Privacy Policy

Last Updated: July 12, 2026

Effective Date: July 12, 2026

1. Introduction

Welcome to Stepura ("we", "our", "us"). Stepura is a mobile fitness application that helps users track daily steps, record GPS workouts, join fitness challenges and adventures, maintain activity streaks, and monitor health-related metrics. This Privacy Policy explains how your information is handled when you use our application.

By using Stepura, you agree to the practices described in this Privacy Policy.

2. Information We Do NOT Collect

Stepura is designed with your privacy as a priority. We want to be transparent:

• We do NOT collect any personal information
• We do NOT upload your fitness data to any server
• We do NOT use analytics or tracking services
• We do NOT use advertising SDKs or ad networks
• We do NOT sell or share any data with third parties
• We do NOT require user accounts or login
• We have NO servers or databases that store your data

3. Information Stored Locally on Your Device

To provide the app's functionality, Stepura stores the following information locally on your device only using the device's internal storage (AsyncStorage):

3.1 Profile Information

• Name (for personalized greetings)
• Email (optional, for future features)
• Age and gender (for accurate calorie calculations)
• Weight and height (for stride length and calorie burn calculations)

3.2 Fitness & Activity Data

• Daily step count (from device motion sensors)
• Estimated calories burned
• Estimated distance walked
• Active time duration
• Daily step history (up to 365 days)

3.3 Workout & GPS Data

• Recorded workouts (walks, runs, hikes, rides) with duration, distance and pace
• GPS route points captured while you record a workout
• Your last known location (used to suggest nearby adventures)

GPS routes are stored only on your device. They are never uploaded anywhere.

3.4 Challenge & Progress Data

• Active and completed challenges and adventures
• Daily challenge completions
• Streak counts, streak freezes and history
• Badges and milestone achievements

3.5 App Preferences

• Theme preference (light/dark)
• Reminder and notification settings
• Daily step goal
• Map style preference

3.6 Apple Health Data (iOS only)

• On iOS, with your permission, Stepura reads your step count from Apple Health. This is what makes the number in Stepura match the Health app, and it is what lets your existing step history appear when you first install.
• Stepura reads step count and nothing else. It requests no other health category, and it never writes any data into Apple Health.
• Health data is used only to show your activity, streaks, challenges and journeys inside the App. It is never used for advertising or marketing, never sold, never shared with third parties, and never transmitted to any server. It stays on your device.
• You can review or revoke this access at any time in iOS Settings › Privacy & Security › Health › Stepura. Revoking access does not delete data already stored on your device.

3.7 Subscription Status

• If you subscribe to Stepura Pro, your device stores a simple flag recording whether the subscription is currently active, so that paid features keep working offline.
• Purchases are processed entirely by Apple or Google. Stepura never receives, sees or stores your name, card number, billing address, or any other payment information.

4. Device Permissions

4.1 Android

Stepura requests the following Android permissions:

• ACTIVITY_RECOGNITION — Required to access the device's step counter sensor. This is the core functionality of the app. Without this permission, step counting will not work.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION — Used only while you actively record a workout, to draw your route on the map and measure distance. Stepura never requests background location, and location is never collected when you are not recording.
• FOREGROUND_SERVICE / FOREGROUND_SERVICE_LOCATION — Keeps an active workout recording running reliably (with a visible notification) if you switch apps or turn off the screen during a session you started.
• POST_NOTIFICATIONS — Used to show optional daily reminders, streak warnings, and the active-workout notification. You can decline this and the app still works.
• SCHEDULE_EXACT_ALARM — Optional. Only used if you enable "Precise timing" for reminders so they arrive at the exact minute even in battery saver.
• INTERNET — Used to download map tiles from Mapbox when a map is on screen. No fitness or personal data is transmitted.
• RECEIVE_BOOT_COMPLETED — Allows the step counter to properly reset its baseline when the device restarts, ensuring accurate daily step counts.

4.2 iOS

Stepura requests the following iOS permissions:

• Motion & Fitness — Required to read step data from the device's motion sensor. This is the core functionality of the App. Without it, step counting will not work.
• Health — Optional. Read-only access to your step count in Apple Health, so Stepura's figure matches the Health app and your existing history can be shown. See section 3.6.
• Location (While Using the App) — Used only while you are actively recording a workout, to draw your route and measure distance. Stepura never requests "Always" location access, and never collects location when you are not recording.
• Notifications — Optional. Used for daily reminders and streak warnings. You can decline and the App still works.
• Photos (Add Only) — Optional. Used only if you choose to save a shared image to your photo library. Stepura cannot read your photo library.

5. Data Security

Since all data is stored locally on your device:

• Your data is protected by your device's built-in security (PIN, fingerprint, face unlock)
• Your fitness and personal data is never transmitted over the internet, eliminating the risk of interception
• No cloud storage means no risk of server breaches

6. Data Deletion

You have full control over your data at all times:

• Clear app data: Go to your device Settings → Apps → Stepura → Storage → Clear Data. This permanently deletes all app data.
• Uninstall the app: Uninstalling Stepura automatically removes all stored data from your device.

Since we have no servers or backups, once data is deleted from your device, it cannot be recovered by anyone.

7. Children's Privacy

Stepura is not directed at children under the age of 13. We do not knowingly collect any information from children. The app is intended for users aged 18 and above.

8. Third-Party Services

Stepura uses exactly one third-party service:

8.1 Mapbox (Maps)

• Map screens (workout recording, route previews, adventure maps) load map imagery from Mapbox. When a map is displayed, your device requests map tiles from Mapbox servers, which — like any internet request — includes your IP address and the map area being viewed.
• Your GPS routes, workouts, and profile data are never sent to Mapbox. Only standard map-tile requests are made.
• Mapbox's handling of these requests is described in the Mapbox Privacy Policy.

Beyond Mapbox map tiles, Stepura does not integrate with any analytics platforms, advertising networks, or social media SDKs, and operates offline.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or the Stepura app, please contact us at:

• Email: letsdev.sohaib@gmail.com
• Developer: Sohaib Zahid