This privacy policy applies to the Step League app (hereby referred to as "Application") for mobile devices that was
created by Hakan Yiğit Unaç (hereby referred to as "Service Provider") as a Free / Freemium service. This service is
intended for use "AS IS".
Information Collection and Use
The Application collects information when you download and use it. This information may include information such as:
- Your device's Internet Protocol address (e.g. IP address)
- The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
- The time spent on the Application
- The operating system you use on your mobile device
- A username, optional full name, country selection, and optional profile photo that you provide during onboarding
- A unique user identifier issued by Apple when you sign in with Sign in with Apple
The Application does not gather precise location information about your mobile device.
The Application does not use Artificial Intelligence (AI) technologies to process your data or provide features.
The Service Provider may use the information you provided to contact you from time to time to provide you with important
information, required notices and marketing promotions.
For a better experience, while using the Application, the Service Provider may require you to provide certain personally
identifiable information. The information requested will be retained by the Service Provider and used as described in
this privacy policy.
Health and Fitness Data (Apple HealthKit)
The Application uses Apple's HealthKit framework to read health and fitness data from the Apple Health app on your
device, with your explicit permission. The following data types are read:
- Step Count — used to display your daily and weekly progress and to rank you on Friends, Country, World and
limited-time event leaderboards.
- Walking & Running Distance — used to display personal stats inside the Application.
- Flights Climbed — used to display personal stats inside the Application.
The Application only reads data from HealthKit. The Application does not write any data back to HealthKit and does not
access any other HealthKit data type (such as heart rate, sleep, workouts, GPS routes, or medical records).
Aggregated step totals (numerical sums for the day, week, or current event) are sent from your device to the Service
Provider's secure backend so that they can appear on leaderboards. Minute-level activity samples and other raw HealthKit
samples are never transmitted off your device.
The Service Provider will never:
- use HealthKit data for advertising, marketing, or any similar service;
- share HealthKit data with third parties for advertising, marketing or data-broker purposes;
- sell HealthKit data to anyone, for any purpose;
- disclose HealthKit data to third parties without your consent (except as required by law as described below).
You can revoke HealthKit access at any time from iPhone Settings → Privacy & Security → Health → Step League.
Third Party Access
Only aggregated, account-level data (your username, country, profile photo, daily/weekly step totals, and event totals)
is transmitted to external services so that the Application can function. Below are the third-party services used by the
Application and the data they receive:
- Apple — Sign in with Apple authentication. Apple receives the unique user identifier needed to authenticate you.
(https://www.apple.com/legal/privacy/)
- Supabase — secure cloud database and authentication backend used to store your profile and aggregated step totals.
Data is encrypted in transit (TLS) and at rest. (https://supabase.com/privacy)
- RevenueCat — subscription receipt validation when you purchase Step League Pro. RevenueCat receives only the data
needed to validate your purchase. (https://www.revenuecat.com/privacy)
The Service Provider does not share data with advertising networks, analytics third parties, or data brokers.
The Service Provider may disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the
safety of others, investigate fraud, or respond to a government request;
- with their trusted service providers who work on their behalf, do not have an independent use of the information that
is disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.
Opt-Out Rights
You can stop all collection of information by the Application easily by uninstalling it. You may use the standard
uninstall processes available as part of your mobile device or via the mobile application marketplace or network. You
can also revoke HealthKit access at any time from iPhone Settings → Privacy & Security → Health → Step League, without
uninstalling the Application.
Data Retention Policy
The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time
thereafter. If you would like the Service Provider to delete User Provided Data that you have provided via the
Application, including your profile, leaderboard records, and aggregated step totals, please contact them at
Settings → Edit Profile → Delete Account.
Children
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of
13.
The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally
identifiable information from children under 13 years of age. In the case the Service Provider discovers that a child
under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you
are a parent or guardian and you are aware that your child has provided us with personal information, please contact
the Service Provider (unachakanyigit@gmail.com) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider
provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and
maintains. All data transmitted between the Application and the Service Provider's backend is encrypted using TLS, and
stored data is encrypted at rest.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes
to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy
regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-04-29.
Your Consent
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy
now and as amended by the Service Provider.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please
contact the Service Provider via email at unachakanyigit@gmail.com.