all associated data, please contact us at the email provided below. We will process your request within 30 days.

6. Children's Privacy

Our app is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

9. Third-Party Links and Services

Our app may contain links to third-party websites or integrate with third-party services (such as social media login). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending you a notification (for significant changes)

Your continued use of the app after changes become effective constitutes your acceptance of the revised policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent