Privacy Policy

1. Introduction

StepSaga ("we", "our", or "us") is operated by Joakim Johansson as a solo developer. This Privacy Policy explains how we collect, use, and protect your information when you use the StepSaga mobile application ("the App").

2. Information We Collect

Account Information

When you create an account, we collect your email address and display name. Authentication is handled through Supabase.

Health & Fitness Data

With your permission, the App accesses step count and other health data from Apple Health (iOS) or Health Center (Android). This data is used solely to track your progress in adventures within the App.

Subscription & Purchase Data

If you buy a StepSaga subscription, the payment itself is processed by Apple (App Store) or Google (Google Play). We never receive or store your payment card details. We use RevenueCat to manage subscriptions and verify purchases, and we receive purchase events such as the product purchased, transaction identifier, and subscription status so we can unlock paid features on your account.

Crash & Error Reports

When the App crashes or runs into an error, it sends an error report to Sentry so we can find and fix the problem. A report contains the error and where in the code it happened, your device model and operating system version, the App version, the buttons you tapped just before the error, and your account's user ID. It never contains your health or step data or your email address. Reports are stored in the EU and deleted automatically after at most 90 days.

3. How We Use Your Information

We use your information to:

• Provide and maintain the App
• Track your adventure progress using health data
• Enable collaborative features (e.g., group adventures with friends)
• Send important service-related notifications
• Improve the App based on usage patterns

4. Data Sharing

We do not sell your personal data. Your health and fitness data is never shared with third parties for advertising purposes. We may share limited data with:

• Other users: Your display name and adventure progress are visible to other members of your adventure groups.
• Service providers: We use Supabase for authentication and data storage, RevenueCat to manage subscriptions and verify purchases, and Sentry to receive error reports from the App and our servers.
• Payment processors: Subscription payments are handled by Apple (App Store) or Google (Google Play) under their own privacy policies.

5. Data Storage & Security

Your data is stored securely using Supabase infrastructure. We implement reasonable security measures to protect your information, but no method of electronic storage is 100% secure.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Revoke health data permissions at any time through your device settings

7. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: johansson.joakim+stepsaga@gmail.com