Privacy Policy
Effective date: 6 July 2026
This policy explains what personal data Steparö ("we", "us") collects, why,
and what control you have over it. It applies to the Steparö mobile app and
merchant portal.
What we collect
- Account data — email address, display name, phone number and,
if you add one, a profile photo.
- Step data — your daily step totals, read with your permission
from Apple Health (iOS) or Health Connect (Android). We store daily totals
only, never routes, locations or other health metrics.
- Rewards data — the points you earn and the vouchers you redeem.
- Device identifier — a random identifier for your device, used
solely to prevent reward abuse (one device per account per day).
How we use it
- Step totals are used solely to calculate reward points and your
position on the weekly leaderboard.
- Contact details secure your account and, if you opt in, deliver announcements.
- We never sell your data, and we never share your health data with
anyone — including merchants.
What others see
- Other users see your display name, profile photo and weekly step
total on the leaderboard. You can change your display name at any time.
- Merchants see only the voucher code and its status when you
redeem — never your step history or personal details.
Where your data lives
Your data is stored with our infrastructure provider (Supabase) in the
European Union and protected by row-level security, so only you can access
your records. Push notifications are delivered via Google Firebase.
Retention and deletion
We keep your data while your account is active. You can delete your account
at any time from Profile → Delete Account in the app — this
permanently removes your account, step history, points and vouchers. For data
requests (access, correction, export) contact us at the address below.
Your rights
Under the GDPR you have the right to access, correct, export and erase your
personal data, and to object to or restrict its processing. To exercise any of
these rights, email us. You also have the right to lodge a complaint with the
Information and Data Protection Commissioner (Malta).
Contact
Data controller: Steparö, Malta.
Privacy questions and data requests:
support@steparo.app
