PureSteps
EN NL

Legal

Privacy Policy

Effective

In short

  • PureSteps has no ads and no tracking, and it works without an account. Only the optional Friends feature uses one.
  • Your health data is read from Apple Health on your device. It is not sent to the developer unless you join Friends.
  • Goals, streak freezes and earned badges sync through your own private iCloud. The developer cannot access them.
  • Walks are saved in Apple Health and on your device. PureSteps stores no health data in iCloud outside Apple Health.
  • PureSteps sends no analytics or usage data to the developer.
  • Friends is optional. If you join, with your explicit consent, your display name, emoji and daily step and distance totals are stored in the EU. Only the friends you add, and the people in challenges you join, see your name, emoji and step totals. You can delete it all in the app.
On this page
  1. Who is responsible
  2. Apple Health
  3. On your device and in iCloud
  4. Friends and leaderboards
  5. Location and motion
  6. Notifications
  7. Analytics, diagnostics and third parties
  8. Purchases
  9. Children
  10. Your rights and deleting your data
  11. Changes to this policy
  12. Contact

Who is responsible

PureSteps is made by AMIT Solutions, a sole proprietorship of Abdifatah Mohamud, Distlerstraat 3, 5011 EW Tilburg, the Netherlands, Dutch Chamber of Commerce (KvK) number 90986652, VAT number NL004857373B64. AMIT Solutions is the controller for the processing described in this policy. Contact: support@puresteps.app.

In this policy, “the developer” means AMIT Solutions.

Apple Health

Apple Health is the single source of truth for everything PureSteps shows. PureSteps reads your steps, distance, floors, active energy, pushes and walks from Apple Health. This happens on your device, and this data is not sent to the developer. The only exception is Friends: if you join, your daily totals are shared as described in Friends and leaderboards.

PureSteps writes to Apple Health in two cases: steps you add manually, and GPS walks you record. Each walk is saved as a walking workout with its route.

You decide what PureSteps can access. You can review or change this at any time in Settings Health Data Access & Devices PureSteps.

On your device and in iCloud

PureSteps stores your goals, streak freezes, earned badges and walks on your device.

Your goals, streak freezes and earned badges also sync through your own private iCloud (CloudKit), so they stay up to date across your devices. The developer cannot access this data.

Walks are not synced through iCloud. They are saved as a walking workout with route in Apple Health and in a local-only store on your device. As a result, PureSteps stores no health data in iCloud outside Apple Health.

Friends and leaderboards

Friends is optional. It lets you compete with people you know on a weekly leaderboard, from Monday to Sunday, with a podium for the top three. If you don’t join, none of the data in this section is collected.

  • Joining. You join from a card on the Today screen. You sign in with Apple, the only way to sign in, and give your explicit consent. Then you choose a display name of 2 to 24 characters and an emoji or a coloured initial. There are no profile photos. If Apple shares your first name, PureSteps only uses it on your device to suggest a display name.
  • What your friends see. The friends you add, and the people in challenges you join, see your display name, your emoji or colour and your step totals. Your friends see your steps for the current week. Steps entered by hand, in any app, don’t count. You add friends with a code of 8 characters that is valid for 7 days, or with a link (https://puresteps.app/invite/…). Friendship is mutual. People who are not your friends, and not in a challenge with you, see nothing.
  • Challenges. In a challenge, the other participants see your display name, your emoji or colour and your totals over the challenge's days (steps, distance or days at the goal). Anyone with the challenge code can join until it ends. People you blocked, or who blocked you, don't see each other in a challenge either.
  • Remove, block and report. You can remove a friend at any time. If you block someone, you no longer see each other and your codes no longer work between you. You can report a person or a challenge, for example for an offensive name or cheating. The developer reviews reports, normally within two working days, and can remove accounts that break the rules.

What is stored, and for how long:

  • Your Apple user ID from Sign in with Apple, and the account ID linked to it. If Apple passes on an email address (normally a private relay address), the sign-in service may store it. Kept until you delete your account; if you sign in but never finish joining, deleted after 7 days.
  • Your profile: display name, emoji or colour, and when you gave your consent. Kept until you delete your account.
  • Your friends. Kept until you remove or block the friend, or one of you deletes their account.
  • The people you blocked. Kept until one of you deletes their account.
  • Your invite codes. Valid for 7 days, then deleted.
  • Your challenges: name, kind, dates, goal and code, and who takes part. Deleted 31 days after the challenge ends, or when the last participant leaves. If the person who made it deletes their account, the challenge stays for the others, no longer linked to them.
  • Your daily totals of steps (pushes in wheelchair mode) and distance, without steps entered by hand. Deleted after 60 days.
  • Reports: who reported whom (for a challenge: its maker), the display name or challenge title at the time, and the reason. Deleted after 180 days.
  • When you entered a friend’s code, to limit guessing. Deleted after 1 day.

On your device, PureSteps keeps a copy of this week’s leaderboard, so it shows without a connection. It is removed when you delete your account.

Why, and on what legal basis. PureSteps uses this data only to run Friends: to connect you with the friends you add, to show the leaderboard and to keep it fair and safe. Step totals are health data, so PureSteps processes this data only with your explicit consent (Article 6(1)(a) and Article 9(2)(a) GDPR). You give it in the app before you join. Without your consent, nothing is uploaded.

Reports, blocks and the limit on code attempts are processed on the basis of the developer’s legitimate interest in keeping Friends safe and preventing abuse (Article 6(1)(f) GDPR); you can object at support@puresteps.app. Signing in and keeping your account are necessary to provide Friends to you (Article 6(1)(b)).

Where it is stored. Supabase stores this data on the developer’s behalf, as a processor, in a data centre in the EU (Frankfurt, Germany). The database only lets you read your own data and the leaderboard with your friends. If Supabase or its subprocessors access the data from outside the EU, for example for support, the European Commission’s standard contractual clauses apply.

Deleting your account and withdrawing consent. In the app, go to Settings tab Friends Stop and delete account and confirm with Sign in with Apple. PureSteps then deletes your profile, friends, codes, daily totals and blocks from the server, and revokes the Sign in with Apple link between your Apple Account and PureSteps. Reports about you are deleted too; a report you made is kept until it expires, without any link to you. Your data in Apple Health is not affected. This is also how you withdraw your consent: deleting your account withdraws it and stops all sharing. Withdrawing consent does not affect the processing that took place before. Deleting the app alone does not delete your Friends account.

Friends data is never used for advertising or tracking, and it is never sold.

Location and motion

PureSteps uses your location only during a walk that you start yourself, to draw the route. It does not use your location at any other time. The route is stored in Apple Health and locally on your device only.

Motion data is used only for live step counting during a walk.

Notifications

Reminders are local notifications. They are scheduled on your device.

Analytics, diagnostics and third parties

PureSteps does not send analytics or usage data to the developer. It contains no advertising and no tracking. The only third-party SDK is Supabase’s client library (with its open-source dependencies), which PureSteps uses only for Friends.

Crash diagnostics are collected with Apple’s MetricKit. They stay on your device unless you choose to export them.

If you have turned on “Share with App Developers” in iOS, Apple may share crash reports with the developer. That is controlled by your iOS setting, not by PureSteps.

This website. puresteps.app is hosted by Netlify, Inc. (United States, under the EU-US Data Privacy Framework and standard contractual clauses). Netlify keeps ordinary server logs (IP address, time and page requested) for a short period for security and operations. The site sets no cookies and runs no analytics. One exception: the hosting provider adds a small script of its own, loaded from its own domain. We have no control over it, it sets no cookie and it does not measure your behaviour, but it is a request to a party other than us; we hide the badge it draws.

Purchases

Purchases and subscriptions are processed by Apple. The developer receives only anonymized sales reports from Apple.

Children

PureSteps is not directed at children. Friends, the only part where the developer processes personal data, is for people aged 16 or over: under Dutch law (UAVG article 5) younger users may only give this consent with permission from a parent or guardian, which PureSteps cannot verify. If you are under 16, do not join Friends. If we learn that someone under 16 has joined, we delete the account and its data.

Your rights and deleting your data

Under the GDPR (in Dutch: AVG) you have the right to access, rectify and erase your personal data, to restrict or object to processing, and to receive your Friends data in a portable format. Providing this data is voluntary: without it you cannot use Friends; the rest of PureSteps works without it. PureSteps takes no automated decisions about you with legal or similarly significant effects; the leaderboard is a plain sum of your step totals. Unless you joined Friends, the developer holds no personal data about you, so there is usually nothing to look up or delete on the developer’s side. You can send any request to support@puresteps.app.

You can delete your data yourself:

  1. If you joined Friends, first delete your Friends account in the app: Settings tab Friends Stop and delete account. Deleting the app alone is not enough.
  2. Delete the PureSteps app from your device.
  3. Remove PureSteps’s data in the Health app.
  4. Delete the iCloud data for PureSteps in your iCloud settings.

You also have the right to lodge a complaint with your national data protection authority. In the Netherlands, that is the Autoriteit Persoonsgegevens.

Changes to this policy

If this policy changes, the new version will be published on this page with a new effective date.

Contact

Questions about this policy? Email support@puresteps.app.