Privacy Policy

1. Summary

• StepLock reads health data (step count and walking speed) to check whether you have reached your daily step goal and to unlock the apps you chose to block.
• Health data is processed and stored only on your device. It is never transmitted to our servers, never sold, never shared with third parties and never used for advertising.
• We do not ask for your name, email address or any account. The app shows no ads.
• On Android, anonymous usage statistics are collected via Google Firebase Analytics (see section 4). These never contain health data.

2. Health Data

Which data we access

• Android – Health Connect: read access to Steps and Speed records, and permission to read this data in the background.
• iOS – Apple Health (HealthKit): read access to your step count.

StepLock only reads health data. It never writes, modifies or deletes data in Health Connect or Apple Health.

How we use it

• Step count is used to show your progress, to decide whether your daily step goal is reached and blocked apps can be unlocked, to show your step history and statistics, and to calculate extra steps that are saved to your in-app "step bank".
• Walking speed (average over the last 7 days) is used only to estimate how long it will take you to walk the remaining steps to your goal.
• Background access (Android) is used so that blocked apps can be unlocked as soon as you reach your goal, even while StepLock is not open.

Storage, sharing and retention

Health data is processed on your device. Derived values (daily step totals, your step goal and step bank entries) are stored in a local database inside the app. This data is not uploaded to us or to any third party. It is deleted when you uninstall the app or clear the app's data.

Revoking access

You can revoke access at any time: on Android in the Health Connect app (or Settings → Security & privacy → Privacy → Health Connect → App permissions → StepLock), on iOS in Settings → Privacy & Security → Health → StepLock. Without this access the step goal feature cannot work.

Limited use

The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Data received from Apple HealthKit is used in accordance with Apple's HealthKit guidelines. Health data is not used for advertising, marketing, profiling or credit purposes, is not sold, and is not transferred to any third party.

3. App Blocking Permissions

• Android – Usage access (PACKAGE_USAGE_STATS): used only to detect which app is currently in the foreground, so that a blocked app can be covered. Display over other apps is used to show the block screen. A foreground service keeps blocking active, and the app restarts it after a device reboot.
• iOS – Screen Time / Family Controls: used to apply the app restrictions you configure.

The list of apps you chose to block and any app usage information are processed only on your device and are never transmitted to us or third parties.

4. Usage Statistics (Android only)

The Android app uses Google Firebase Analytics, provided by Google Ireland Limited, to understand how the app is used and to improve it. Firebase collects pseudonymous data such as an app instance ID, device model, operating system version, app version, approximate country and in-app events (for example: which onboarding screens were viewed, whether a permission was granted, the step goal you selected, and whether the paywall was shown). No health data (step counts or walking speed) is sent to Firebase. Legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). Data may be processed by Google in the USA. See the Google Privacy Policy and Firebase Privacy information.

5. In-App Purchases

StepLock offers in-app purchases and subscriptions for a premium version. Payments are processed by Google Play or the Apple App Store; we have no access to your payment information. To manage subscriptions we use RevenueCat (RevenueCat, Inc.), which receives an anonymous app user ID, purchase and subscription status, and basic device information. See the RevenueCat Privacy Policy.

6. Advertising

StepLock does not display ads and does not use advertising IDs.

7. Your Rights

Under the GDPR you have the right to access, correct, delete and restrict processing of your data, to data portability, and to object to processing. You also have the right to lodge a complaint with a data protection supervisory authority. Data stored locally on your device can be deleted at any time by uninstalling the app. For any other request, contact us using the address below.

8. Children

StepLock is not directed at children under 13, and we do not knowingly collect personal data from children.

9. Changes

We may update this privacy policy when the app changes. The current version is always available on this page.

10. Contact