Privacy Policy

1. Data controller

Data is processed by Andiamo Software SRL, with its registered office at Str. Principală no. 100, Beldiu village, Teiuș, Alba County, Romania (CUI RO51032570), as controller. You can contact us about anything data-related at contact@stepbattleapp.com.

2. What data we collect

Account data: name, email address, password (stored only as an irreversible hash), profile photo if you choose to add one, preferred language. Activity data: daily and hourly steps, floors climbed, estimated distance. Location data: ONLY if you explicitly enable the location permission (it is optional), we use approximate coordinates for place- and weather-based achievements. Technical data: the installation identifier, the push notification identifier (OneSignal) and, for non-Premium users, the advertising identifier used by AdMob.

3. Where step data comes from

From your phone's step sensor (pedometer) and/or from Health Connect on Android, a secure store on your phone that smartwatches (Garmin, Samsung and others) can also write to. We read from Health Connect only after you explicitly grant the permission in the operating system, and you can revoke it at any time from your phone settings.

4. Why we use it (purposes)

To run the service: leaderboards, duels, competitions, teams, history and statistics. For achievements: some badges use the time of your steps, floors climbed and, if you enabled location, the weather in your area (via the Open-Meteo service) and the type of place, for example beach or park (via OpenStreetMap/Overpass, with coordinates truncated to a precision of hundreds of meters). For notifications: challenges, messages, unlocked achievements, you can turn them off in settings. For security and abuse prevention.

5. Legal bases (GDPR)

Performance of contract (art. 6(1)(b)) for running your account and competitions; consent (point (a)) for health data read from Health Connect, for location and for push notifications, each can be withdrawn at any time; legitimate interest (point (f)) for security and fraud prevention.

6. Who we share data with

We do not sell your data. We do not share health data with third parties for advertising purposes. We use processors strictly to operate the service: OneSignal (push notification delivery), Google AdMob (ads, only for non-Premium users, it receives the advertising identifier, not your steps), Google/Facebook/Apple (only if you choose to sign in with them), Open-Meteo and OpenStreetMap (they receive only approximate coordinates, without your identity). Your in-app friends can see your name, avatar and step counts, that is the point of the competition.

7. How long we keep data

For as long as your account is active. When you delete your account (possible directly in the app: Settings → Delete account), your personal data and activity history are permanently removed from our systems. Backups are overwritten within at most 30 days.

8. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent at any time (without affecting prior processing). You can exercise them directly in the app or by writing to contact@stepbattleapp.com. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro).

9. Age requirement

The Service is intended for people aged 13 or older. Users between 13 and 16 need the consent of a parent or legal guardian. We do not knowingly collect personal data from anyone under this age; if we learn that such data has been collected, we delete it and close the associated account. Any such situation can be reported to the contact address in this document.

10. Changes and contact

We will announce any significant change to this policy in the app before it takes effect. Data questions: contact@stepbattleapp.com.