Privacy Policy

1. Zero-Knowledge Infrastructure

StepMate operates without a central cloud server. All health metrics are stored exclusively in a local SQLite database, fortified with 256-bit AES encryption. We do not collect or store your identity.

2. Vault Protocol

Our backup system utilizes the Google Drive AppData API—a restricted cloud space invisible to other applications. Developers have no technical means to access your backup data or encryption keys.

3. Hardware Sensors

The application requests Activity Recognition permissions solely to interface with hardware step counters. We strictly do not track GPS location, microphone audio, or contact lists.

4. Health Data Disclosure

StepMate accesses and collects health data on your device to provide step tracking, activity summaries, goals, and optional data synchronization. This includes step counts and the time periods associated with those counts from your device's step sensor.

If you choose to connect Health Connect and grant its permissions, StepMate requests access to steps, distance, and active-calories data. The current version reads and writes step data only (including its associated time periods) to import activity history, synchronize totals, and improve the accuracy of activity shown in the app. It does not currently read, write, or store Health Connect distance or active-calories records. Health Connect access is optional; you can decline or revoke it at any time in Health Connect settings.

We use this health data only to operate these fitness features. It is stored locally on your device and is not sold, used for advertising, or shared with third parties. It is not sent to our servers. If you enable Secure Vault, an encrypted backup of your app data may be stored in your personal Google Drive AppData folder as described below.

5. Data Ethical Standard

We maintain a firm policy against the sale or trade of user information. Our sustainability is driven by optional premium features, not the monetization of user behavior.

6. Google User Data

StepMate uses Google services only when you explicitly enable the optional "Secure Vault" backup feature.

Data Accessed

When Secure Vault is enabled, StepMate accesses:

• Google Drive AppData Storage — A private, application-specific folder in your Google Drive account for storing encrypted backup files containing your step history, achievements, and goals.

No other Google services or user data are accessed by this application.

Data Usage

Google Drive storage is used exclusively for:

• Backup & Restore — Creating encrypted backup copies of your fitness data and restoring them when needed.
• Encrypted Transmission — All data is encrypted on your device before upload using 256-bit AES encryption. We cannot read, decrypt, or access your backup files.
• Direct Storage — Data is stored directly in your personal Google Drive, not on any third-party servers.

Data Storage

Primary storage is local on your device. When Secure Vault is enabled, encrypted backup copies are stored in your Google Drive AppData folder. Backup files remain until you delete them or disable Secure Vault in app settings.

Data Sharing

We do not sell, rent, or share your data with third parties. Google cannot access the content of your encrypted backup files. You retain full control and can delete backups or disable Secure Vault at any time.