Privacy Policy
Last updated: November 8, 2026
Step Champ ("the app", "we", "us") lets you sync your daily step count and compete with friends in private groups. This policy explains what we collect, why, who can see it, and the choices you have. How we handle step data specifically is also set out in our Consumer Health Data Privacy Policy.
Information we collect
- Account information. When you sign in with Google or with Apple, we receive your name, your email address (or an Apple private relay address if you choose Hide My Email) and an account identifier from that provider.
- Step counts. With your permission, the app reads your daily step totals from Apple Health on iPhone, from your iPhone's motion sensor if you choose that instead, or from Health Connect on Android. We read step counts only. We never write data back to Apple Health or Health Connect, and we never read heart rate, workouts, location or any other health data.
- What you create in the app. Your display name, your step goal and streaks, your Pip's outfit and coins, the groups and championships you create or join, and invite and referral codes.
- Purchases. If you buy coins, Apple or Google takes the payment; we never see your card or payment details. We and RevenueCat receive a record of each purchase: the product, its price, the date, the store's transaction number, and whether it was refunded. We also record when you open the Coins screen, to see how many visits end in a purchase.
- Reports. If you report another member, we store who reported whom, in which group, and the names at the time of the report.
- Technical data. Our servers record your IP address, request times and basic device and app information in their logs, for security and to keep the service running.
We do not collect precise location, contacts, photos, or advertising identifiers. Step Champ has no ads and does not track you. Its only analytics are the purchase reports described above. Daily reminders are scheduled on your device and are not sent through our servers.
How we use your information
- To sign you in and keep you signed in.
- To show group leaderboards, championship standings, streaks and coins.
- To grant referral rewards and prevent abuse of them.
- To add the coins you buy, take them back if a purchase is refunded, and see how the Coins screen is used.
- To review reports and enforce our Terms.
- To spot step counts that look faked, so standings stay fair.
- To keep the service secure, and to fix problems.
We do not sell your personal information, we do not share it for advertising, and we do not use your step data for advertising, marketing or data mining.
Automatic decisions. Our anti-cheat checks look at how many steps arrive and how fast. Steps beyond what a person can walk are not counted, and if the checks flag your account, it is hidden from your groups until we review it. This happens automatically. You can ask us why, see the information it was based on, correct it, and have a person review the decision, by emailing us.
Who can see your information
Members of the groups you join see your display name, your Pip, your daily step totals and your championship standings in that group. Nobody outside your groups can see them. Leave a group and its members no longer see your new steps.
Service providers
We use these providers to run Step Champ. They process data only on our instructions and are bound to protect it at least as well as this policy does.
- Microsoft Azure — hosts our servers, database and sign-in service, in Canada.
- Google — Sign in with Google, and Google Play payments.
- Apple — Sign in with Apple, Apple Health on your device, and App Store payments.
- RevenueCat — checks in-app purchases with Apple and Google and keeps the purchase record, in the United States.
We may also disclose information if the law requires it, or to protect the safety of our users or others.
If Step Champ changes hands
If Step Champ is sold, merged, or moved to another organization (for example a company set up to run it), your information moves with it. The new owner must keep handling it as this policy says, and we will tell you before it is used in any other way.
Where your data is stored
Your data is stored in Canada and sent to us over encrypted (HTTPS) connections. If you live elsewhere, your information is transferred to and processed in Canada. Purchase records are also kept by RevenueCat in the United States, where they may be accessed under US law.
How long we keep it
- Your account and step data: until you delete your account.
- After deletion: backup copies are removed within 30 days. We keep an anonymous count of how many people joined through your referral code; it is not linked to you.
- If you entered a friend's referral code: a one-way hash of your sign-in email, so the same sign-in cannot claim a referral reward twice. It does not contain your email.
- Reports: until they are resolved, then only as long as needed to handle abuse.
- Anti-cheat flags: with your account, and deleted when you delete it.
- Purchase records: with your account. When you delete it, we delete them from our database and from RevenueCat. Apple and Google keep their own records of your payments under their policies.
- Server logs: kept for a short period for security, then deleted.
Your choices and rights
- Stop step access at any time in Apple Health or Health Connect settings, or change the step source in the app under You → Step source.
- Delete your account in the app under You → Delete account, or by following our account deletion page.
- Access or correct your data. Edit your name in the app, or email us for a copy of what we hold about you.
Depending on where you live, you may have further rights, such as to know, correct or delete your personal information, or to appeal a decision we make about a request. Email us to use any of them; we will respond within 30 days and will not treat you differently for asking.
Age requirement
Step Champ is for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor is using the app, contact us and we will delete the account.
Security
We use encryption in transit, restricted database access and separate credentials for each part of the service. No system is perfectly secure; if a breach puts you at risk, we will tell you and the authorities as the law requires.
Do Not Track
We do not track you across other apps or websites, so we do not respond differently to Do Not Track signals.
This website
stepchamp.ca sets no cookies, has no analytics, and loads nothing from other companies: its fonts and images are served from our own domain. Microsoft Azure, which hosts it, may record standard request logs such as IP address and time, for security.
Changes to this policy
When we change this policy we update the date above. For a significant change we will also give notice where we reasonably can before it takes effect, and we will ask again before using your step data in a new way.
Contact and complaints
Our Privacy Officer is responsible for how Step Champ handles personal information. Questions, requests and privacy concerns: dota2yams@gmail.com
If you are not satisfied with how we handle a concern, you can complain to the Office of the Privacy Commissioner of Canada.