Privacy Policy

This Privacy Policy was last updated on April 17th, 2024

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or use our services from https://step.app (the “Site”), the Step App (the “App”) or StepHealth (the “StepHealth”).

Personal Information We Collect

When you visit the Site, the App or StepHealth, we automatically collect certain information about your device, including the type of mobile device you use, information about your web browser, IP address, the mobile device's unique ID, operating system, time zone, type of mobile internet browser and some of the cookies that are installed on your device. Additionally, as you browse the Site, App or StepHealth, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”. We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit www.allaboutcookies.org. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site or App.You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site or App.You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site or App.

- “Log files” track actions occurring on the Site, the App or StepHealth, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons” “tags” and “pixels” are electronic files used to record information about how you browse the Site, the App or StepHealth.

Additionally, when you use our Services through the Site, the App or StepHealth, we might collect certain information from you, including your full name, residency, nationality, billing address, payment information (including credit card numbers or wallet addresses) and email address. We refer to this information as “Order Information”.

Furthermore, with your consent, Step App will collect the following information to function properly and monitor and verify forms of eligible movements:
- Background geolocation,
- Physical movements,
- Information from your camera and photo library,
- Apple and/or Google authorization information.

Said location and/or movement data will be stored on your device while using the App, once verified, we will not retain and/or process said information in any capacity. You may turn location and/or movement monitoring on and off from time to time using the settings of your operating system of your device but, if you disable this functionality, we will not be able to collect the necessary information which will prevent tracking and/or conversion of your movement into rewards. We refer to this information as “Location Data or Movement Data”.

With your permission, StepHealth also collects the following data:
- Age,
- Gender,
- Height,
- Weight,
- Health data,
- Usage data,
- Information from your camera and photo library,
- Apple and/or Google authorization information.

We use this information to provide features of Our Service and to improve and customize Our Service. The information may be uploaded to the Company's servers and/or a Service Provider's server or it may be simply stored on Your device.

You can enable or disable access to this information at any time, through Your Device settings.

How We May Use Your Personal Information?

We use the Personal Information that we collect to provide and maintain our services and to fulfill any transactions placed through the Site, the App or StepHealth. Additionally, we use this Personal Information to:

- Communicate with you and notify you about changes to our services;
- Re-contact with you if we have not heard from you in a while;
- Allow you to participate in interactive features of our services;
- Provide you with information or advertising relating to our own and our partner’s services (when in line with the preferences you have shared with us);
- Permit you to participate in social sharing;
- Including live social media feeds;
- Provide customer care and support;
- Provide analysis or valuable information to improve our services;
- Detect, prevent and address technical issues; and screen our services for potential risk or fraud.

Third-Party Disclosure

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide users with advance notice and obtain their consent. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users. In addition, we may use third-party service providers to monitor and analyze the use of our services. These third parties may have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purposes.

We may also release Personal Information, within the given legal boundaries, when its release is appropriate to enforce our site and app policies or protect our or others’ rights, property, or safety. Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Non-personally identifiable information may, within the given legal boundaries, be provided to other parties for marketing, advertising, or other uses. We will not disclose such information to third parties if we have received and processed a request from you not to do so. To submit such a request, please contact us in accordance with the “Contact Us” section below.

Do Not Track

Please note that we do not alter our Site’s, App’s and StepHealth’s data collection and practices when we see a “Do Not Track” signal from your browser. Do Not Track (DNT) is a privacy preference you can set in most browsers. There is no standard interpretation or practice for responding to DNT signals, so we handle all user information consistent with this privacy policy. For more details, you can visit www.allaboutdnt.com.

Third-party Sites And Integrations

Our Site, App or StepHealth and the services provided within them may contain links to other sites that are not operated by us. If you click on a third-party link, you will be redirected to that third-party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children’s Privacy

Our Site, App or StepHealth (and any related services) do not address anyone under the age of 18 (“children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your children have provided us with Personal Information, please contact us in accordance with the “Contact Us” section below. If we become aware of the fact that we have collected Personal Information from children without verification of parental consent, we take steps to remove that Personal Information from our servers.

How Do We Protect Your Personal Information?

Our Site, App or StepHealth are scanned on a regular basis for security holes and known vulnerabilities in order to make your visit as safe as possible and reduce the risk of loss, misuse, unauthorized access, disclosure or modification of your Personal Information. Unfortunately, no (digital) system or network can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below.

Data Protection and Security Measures
‍
‍We take the security of your personal data seriously and employ various measures to ensure its protection against unauthorized access, destruction, loss, alteration, or disclosure. Our data protection mechanisms include:
‍
- Encryption: All sensitive data is encrypted both in transit and at rest using industry-standard encryption protocols. This ensures that your data is protected from unauthorized access during transmission and when stored on our servers.
‍
- Access Controls: We implement strict access control measures to ensure that only authorized personnel have access to sensitive data. Access to personal data is granted on a need-to-know basis and is regularly reviewed.

- Secure Storage: Sensitive data is stored in secure environments with robust physical and technical safeguards in place. We utilize secure servers and data centers that comply with industry security standards.

- Data Minimization: We collect and process only the minimum amount of personal data necessary for the purposes outlined in this policy. This helps to reduce the risk of data breaches and unauthorized access.

- Incident Response: In the event of a data breach or security incident, we have established procedures to respond promptly and effectively. This includes notifying affected individuals and relevant authorities as required by law.

- User Controls: We provide users with tools and settings to manage their privacy preferences and control the sharing of their data. Users can access, modify, and delete their personal data as needed.

By implementing these measures, we aim to protect your personal data and ensure its confidentiality, integrity, and availability.

Your Rights

When it comes to your rights, we want to make sure you have everything you need to make informed decisions. You have the right to (i) know how your personal information is used, (ii) access, request and receive the personal information we have collected, (iii) Object to having your data sold or shared, and (iv) request that we correct, update or delete your personal information. To submit such a request, please contact us in accordance with the “Contact Us” section below.

Additionally, we note that we are processing your information in order to fulfill contracts (transactions) we might have with you, or otherwise to pursue our legitimate business interests listed above. Please note that your Personal Information might be transferred to and processed in countries outside of your jurisdiction, including Canada and the United States. Your consent to this privacy policy followed by your submission of such information represents your agreement to such transfer.

Data Retention

Your Personal Information will be retained for the period necessary to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted for legal, auditing, or compliance purposes.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page. Your use of the Site or the App following these changes means that you accept the revised privacy policy.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at privacy@step.app. Please note that email communications are not always secure, so please do not include unnecessary sensitive information in any emails.

If you would like your information to not be disclosed to third parties in accordance with this privacy policy, please contact us by email at privacy@step.app with the subject “Don’t disclose my information:(username)”. As far as (blockchain) technology allows us to, we will take the necessary measures to stop such disclosure of your Personal Information. Please note that we may continue to share your information with our affiliates, and service providers, for essential purposes described above and other such circumstances.

If you would like access to your personal information, please contact us by email at privacy@step.app with the subject “Access:(username)”. As far as (blockchain) technology allows us to, we will take the necessary measures to grant access to your Personal Information.

If you would like your personal information updated, please contact us by email at privacy@step.app with the subject “Update:(username)”. As far as (blockchain) technology allows us to, we will take the necessary measures to update your Personal Information.

If you would like your personal information deleted, please contact us by email at privacy@step.app with the subject “Delete:(username)”. As far as (blockchain) technology allows us to, we will take the necessary measures to delete your Personal Information.

If you are a parent or guardian and you are aware that your children have provided us with Personal Information, please contact us by email at privacy@step.app with the subject “ChildID:(username)”. As far as (blockchain) technology allows us to, we will take the necessary measures to delete this Personal Information.

If you have reason to believe that your interaction with us is no longer secure, please contact us by email at privacy@step.app with the subject “Security:(issue)”.

Third-Party Cookies

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners. You may read more about any of the purposes or vendors that we use below. This preference centre is accessible at any time through the ‘Manage Privacy Preferences’ button located on every page.

1. Analytical Cookies

We implemented cookies and other technologies used for analytics to help collect data that allows our services to understand how you interact with a particular service. These insights allow us to both improve content and build better features that enhance your experience. These cookies are used by third-party service providers to analyse how our sites are used and how they are performing. These tools use programming code to collect info about your interactions and do not store any personally identifiable information.

List of partners

We use cookies from Google Tag Manager, Google Analytics, Google Play Store, Google Search Console, Youtube, Twitter, Facebook, Instagram, AppsFlyer, Reddit … to obtain web analytics and intelligence about your usage across our websites and applications.

2. Functionality Cookies

These cookies allow our site to remember the choices you make when you visit in order to provide enhanced, personalised features to you like the language preference and region you are located in.

3. Advertising and Retargeting Cookies

These cookies save information from your browsing history in order to record your interest and your browsing path on our website. We may use advertising and targeting cookies for retargeting which enables our advertising partners to target ads to you on other websites, based on your visit to our site. Without these cookies, the online advertisement you encounter will be less relevant to you and your interests. You can contact our Data Protection Officer by emailing dataprotection@step.app.