Privacy Policy for StepScroll

Effective date: 2026-09-29 Last updated: 2026-09-29

StepScroll ("we", "us") operates the StepScroll mobile application and https://stepscroll-site.vercel.app (together, the "Service"). This policy explains what we collect, why, and what you can do about it.

1. Information we collect

You give us:

Account information — nothing that works as an account. StepScroll has no accounts and no sign-in, so there is no email address, password, phone number or social identifier for us to receive. Your subscription is tied to your Apple ID by Apple and to a random app user id by RevenueCat.
Content you create in the app — the first name you type during onboarding, your onboarding answers (what matters most to you, your age and your daily screen-time estimate), your step, difficulty and rate settings, and the ledger of minutes you have earned and spent, all stored on your device. Each of those answers is sent to RevenueCat and to our analytics as you give it, not only if you go on to subscribe — your first name, your answers and whether you used an invite code, with the plan added once you choose one (see the table below). We keep the answers of people who leave during setup for the same reason we keep those of people who stay: to see which question lost them.
Support correspondence — anything you send us.

Collected automatically:

Device and usage data — device model, OS version, app version, language, crash reports, and in-app events (screens viewed, features used). Used to fix crashes and understand which features matter.
A pseudonymous identifier for analytics. It is not your name, and it is reset when you delete the app.
Your IP address — every app and website you connect to receives one. PostHog works out an approximate country, region and city from it so we can see where StepScroll is used and spot abuse; Singular uses it for ad measurement; our invite-code service keeps only a one-way hash of it, to limit repeated guesses. It is never turned into GPS coordinates or a street address, and we never look up who holds it.
A replay of what you did inside StepScroll — the screens you saw and what you tapped, kept as a series of screenshots so we can see where the app confuses people or gets in their way. The camera viewfinder and your Screen Time are blanked out of every frame, and anything you type is masked. It records nothing outside StepScroll: leave the app and it stops.
Where your limbs were during camera workouts, as dots (you can turn this off) — while the camera counts a workout, StepScroll works out where your shoulders, elbows, wrists, hands, hips, knees, ankles and feet are, about 15 times a second, as points on a grid. If you told the app you are 18 or older, it sends those points from your workouts to our own server so we can test and improve how reps are counted. It never sends video or photos, never the points for your face, and never anything that links the points to you: no name, no analytics id, no device identifier, no purchase record. Each workout gets a new random label, and all that is kept with it is the date, the exercise, the count the app made, the count you typed if you tapped Didn't count right?, your phone model and the app version. Our server does not keep your IP address. Nothing is ever sent for anyone who told the app they are under 18. An install set up before 29 September 2026, when this started, or one that never asked your age, sends nothing unless you turn it on yourself in Settings and confirm you are 18 or older. Your two answers (18 or older, and on or off) are also kept in this phone's secure storage, so deleting and reinstalling StepScroll does not switch it back on or off; they never leave the phone, and Erase my data forgets them. Turn it off at any time in Settings → Help improve counting. Uploads are deleted after 12 months; the few we keep as permanent tests of the counter cannot be traced to anyone.

We do not collect: your Screen Time data, the list of apps you choose to lock (Apple gives us only opaque tokens that stay on your device), camera frames, video or photos (they are analysed on your device for the pose and discarded, never recorded or uploaded; only the anonymous limb points above can leave the phone, and never your face), your Apple Health data (StepScroll reads your step count on this phone to work out what you have earned, writes nothing back, and never uploads it), precise location (no GPS and no coordinates — only the approximate area worked out from your IP address, above), contacts, health records, or your photo library (for example: precise location, contacts, health data, or your photo library, unless a feature you start explicitly asks).

2. Why we use it

Purpose	Legal basis (GDPR)
Provide the features you asked for	Performance of a contract
Keep the Service secure and prevent abuse	Legitimate interests
Fix crashes and improve the product	Legitimate interests
Process payments and subscriptions	Performance of a contract
Send you notifications you enabled	Consent
Comply with legal obligations	Legal obligation
Measure which ads led people to install and subscribe	Consent, through your tracking choice, for the advertising identifier; legitimate interests for the rest
Test and improve how accurately reps are counted, from anonymous limb points	Legitimate interests; the points identify no one, and you can turn it off in Settings

We do not sell your personal information for money. If you allow tracking, we share your device's advertising identifier and install and subscription events with Singular, Meta and TikTok to measure which ads led people to StepScroll (see Tracking and ad measurement below). Some US state laws treat that as sharing for advertising. To stop it, choose Ask App Not to Track, or turn tracking off in iPhone Settings.

We share only what each provider needs to do its job:

Provider	Purpose	What they receive
Apple	Payments, subscriptions, Screen Time (Family Controls), Apple Health	Their own privacy policies apply; Screen Time and Health data never leave your device
RevenueCat	Subscription status and free trials	Purchase events, a pseudonymous app user id, and — as you answer them during setup, whether or not you ever subscribe — your first name, your onboarding answers, whether you used an invite code, and your plan once you choose one. For ad measurement, your device's identifier for vendors, your IP address and, only if you allow tracking, your advertising identifier
PostHog	Product analytics	Pseudonymous events about the app's own actions (reps counted, minutes earned, apps unlocked) and your setup answers as you give them — your first name, your age, your daily screen-time estimate, what matters most to you, and which question you stopped at if you leave. An invite code is recorded only as used or not, never the code itself. Also the masked session replay described above, your IP address and the approximate country, region and city worked out from it — used to see where StepScroll is being used and to spot abuse, never GPS and never coordinates. Never which apps you lock, never Screen Time totals, never your step counts or anything else from Apple Health
Amazon Web Services	Our invite-code service, and storage for the anonymous limb points	Your invite code, your pseudonymous RevenueCat app user id, the code you typed if a friend invited you, whether your invited friends started a free trial, and a one-way hash of your IP address used only to limit repeated guesses and deleted automatically within about two days. Separately, if you are 18 or older and have not turned it off, the anonymous limb points from your camera workouts described above, stored with no identifier of any kind and deleted after 12 months
Sentry	Crash reporting	Crash traces, device metadata
Singular (Singular Labs, Inc.)	Measuring which ads led to installs and subscriptions	Your device's identifier for vendors (IDFV), your advertising identifier (IDFA) only if you allow tracking, device model, iOS and app version, IP address and an approximate location (country or region) worked out from it, install and session events, and the subscription events RevenueCat forwards
Meta and TikTok	Advertising measurement	From Singular: install and subscription events (such as a trial starting or a purchase) with the campaign result, the device information needed to match them, and your advertising identifier only if you allow tracking
Meta (sent by us directly)	Ad measurement	That a trial or subscription happened, the product and the amount, and the app version and device model. Your advertising identifier only if you allow tracking — without it the event carries nothing that identifies your device

Tracking and ad measurement

The first time you open StepScroll, iOS asks whether it may track your activity across other companies' apps and websites.

If you choose Allow, Singular and RevenueCat can read your device's advertising identifier (IDFA). We send that identifier to Meta along with the fact that you started a trial or subscribed, so Meta can tell whether one of its ads led you here, and Singular does the same for Meta and TikTok.
If you choose Ask App Not to Track, the advertising identifier is never read, and nothing that identifies your device is sent to an ad network. We still tell Meta that a trial or a subscription happened, with no identifier of any kind attached, so it is a count and nothing that can be traced back to you.

Either way, Apple's own SKAdNetwork reports ad results to ad networks without identifying you. We set the one number Apple allows in that report, and all it says is whether you started a trial or subscribed. It never carries your step count, your minutes, what you paid, or anything else.

You can change your answer at any time in iPhone Settings → Privacy & Security → Tracking. StepScroll shows no ads.

We may also disclose information if legally required, or to protect the rights and safety of our users.

4. AI features

StepScroll does not send anything you do to an AI service. The pose detection that counts your reps runs entirely on your device using an on-device model; camera frames are analysed in memory and discarded, and no frame, photo or video is ever stored, recorded or transmitted. What can leave the phone is described under Where your limbs were during camera workouts: anonymous points for your limbs, never your face, which we use to test and improve the counter ourselves.

5. How long we keep it

We keep account data for as long as your account exists. Analytics and crash data are retained for 12 months (default: 12 months). When you delete your account we delete or irreversibly anonymise your personal data within 30 days, except where we must keep records to meet a legal obligation (for example, transaction records for tax purposes).

6. Deleting your account and your data

You can delete your account and all associated data:

In the app — Settings → Erase my data (for example: Settings → Account → Delete Account), or
On the web — https://stepscroll-site.vercel.app/delete-account, or
by emailing weallquitapps@gmail.com.

Deletion is permanent and takes effect within 30 days.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to processing, and to withdraw consent. California residents additionally have the rights described in the CCPA/CPRA, including the right not to be discriminated against for exercising them. EEA/UK residents may lodge a complaint with their local supervisory authority.

Exercise any of these by emailing weallquitapps@gmail.com. We respond within 30 days and never charge for it.

8. Children

The Service is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, email weallquitapps@gmail.com and we will delete it.

StepScroll is for people 13 and older. It asks your age when you set it up, and if the age you enter is under 13, setup stops there: that answer is not saved, you cannot continue, and nothing from setup is sent to us or to any provider listed in this policy. Nothing from the camera is ever sent for anyone who told the app they are under 18.

9. Security

We use encryption in transit (TLS), encryption at rest, access controls, and the principle of least privilege. No system is perfectly secure; we will notify you and the relevant authorities of a breach affecting your data as required by law.

10. International transfers

We are based in the State of Tennessee, USA and our providers may process data in other countries. Where data leaves the EEA/UK we rely on Standard Contractual Clauses or an adequacy decision.

11. Changes

We will update this page and change the "Last updated" date. Material changes get in-app or email notice before they take effect.

12. Contact

StepScroll

weallquitapps@gmail.com