Steps Club | The Social Steps App

1. INTRODUCTION

Welcome to Steps Club ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"), our website (e.g. stepsclubapp.com), or our Service. It covers both the App and the website, including invite pages and shared invite links. We are committed to protecting your privacy and handling your data with care.

By downloading, installing, accessing, or using the Steps Club app or our website, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the App or the website.

This Service is provided by Nicholas Cernera.

2. INFORMATION WE COLLECT

We collect several types of information to provide and improve our Service:

2.1 Personal Information You Provide

When you create an account or use our Service, we may collect:

Name and display name
Email address
Phone number (optional, for contact matching with friends)
Profile picture (if you choose to upload one)
Username
Authentication information (via Apple Sign In or email/password)

2.2 Health and Fitness Data

With your explicit consent, we collect health and fitness data from your device:

Step count data from Apple HealthKit (iOS) or Google Fit/Health Connect (Android)
This data is used solely to track your daily step count and enable social features like leaderboards and step sharing with friends

We do not write data to HealthKit or Health Connect. We only read step count data that you have authorized us to access.

2.3 Usage and Analytics Data

We automatically collect certain information about how you use the App:

App usage data (features accessed, screens viewed)
Product interaction data for analytics purposes
Device information (device type, operating system version)
App version and build information

2.4 Crash and Error Data

To improve app stability and fix bugs, we collect:

Crash reports and error logs
Technical diagnostic information
Performance data

2.5 Third-Party Account Information (Optional)

If you choose to connect your Discord account:

Discord user ID, username, and avatar
Discord OAuth tokens (encrypted and stored securely)
Voice channel status (only if you enable Discord sharing features)

2.6 Invite Links and Website

When you share a friend or club invite from the App, we create and store an invite record that may include your user ID, username, invite type, and for club invites the club ID. We use this to deliver the invite and measure attribution; invite links expire (e.g. within 48 hours).

When you open an invite link on our website (e.g. stepsclubapp.com), we may collect your IP address, screen size (width and height), and timezone to associate your device with that invite—for example, so we can recognize you after you install the App. Our servers derive your IP from the request; we do not require you to send it.

When you open the App after installing it, we may send screen size and timezone (and our servers may use your IP address) to match your app session to a prior invite click, so we can attribute the install to the correct invite and show you the right invite in the App.

If you tap "Have an invite link?" in the App, we read the clipboard only to detect Steps Club invite URLs and to open that invite in the App. We do not store or send raw clipboard content; we only use the parsed invite token to fetch and display the invite.

Our website may use cookies or similar technologies (such as session storage) in connection with invite pages to provide invite functionality. For other uses of cookies or similar technologies on our website, please contact us.

3. HOW WE USE YOUR INFORMATION

We use the collected information for the following purposes:

3.1 Core App Functionality

To provide step tracking and fitness features
To enable social features (friends, clubs, leaderboards)
To manage your account and authenticate your identity
To sync your data across your devices
To send you push notifications (step reminders, friend requests, club updates, etc.)

3.2 Service Improvement

To analyze app usage and improve our Service
To fix bugs and improve app performance
To develop new features and functionality

3.3 Communication

To respond to your support requests
To send you important updates about the Service
To notify you about friend requests, club invitations, and other social activities

3.4 Subscription Management

To process subscription purchases and manage your Pro subscription
To verify subscription status and unlock premium features

3.5 Invite Links and Attribution

We use invite data and the device-matching data described in Section 2.6 to:

Deliver and display invites (including sender username and profile picture, and for club invites the club name and logo) on the website and in the App
Attribute app installs to the correct invite link
Improve invite and referral flows

4. THIRD-PARTY SERVICES

We use third-party services that may collect, store, or process your information:

4.1 Firebase (Google)

We use Google Firebase services for:

Authentication (Firebase Auth)
Database storage (Firebase Realtime Database)
File storage (Firebase Storage for profile pictures)
Analytics (Firebase Analytics)
Cloud Functions (server-side processing)
Push notifications (Firebase Cloud Messaging)

Your data stored with Firebase is subject to Google's Privacy Policy.

4.2 Sentry

We use Sentry for error tracking and crash reporting. Sentry collects technical diagnostic information to help us identify and fix bugs.

Sentry's Privacy Policy

4.3 RevenueCat

We use RevenueCat to manage subscriptions and verify your subscription status. RevenueCat works with Apple App Store and Google Play Store payment systems. We do not receive or store your payment card details; all payment processing is handled by Apple or Google.

RevenueCat's Privacy Policy

4.4 Apple and Google

Apple HealthKit (iOS): Your health data is accessed through Apple's HealthKit framework, which provides privacy controls built into iOS
Google Fit / Health Connect (Android): Your health data is accessed through Google's health data platforms
Apple Sign In: If you use Apple Sign In, your authentication is handled by Apple
Payment Processing: Subscription payments are processed through Apple App Store or Google Play Store

4.5 Discord (Optional)

If you choose to connect your Discord account, we integrate with Discord's API to enable voice status sharing features. Your Discord connection is optional and can be disconnected at any time.

Discord's Privacy Policy

5. DATA STORAGE AND SECURITY

5.1 Data Storage

Your data is stored on secure servers provided by Google Firebase (Google Cloud Platform). Data is stored in the United States, but may be processed in other locations where Google operates data centers.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your information:

Data encryption in transit (HTTPS/TLS)
Encrypted storage for sensitive information (such as Discord OAuth tokens)
Secure authentication methods
Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. DATA SHARING AND DISCLOSURE

We do not sell your personal information or health data.

We may share your information only in the following circumstances:

6.1 With Your Consent

When you explicitly consent to sharing (e.g., sharing your step count with friends or club members)
When you choose to connect third-party accounts (Discord)

6.2 Service Providers

With third-party service providers who perform services on our behalf (Firebase, Sentry, RevenueCat) and who are bound by contractual obligations to keep your information confidential.

6.3 Legal Requirements

When required by law, court order, or governmental regulation
To protect our rights, privacy, safety, or property, or that of our users
In connection with any legal investigation

6.4 Social Features

Your profile information (name, profile picture, username) is visible to friends and club members you choose to connect with
Your step count data may be shared with friends and club members based on your privacy settings

7. YOUR RIGHTS AND CHOICES

You have certain rights regarding your personal information:

7.1 Access and Correction

You can access and update your profile information directly within the App's settings.

7.2 Account Deletion

You can delete your account at any time through the App's settings. When you delete your account:

All your personal information and data will be permanently deleted
Your profile pictures will be removed
You will be removed from all clubs and friend lists
Your step data will be deleted
Your subscription will be canceled (if active)

Account deletion is permanent and cannot be undone. To delete your account, go to Settings > Delete Account.

7.3 Analytics Opt-Out

You can opt out of analytics data collection through the App's privacy settings. This will disable Firebase Analytics for your account.

7.4 Health Data Access

You can revoke access to your health data at any time through your device's privacy settings:

iOS: Settings > Privacy & Security > Health > Steps Club
Android: Settings > Apps > Steps Club > Permissions > Health data

7.5 Push Notifications

You can manage push notification preferences through your device settings or within the App.

7.6 Discord Connection

You can disconnect your Discord account at any time through the App's settings.

8. DATA RETENTION

We retain your information for as long as your account is active or as needed to provide you with our Service. When you delete your account, we will delete or anonymize your personal information within a reasonable time period, except where we are required to retain information for legal purposes.

Invite records and invite-click (device-matching) data are kept only for limited periods: invite records typically expire within a short window (e.g. 48 hours), and data used to match a post-install app open to a prior invite click is retained only for a short period (e.g. a few hours) and is deleted or overwritten after use as described in our product.

We may retain certain other information:

As required by law or for legitimate business purposes
To resolve disputes and enforce our agreements
Analytics data may be retained in anonymized or aggregated form

9. CHILDREN'S PRIVACY

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at nick@cernera.design and we will take steps to delete such information.

If we become aware that we have collected personal information from a child under 13, we will delete that information promptly.

By using our Service, you represent that you are at least 13 years of age.

10. INTERNATIONAL USERS

If you are using our Service from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States and other locations where our service providers operate. By using our Service, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy.

11. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

The right to know what personal information we collect, use, and disclose
The right to request deletion of your personal information
The right to opt out of the sale of personal information (we do not sell personal information)

To exercise these rights, please contact us at nick@cernera.design.

12. CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated Privacy Policy.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: nick@cernera.design

Steps Club Privacy Policy
Service provided by Nicholas Cernera
Last Updated: February 1, 2026

Privacy Policy

CONTACT INFORMATION