# Step League — Privacy Policy
**Last updated:** August 17, 2026
Step League ("we", "our", "the app") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights.
> **What changed in this version:** Step League now shows advertising, supplied by Google AdMob, and offers an optional paid subscription (Step League Pro) that removes ads. Sections 1.4, 2, 4, 5 and 6 describe what that means for your data. **Your Apple Health data is still never used for advertising and is never shared with advertisers.**
## 1. Information We Collect
### 1.1 Health Data (via Apple HealthKit)
With your explicit permission, Step League reads the following from Apple Health on your device:
- **Step Count** — used to track your daily and weekly progress and rank you on leaderboards.
- **Walking & Running Distance** — used for personal stats.
- **Flights Climbed** — used for personal stats.
We **do not write** any data to Apple Health. We **never share** your health data with advertisers, data brokers, analytics providers, or any third party, and we never use it to target or personalise advertising.
### 1.2 Account Information
When you sign up via Apple Sign In, we collect:
- A unique user identifier from Apple
- Optional username and full name (provided by you during onboarding)
- Country selection (chosen by you)
- Profile photo (optional)
- Whether you hold an active Step League Pro subscription
### 1.3 Aggregated Step Totals
Daily and weekly step totals (numerical sums) are sent from your device to our server so they can appear on Team, Country, and World leaderboards.
We do **not** transmit minute-level activity, sleep data, GPS routes, heart rate, or any other HealthKit type beyond steps, distance, and floors.
### 1.4 Advertising Data (via Google AdMob)
If you are **not** a Step League Pro subscriber, the app displays banner advertising served by Google AdMob. To serve, measure and prevent fraud in those ads, Google may collect and process:
- **Device identifiers**, including the Identifier for Advertisers (IDFA) — only if you grant permission through Apple's App Tracking Transparency prompt
- **Coarse device and usage information**, such as device model, operating system version, general (country/region level) location derived from IP address, and ad interaction events (impressions, clicks)
- **Diagnostic data** relating to ad delivery
This collection is performed by Google, acting as an independent controller for advertising purposes. We do not receive your advertising identifier, and we never send Google your step counts, health data, username, email, or leaderboard position.
Google's handling of this data is governed by the [Google Privacy Policy](https://policies.google.com/privacy) and the [Google Advertising Policies](https://policies.google.com/technologies/ads).
### 1.5 Subscription Data
If you purchase Step League Pro, Apple processes your payment. We never see or store your payment card details. We receive from RevenueCat only the information needed to confirm whether your subscription is active, and we store a single true/false flag on your profile so the app can remove ads and display your name in gold.
## 2. How We Use Your Data
- To display your step counts and progress in the app
- To rank you on Team, Country, and World leaderboards
- To compute event results (e.g., the Spring Run event)
- To deliver in-app notifications about leaderboards and events
- To improve app performance and fix bugs
- To determine whether you hold an active Pro subscription, and therefore whether ads are shown
- **To display advertising** to non-subscribers, as described in Section 1.4
We do not sell your personal data.
**We never use Apple Health data — steps, distance, floors, or any other HealthKit type — for advertising, ad targeting, ad measurement, or marketing.** Advertising in Step League is not personalised using anything you do inside the app.
## 3. Where Your Data Is Stored
- **On your device:** HealthKit data remains on your device, controlled by iOS Health permissions.
- **On our server:** Aggregated step totals and account info are stored securely on Supabase (a Postgres-backed cloud platform), encrypted at rest and in transit (TLS).
- **With Google:** Advertising data described in Section 1.4 is processed on Google's infrastructure under Google's own policies.
## 4. Data Sharing
We do **not** sell your personal data. We share data only with:
| Recipient | What they receive | Why |
|---|---|---|
| **Apple** | Sign in with Apple identifier; subscription purchase data | Authentication and payment processing |
| **Supabase** | Account info and aggregated step totals | Hosting and database, under a data-processing agreement |
| **RevenueCat** | Subscription receipt data | Validating whether your subscription is active |
| **Google AdMob** | Device and ad-interaction data described in Section 1.4 | Serving, measuring and securing advertising |
**Google AdMob never receives your health data, step counts, username, email address, or leaderboard standing.**
## 5. Advertising Consent and Your Choices
### 5.1 Consent in the EU, UK and Switzerland
If you are located in a region covered by the GDPR or comparable rules, the app shows a consent form (provided by Google's User Messaging Platform) before any advertising is loaded. You may accept or refuse personalised advertising. Refusing does not restrict any app feature — you will still see ads, but they will not be personalised.
You can change your choice at any time by reopening the consent form from the app, or by reinstalling the app.
### 5.2 App Tracking Transparency
On iOS, the app asks for permission to track you across apps and websites before using your advertising identifier. If you decline, ads are still shown but are not personalised. You can change this at any time in **iPhone Settings → Privacy & Security → Tracking**.
### 5.3 Removing ads entirely
Step League Pro removes all advertising. When your subscription is active, no ad is requested and no ad SDK call is made from the app.
### 5.4 Limiting ad personalisation at the system level
You can also enable **iPhone Settings → Privacy & Security → Apple Advertising → Personalised Ads (off)** and reset your advertising identifier at any time.
## 6. Legal Bases (EEA/UK users)
- **Contract** — providing the app's core functionality (leaderboards, teams, events, subscription management)
- **Consent** — reading Apple Health data; personalised advertising; tracking via the advertising identifier
- **Legitimate interests** — app security, fraud prevention, non-personalised advertising to fund the free tier, and basic performance diagnostics
Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
## 7. Data Retention & Deletion
You can delete your account at any time from within the app (Settings → Edit Profile → Delete Account), which permanently removes your profile, username, country, subscription flag, and all leaderboard records from our servers within 30 days.
To revoke HealthKit access, go to **iPhone Settings → Privacy & Security → Health → Step League** and disable each category.
Advertising data held by Google is retained under Google's own retention schedules; see the Google Privacy Policy linked in Section 1.4.
## 8. Children's Privacy
Step League is not directed at children under 13. We do not knowingly collect personal data from children. The app is not tagged for child-directed treatment in AdMob. If you believe a child has provided us data, contact us and we will delete it.
## 9. Your Rights
Depending on your jurisdiction (e.g., GDPR in the EU/UK, CCPA/CPRA in California, KVKK in Turkey), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion
- Object to or restrict processing, including profiling for advertising
- Data portability
- Opt out of "sale" or "sharing" of personal information for cross-context behavioural advertising (California): you can exercise this by declining the App Tracking Transparency prompt, refusing consent in the advertising consent form, or subscribing to Step League Pro
To exercise these rights, contact us at the email below.
## 10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced inside the app or via this URL. The "Last updated" date at the top reflects the latest revision.
## 11. Contact
For privacy questions, data deletion requests, or any concerns:
**Email:** unachakanyigit@gmail.com
**App:** Step League: Walking Challenge
---
*Step League uses Apple HealthKit data solely to deliver the app's core functionality. We will never use HealthKit data for advertising or marketing, share it with third parties for advertising, or sell it.*