This policy explains what Step Off collects, why, who it is shared with, and how to delete it. Step Off is an iOS app made by Lots of Bees Inc., a company based in Canada ("we", "us"). It lets you track your steps and compete with friends in private step challenges called step-offs.
This policy covers the Step Off app only. Our other apps have their own policies.
We collect only what Step Off needs to count your steps, run leaderboards and step-offs, and measure our ads.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Email address, password (stored hashed), the sign-in method you used | You, or Apple or Google if you sign in with them |
| Profile | Display name, daily step goal, distance goal, units (km or miles), city, neighbourhood and country | You, in the Account screen. If you sign in with Apple, the name Apple shares the first time |
| Activity data | Daily step count and walking and running distance, per day | Apple Health, with your permission |
| Step-off activity | Step-offs you create or join, their dates and members, and whether you hid one | You, in the app |
| Device and advertising data | Advertising identifier (IDFA) if you allow tracking, the app's vendor identifier (IDFV), device model, iOS version, IP address, app opens | Your device, through the Tenjin SDK |
We do not use your device's location. City and country are only what you type in.
Step Off reads two things from Apple Health, only with your permission: your daily step count and your walking and running distance. It does not write anything to Apple Health.
Granting Step Off access in the Health permission screen is your explicit consent for us to process this data as described here. You can withdraw it at any time in Settings, as described below.
We do not sell personal information. We do not send marketing emails.
Where laws such as the EU or UK GDPR apply, we rely on these legal bases:
| Use | Legal basis |
|---|---|
| Running your account, leaderboards and step-offs | Performing our contract with you (providing the app you signed up for) |
| Reading and storing your Health data | Your explicit consent, given in the iOS Health permission screen |
| Advertising measurement with your IDFA | Your consent, given in the iOS tracking prompt |
| Advertising measurement without your IDFA (IDFV, device data) | Our legitimate interest in knowing which ads work, balanced against your rights |
| Security, fixing bugs, and nightly backups | Our legitimate interest in keeping Step Off working and safe |
| Responding to legal requests | Complying with legal obligations |
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Step Off is social, so some of your information is visible to other people signed in to Step Off.
Use a display name you're comfortable sharing, and leave city and neighbourhood blank if you'd rather not show them.
We advertise Step Off and use Tenjin to measure which ads lead to installs. Step Off itself shows no ads.
Tenjin handles this data under its own privacy policy.
We share information only with the companies that run parts of Step Off for us, and only what each one needs.
| Provider | What it does for Step Off | What it receives |
|---|---|---|
| Supabase | Hosts our database and handles sign-in | Account details, profile, daily step and distance totals, step-offs, and the IP address you sign in from |
| GitHub | Stores our private nightly database backups | A copy of the database above, kept 30 days |
| Resend | Sends sign-up confirmation and password-reset emails | Your email address |
| Tenjin | Measures our ad campaigns | Device and advertising data (see above) |
| Apple | Sign in with Apple, Apple Health on your device | What you choose to share with Sign in with Apple |
| Sign in with Google | What you choose to share with Google sign-in |
We may also disclose information if the law requires it, or to a buyer if Lots of Bees Inc. is sold or merged. We'd tell you before your information became subject to a different policy.
We keep your information while your account exists. You can delete your account at any time in Account → Delete Account.
Deleting your account immediately and permanently removes:
Copies stay in our nightly database backups for up to 30 days, then are deleted. Device and advertising data held by Tenjin is kept under Tenjin's own policy, because Tenjin cannot link it to your Step Off account. Uninstalling the app does not delete your account.
Depending on where you live (for example Canada, the EU or UK), you have the right to:
To use any of these rights, email us from the address on your account. We answer within 30 days.
Step Off is not meant for children under 13, or under 16 in the EU and UK, and we don't knowingly collect their information. If you believe a child under that age has an account, email us and we'll delete it.
We are based in Canada. Our database is hosted by Supabase in the United States (AWS us-west-2, Oregon). Our other providers may also process data in the United States or elsewhere. When your information is transferred outside Canada, the EU or the UK, our providers protect it with safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, and with their own security measures.
Data travels over encrypted connections, and our database only lets each signed-in user change their own data. No system is perfectly secure, so we can't guarantee absolute security.
We'll post any changes on this page and update the date at the top. For significant changes, we'll also tell you by email or in the app.
Lots of Bees Inc. is responsible for your personal information in Step Off.
Our Privacy Officer is Jaspreet Bassan, Founder. Contact: info@lotsofbees.com