Privacy Policy

1. Introduction

StepRank ("we," "our," or "us"), a product of Riso Development, operates the StepRank mobile application and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and company affiliation when you create an account.
• Health & Activity Data: Step counts and related activity data synced from Apple Health (iOS), Health Connect (Android), or Fitbit with your explicit permission. See section 2a for exactly what we read from Health Connect.
• Usage Data: How you interact with the app, including features used, challenge participation, and leaderboard activity.
• Device Information: Device type, operating system, and app version for troubleshooting and optimization.

2a. Health Connect and Apple Health

On Android, StepRank reads from Health Connect. On iOS, it reads from Apple Health (HealthKit). In both cases:

• What we read: Daily step counts. On iOS we may also read walking distance, flights climbed, active energy, and exercise minutes to power your Weekly Recap. On Android we read only steps, plus the "read in background" permission so your steps can sync while the app is closed.
• Why: To show your own activity, to rank you on the leaderboards and challenges you choose to join, and to calculate streaks and badges. This is the core function of the app.
• Where it goes: Your daily step totals are stored on our servers (Supabase) so they can appear on leaderboards. Other members of a group you join can see your daily and weekly step totals. We do not send health data to advertising networks, data brokers, or analytics providers, we do not use it for advertising, and we never sell it.
• Control: You can revoke access at any time in Health Connect (Android) or Settings → Health (iOS). Revoking stops new syncing immediately. Deleting your account deletes all stored step data (see section 6).

3. How We Use Your Information

• To provide and maintain the StepRank service, including step tracking, challenges, and leaderboards.
• To display your activity within your company's wellness program (visible to other participants in your organization).
• To calculate scores, rankings, badges, and other gamification features.
• To send notifications about challenges and achievements.
• To send you our weekly wellness newsletter and periodic giveaway reminders by email (see section 3a).
• To improve and optimize the app experience.
• To provide customer support.

3a. Email Communications

We use the email address on your account to send StepRank Weekly, a wellness newsletter (about once a week), and giveaway reminders (about every two weeks). These emails may include your own recent activity from the app — for example your step total for the last seven days or your entries in the current giveaway — and, if you joined through an employer plan, the name of that employer. They never include another person's data.

• Opting out: every such email has an unsubscribe link that works in one click without signing in, and you can change the same settings in the app under Profile → Settings → Email. Opt-outs take effect immediately.
• Delivery: these emails are sent through Resend, our email delivery provider, which processes your email address and delivery events (delivered, bounced, complained) on our behalf.
• Bounces and complaints: if an email to your address bounces permanently or is reported as spam, we stop sending to that address and keep it on a suppression list so we do not email it again, even if a new account is created with it.
• Engagement: we do not track whether you open these emails or which links you click.
• Transactional email — a password reset you request, or notice that you have won a giveaway — is separate from the above and is not affected by opting out.

4. Data Sharing

We do not sell your personal data. We may share information with:

• Your Employer: Aggregated, anonymized wellness program statistics. Individual step data is visible to other participants in your company through leaderboards and challenges.
• Service Providers: Third-party services that help us operate the app (e.g., hosting on Supabase, email delivery through Resend, analytics), bound by confidentiality agreements and permitted to use your data only to provide those services to us.
• Legal Requirements: When required by law, regulation, or legal process.

5. Data Storage & Security

Your data is stored securely using industry-standard encryption and hosted on Supabase infrastructure. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can delete your account and all associated data at any time from Profile → Settings → Delete Account inside the app, or by following the steps at steprankapp.com/delete-account. Deletion removes your profile, step history, group memberships, and push tokens from our systems.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data and account.
• Withdraw consent for health data syncing at any time through your device settings.
• Opt out of the newsletter and giveaway reminder emails at any time (section 3a).
• Export your data in a portable format.

8. Children's Privacy

StepRank is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the app and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: privacy@steprank.app