StepBattle ("we", "our", or "us") is a mobile fitness game that turns your real-world step count into head-to-head and squad-based competitions. This Privacy Policy explains what information we collect when you use the StepBattle app on iOS and Android, why we collect it, how it is used, and the choices you have.
By creating an account or using StepBattle, you agree to the practices described here. If you do not agree, please do not use the app.
01 Who We Are
StepBattle is developed and operated by an independent developer.
- Developer: [Your Name / Studio Name]
- App name: StepBattle
- Contact email: privacy@stepbattle.me
- Website: stepbattle.me
- Country of operation: United Arab Emirates
This template uses a placeholder developer name. Replace it and confirm the contact email above with your real information before publishing.
02 Data We Collect
We collect the minimum data necessary to operate the game.
| Category | Specific data | Source |
|---|
| Account identity | Firebase UID, username, avatar, bio | You provide it at sign-up |
| Authentication | Google or Apple account email (sign-in only) | Google / Apple Sign-In |
| Health & fitness | Step count, distance, calories | Google Fit / Apple HealthKit |
| Game progression | XP, level, earned coins, win/loss, streaks, achievements | Generated by gameplay |
| Social & squad | Squad membership, friend list, challenge history | Your in-app actions |
| Battle data | Match results, steps per battle, opponent UIDs, timestamps | Generated by gameplay |
| Push notifications | FCM device token | Your device |
| Technical / logs | Crash reports, server error logs | Automated |
We do not collect precise GPS location, contacts, photos, microphone input, browsing history, or any financial or payment information. StepBattle is free and contains no purchases.
03 Health & Fitness Data
We only read your step count, distance, and calorie estimates. We do not access heart rate, sleep, nutrition, menstrual health, blood glucose, or any other health category. We never write data back to Google Fit or Apple Health.
- On iOS, we read step data via Apple HealthKit using the step count permission. Manually entered steps are excluded from battles.
- On Android, we read step data via Google Fit / Health Connect. Manually entered records are identified and excluded.
- Step counts sync to our backend over HTTPS to calculate live battle and squad scores.
- Aggregated totals are stored and displayed on your profile and leaderboards.
Health data is never used for advertising, sold to third parties, or shared with anyone other than our backend infrastructure for the sole purpose of running the game. You can revoke health permission any time in device settings.
04 How We Use Your Data
- Run the game — authenticate you, sync steps, calculate battle and squad scores, distribute rewards.
- Display leaderboards — show your rank relative to other players. Your username and avatar are visible; your email is never shown.
- Send push notifications — battle updates, friend requests, squad challenges, daily reminders. Disable any time in device settings.
- Detect cheating — flag abnormally high step submissions (e.g. more than 10,000 steps in five minutes) to protect fair play.
- Improve the app — aggregated, anonymised crash and performance data helps us fix bugs.
- Comply with the law — respond to lawful requests from courts or regulators as required.
We do not use your data for advertising, marketing profiling, or automated decisions that produce legal or similarly significant effects on you.
05 Third-Party Services
| Service | Purpose | Data shared |
|---|
| Firebase Auth | Sign-in and identity | UID, email (auth only) |
| Firestore | Live game database | All game data in Section 2 |
| Firebase Messaging | Push notifications | FCM device token |
| Google / Apple Sign-In | OAuth authentication | Account email and name |
| Google Fit / HealthKit | Read steps, distance, calories | Step, distance, calorie data only |
No advertising networks or social tracking pixels are included in StepBattle.
06 Data Sharing & Selling
We do not sell, rent, or trade your personal data to any third party. Ever.
- With other players: your username, avatar, level, and win/loss record appear on leaderboards and squad views. Your email is never shown.
- With infrastructure providers: as listed in Section 5, solely to operate the service.
- Legal requirements: if required by law or a valid court order, we may disclose data to competent authorities.
- Business transfers: if StepBattle is acquired, your data may transfer to the new owner under the same protections, with advance notice to you.
07 Data Retention
- Account and game data — kept for the life of your account, deleted within 30 days of a deletion request.
- Step sync records — retained for 90 days for anti-cheat review, then automatically deleted.
- Battle and squad history — retained for leaderboards, anonymised after account deletion.
- Server logs — retained for 30 days for debugging, then deleted.
- Push tokens — deleted immediately on sign-out or permission revocation.
08 Security
- All data in transit is encrypted using TLS 1.2 or higher (HTTPS).
- Firestore Security Rules restrict data access to authenticated users and only to their own records.
- Every API request requires a valid Firebase ID token; unauthenticated requests are rejected.
- Step submissions include anomaly detection — physiologically impossible values are flagged and not credited.
No method of transmission over the internet is 100% secure. If you discover a vulnerability, please report it to the contact email in Section 12.
09 Your Rights
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request deletion of your account and data, actioned within 30 days.
- Portability — request your data in a structured, machine-readable format.
- Withdraw consent — revoke health permissions or disable notifications any time in device settings.
- Objection — object to any processing you believe is unjustified.
To exercise any of these rights, email us with the subject "Privacy Request." We respond within 30 days. You can also delete your account directly in the app via Profile → Settings → Delete Account.
UAE users may have additional rights under applicable UAE data protection law. EEA / UK users (GDPR): you have the right to lodge a complaint with your local supervisory authority.
10 Children's Privacy
StepBattle is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you are a parent or guardian and believe your child created an account, contact us and we will delete it promptly. Users between 13 and 18 should use the app only with parental or guardian consent.
11 Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised. For material changes affecting your rights or how we use your data, we will notify you via push notification or in-app banner at least 7 days before the change takes effect. Continued use of StepBattle after that date constitutes acceptance of the updated policy.
12 Contact Us
Questions, concerns, or requests about this policy or your data? Reach out: