Back to Step Tracker
Step Tracker Logo
Official Privacy Policy & Data Disclosure

Privacy Policy

Last Updated: October 23, 2026 · Effective Immediately

Encrypted & Scoped

We only request read access to your daily step counts. We never request heart rate, location, or sensitive medical records.

Never Sold to Advertisers

Your fitness data is never sold, leased, or traded to data brokers, ad networks, or third-party marketing companies.

Instant User Revocation

You maintain total control. Tap "Disconnect" anytime to instantly delete your connection tokens and step history.

1. Overview & Service Scope

The Step Tracking App("we", "our", or "the Service") is a fitness accountability tool designed for communities hosted on the Whop platform. The app allows users to set daily walking goals, track real-time daily step counts, maintain activity streaks, and participate in community fitness challenges.

2. Google API Services User Data Policy Disclosure

Step Tracking App's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Scope Requested: https://www.googleapis.com/auth/fitness.activity.read

• Purpose of Access: We read daily delta step counts recorded in your Google Fit / Android Health Connect profile to display your total steps for the current calendar date inside your community leaderboard.

• No Unrelated Use: We do not use Google user data for advertising, market research, or training artificial intelligence / machine learning models.

• No Human Readability: No human employees or contractors inspect your raw health data unless required for technical debugging with your explicit permission or by legal obligation.

3. Information We Collect

When you use the Step Tracking App, we collect only the minimum data required to deliver core functionality:

  • Whop Identity: Your unique Whop User ID, community username, and membership status to associate step logs with your account.
  • Step Metrics: Your aggregate daily step total, estimated distance, and calories burned for the current day.
  • Timezone: Your device timezone to compute accurate daily boundaries (midnight-to-midnight) so steps don't count toward the wrong calendar day.
  • OAuth Connection Tokens: Encrypted refresh tokens stored securely in Cloudflare D1 to refresh step counts without requiring daily manual sign-in.

4. Data Storage & Security

All data is stored on Cloudflare's enterprise serverless infrastructure using Cloudflare D1 databases. Data in transit is protected using TLS 1.3 encryption. Access tokens and authorization headers are never logged or exposed in plain text.

5. How to Revoke Access & Delete Your Data

You maintain total autonomy over your data at all times:

  1. Inside the app dashboard, tap "Disconnect" under the Phone Health Sync panel. This immediately deletes your connection record and OAuth tokens from our database.
  2. You can also revoke our app's permissions directly from your Google Account at any time by visiting myaccount.google.com/permissions.
  3. To request complete purge of all historical step data, email us at the contact address below.

6. Contact Information & Developer Details

For any questions regarding this Privacy Policy, your health data, or to request data deletion, please contact:

App Developer: Step Tracking App Team

Platform: Hosted on Whop Marketplace (app_gQ5stDZpGGy4at)

Support & Privacy Contact: [email protected]