STEP RACERS
Sign up
Back to Home

Privacy Policy

Effective Date: October 7, 2026

Welcome to Stepracers ("we", "our", or "us"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner.

This Privacy Policy explains how we collect, use, and safeguard your information when you use the Stepracers mobile application and related services (the "App"). It explains the information we process and the choices available to you. Accepting our Terms does not by itself give consent to every use of data.

1. What Data We Collect

When you use Stepracers, we may collect the following information:

  • Email address
  • Username
  • Step count and activity data
  • When you use Workout Mode: precise GPS route coordinates, workout dates and times, duration, distance, pace, estimated calories, and the titles you enter
  • Photos you choose to attach to a workout
  • Race participation and performance data
  • Device information (device type, operating system, unique device identifiers)
  • App usage data and analytics (features used, session duration, app events)

Workout routes and photos can reveal sensitive information, including places you visit or your home address. Workout Mode and photo uploads are optional; you can use step races without recording a GPS route.

Workout Mode: recording and your choices

When you start a workout and grant location permission, we use your location to trace your route. With background location permission, recording can continue while the app is in the background or your screen is locked. Pausing or finishing the workout stops Workout Mode location updates. You can change location permission in your device settings; this may limit recording.

Recording and unsynced workouts are stored on your device so they can be recovered or saved later. When you save a workout, its route and statistics are uploaded to your account when a connection is available. Photos you select are uploaded separately. Revoking location permission does not delete previously saved workouts or photos.

2. How We Use Your Data

We use your information for the following purposes:

  • To enable core gameplay features (e.g. step tracking, race participation)
  • To record and save workouts you request, display their maps and photos, calculate statistics, provide flyover replay, and prepare images you choose to share
  • To maintain your account and personalize your experience
  • To send important service-related updates (e.g. race results, performance summaries)
  • To communicate with you about new features, game updates, and relevant marketing materials

You can opt out of marketing emails at any time by clicking the unsubscribe link in the email or contacting us directly.

Legal basis for Workout Mode

For users in the EEA, we process the workout information needed to provide recording, saved history, maps, photos and replay at your request to perform our contract with you (Article 6(1)(b) GDPR). Device permissions control access to location and selected photos; they are separate from the legal basis for processing. Where separate consent is required by law, it must be obtained before that processing. Contact us using the details below to ask about the basis for a particular use of your data.

3. Data Sharing and Selling

We do not sell, rent, or trade your personal data to third parties.

We use service providers to operate the app. Their roles and the information involved depend on the feature you use. Our third-party service providers include:

  • Cloudflare R2 - Stores uploaded workout photos and generated route images on our behalf. Photo access in the app uses temporary signed links; anyone you give a working link to may be able to open it until it expires. See Cloudflare's Privacy Policy.
  • Mapbox - Provides maps and route images. When a route poster is generated, we send route geometry to Mapbox to draw it. Its mobile map SDK may also collect device, usage and de-identified location information through telemetry. Mapbox provides a telemetry choice through the map information control. See Mapbox's Privacy Policy.
  • Amplitude - Analytics platform that helps us understand how users interact with our app, which features are most used, and how we can improve the user experience. Amplitude may collect device information, app usage patterns, and session data. For more information, see Amplitude's Privacy Policy.
  • Sentry - Error tracking service that helps us identify and fix bugs and crashes in the app. For more information, see Sentry's Privacy Policy.
  • Expo - Mobile app development and push notification platform. For more information, see Expo's Privacy Policy.
  • Stream - Real-time chat infrastructure for race chat features. For more information, see Stream's Privacy Policy.

Workout visibility and sharing

Saved workouts and attached photos are accessible through your account; they are not automatically posted to races or company leaderboards. We and our service providers process them to operate the features described here. If you choose to share an image through another app, the recipient and that service can keep or redistribute it under their own terms.

Route images can show the full route, including its start and finish. Automatic start/end hiding is currently unavailable. Check the image before sharing it. Deleting a workout in Stepracers does not remove copies you have already shared elsewhere.

Company challenges: what your employer can and cannot see

If you join a race or challenge organized by your employer (or any other organizer), the organizer can see your display name, your step counts for that challenge, and your race standings. That is all.

  • We do not provide your Workout Mode GPS routes, location history, workout details or photos to the organizer through company challenge features.
  • Company challenge reporting does not include heart rate, weight or sleep data.
  • No visibility into your activity outside the challenge — your personal races, streaks, and app usage are invisible to the organizer.

Organizers never receive your email address or account credentials from us unless you provided them to the organizer yourself (for example, on a roster the organizer uploaded to invite you).

4. Data Storage and Security

Your data is securely stored using industry-standard security protocols. We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

Workout retention and deletion

Saved workouts and photos remain associated with your account to provide your workout history until you remove them or request erasure. You can delete an individual workout or an attached photo in the app. Deleting a workout removes it from your history and initiates removal of its attached photos and generated route image from storage. Storage removal is not always immediate and can require follow-up if a provider request fails.

The current account-deletion flow deactivates your account but does not automatically erase saved workouts and photos. To request erasure of these records or report a deletion problem, contact wecare@stepracers.com. We assess erasure requests under applicable law, including any lawful requirement to retain specific records. Copies already shared outside Stepracers are controlled by their recipients.

5. Analytics and Tracking

We use analytics tools to help us understand how our app is used and to improve our services. Specifically, we use Amplitude to collect information about:

  • Which features you use and how often
  • App performance and crash data
  • Session duration and frequency
  • Device type and operating system version
  • General usage patterns and user flows

This data is collected in an aggregated or pseudonymized form and is used solely to improve the app experience. We do not use this data to personally identify you or to track you across other apps or websites.

Your Choices: You may be able to limit analytics data collection through your device settings. On iOS, you can enable "Limit Ad Tracking" in your privacy settings. On Android, you can opt out of personalized ads in your Google settings. Please note that opting out may not completely prevent analytics collection but will limit the data associated with your device.

6. Screen Time & App Blocking (Step Lock)

Stepracers Pro includes Step Lock, a feature that uses Apple's Screen Time API (Family Controls, Managed Settings, and Device Activity frameworks) to temporarily block selected apps on your device until you reach your daily step goal.

  • All Screen Time data, including your app selections and blocking schedules, is stored locally on your device and is never transmitted to our servers or any third party.
  • Step Lock uses App Groups (a secure on-device data sharing mechanism) to coordinate between the main app and its helper extensions. This data never leaves your device.
  • We do not collect, access, or store information about which apps you choose to block.
  • Step Lock requires your explicit authorization via Apple's Family Controls permission prompt and can be disabled at any time from within the app.
  • Step Lock is available on iOS 16 and later only.

7. International Users

Our services are available globally. Your data may be transferred and stored outside your country of residence, including countries that may not have the same level of data protection laws as in the EU. In such cases, we ensure appropriate safeguards are in place in accordance with applicable laws (e.g., Standard Contractual Clauses under GDPR).

8. Your Rights

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • The right to access the personal data we hold about you
  • The right to correct inaccuracies in your data
  • The right to delete your data
  • The right to object to or restrict processing
  • The right to data portability
  • The right to withdraw consent where processing is based on consent, without affecting earlier lawful processing
  • The right to complain to your local data protection authority, including Portugal's CNPD

To exercise your rights or delete your account, please contact us at wecare@stepracers.com.

9. Children's Privacy

Stepracers is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from children.

10. Changes to This Privacy Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or via email and explain relevant changes before new processing takes effect. A policy update does not replace consent where consent is required.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:

Email: wecare@stepracers.com
App Name: Stepracers
Data controller: PASSADAS ALEATÓRIAS UNIPESSOAL LDA
Location: Portugal