StepMate
StepMate
Your absolute digital right to privacy.
On Android, StepMate stores step history in a local SQLite database protected with 256-bit AES encryption. The iOS app uses Apple Health and local app preferences as described in section 7.
On Android, Secure Vault can upload backup files to the app-specific Google Drive AppData folder after you connect Google Drive. The backup is a JSON file and StepMate does not encrypt it before upload. Google Drive’s storage and privacy practices apply to that file.
The application requests Activity Recognition permissions solely to interface with hardware step counters. We strictly do not track GPS location, microphone audio, or contact lists.
StepMate accesses and collects health data on your device to provide step tracking, activity summaries, goals, and optional data synchronization. This includes step counts and the time periods associated with those counts from your device's step sensor.
If you choose to connect Health Connect and grant its permissions, StepMate requests access to steps, distance, and active-calories data. The current version reads and writes step data only (including its associated time periods) to import activity history, synchronize totals, and improve the accuracy of activity shown in the app. It does not currently read, write, or store Health Connect distance or active-calories records. Health Connect access is optional; you can decline or revoke it at any time in Health Connect settings.
We use health data only to operate these features. StepMate does not send HealthKit or Health Connect records to StepMate servers or use them for advertising. If Android Secure Vault backup runs, the backup file can include step history and related app data and is uploaded directly to your connected Google Drive AppData folder. StepMate does not encrypt that backup file before upload.
We maintain a firm policy against the sale or trade of user information. Our sustainability is driven by optional premium features, not the monetization of user behavior.
Android Secure Vault uses Google Drive only after you connect a Google account and use its backup features. StepMate requests access to its application-specific AppData folder, not your general Drive files.
When you connect Drive, StepMate receives the selected Google account email for sign-in and stores it in the app to identify the connected account. StepMate can create, read, and delete its backup files in the hidden AppData folder; it does not request access to your general Drive files or send that email to StepMate servers. Google describes AppData as app-specific and inaccessible to other apps; it is hidden from the normal Drive file list.
Backups support restoring step history and related data such as activity logs, achievements, interval sessions, and settings. The backup is JSON and is not encrypted by StepMate before upload. It is sent from your Android device to Google Drive; StepMate does not receive a copy on its servers.
Your primary app data remains on your device. When a backup runs, its JSON file is stored in your Google Drive AppData folder. StepMate keeps up to five backup files and removes older ones during cleanup. Disconnecting Drive stops future backups but does not delete files already stored there.
StepMate does not sell your data or store Drive backup files on StepMate servers. Google provides the cloud storage and processes the files under Google’s terms and privacy practices. You can disconnect Drive in StepMate; existing backups remain in the Google account until removed using Google’s account controls.
On iOS, StepMate reads step-count data in Apple Health for progress, history, analytics, and achievements. If you choose manual step entry or import a StepMate backup, StepMate can write those user-entered step samples to Apple Health after you grant write permission. StepMate does not upload HealthKit data to StepMate servers or use it for advertising. If you enable Health in iCloud settings, Apple may sync Health records through iCloud; Apple manages that separately from StepMate. You can manage access in Apple Health or iOS Settings.
Your goal, reminder preferences, article read state, and interval-session preferences are stored in the iOS app on your device. StepMate does not upload this data to Google Drive or directly sync it through iCloud or a StepMate cloud service. If you enable iCloud Backup for your device, Apple may include compatible app data in the device backup; Apple manages that backup under your iCloud settings and Apple’s privacy practices.
If you choose to export a CSV, share content, open a web link, or send a support email, the system presents the destination you choose. A bug-report email is prefilled with the app version, iOS version, and device model; it is sent only if you send it from your email app. Apple processes App Store purchases; StepMate does not receive your payment-card details.
Deleting the app removes its local app data. Existing iCloud device backups are managed separately in your Apple account, and step records remain in Apple Health unless you remove them there. Files or messages you export or share are subject to the destination you select.
The Android app uses Firebase Analytics for app events, screen and feature interactions, and metrics that can include step counts, goals, and subscription activity. Firebase may process app/device identifiers and technical information with these events. Firebase Crashlytics receives crash reports, stack traces, and related technical context. Google processes this information under its Firebase terms and privacy practices. StepMate does not use these SDKs for advertising. The iOS app does not include Firebase Analytics or Crashlytics, but it uses Firebase Firestore to retrieve active health articles. Google may process technical connection information needed to provide this service. StepMate does not send your HealthKit records, step history, or account data to Firestore.