StepsPal Privacy Policy
StepsPal asks for access to unusually sensitive things — your health data, your location, your calendar and your reminders. This page says exactly what happens to each one. Where something stays on your device, we say so, and that is a description of how the app is built rather than a promise about how we behave.
The short version
Your calendar event titles and reminder text never leave your phone. Your location never reaches our servers. Your step counts are shared only after you add a friend, and only as a daily total. There is no advertising, no tracking, and no analytics SDK in the app.
What stays on your device
Calendar
StepsPal reads your events to find the gaps between them. It uses only the start and end times. Event titles, locations, notes and attendees are read on the device and are never transmitted, stored by us, or shown in a notification.
Reminders
StepsPal reads your incomplete reminders and sorts them into categories — pharmacy, groceries, café, bank, post office, library, park — so an errand can become a walk. Only the category, the due window and an opaque identifier are ever sent off the device. The text you wrote is not.
Location
Used to find walkable places near you, to estimate how many steps a trip will take, and to draw your route while you are recording. It is processed on your device and is not sent to our servers. Photographs you collect are stamped with where you took them; that stays on your phone.
While a walk is recording, location updates continue with the screen locked. iOS shows its own indicator throughout. Recording stops when you end the walk.
Motion and step counts
Daily step totals are read from Apple Health. During a recording, your phone's motion coprocessor counts steps directly. Both are read only — StepsPal does not write to Apple Health unless you switch that on in workout settings, and it never reads any other health category.
Photographs
Photographs you take in the app are stored on your device. The only thing that leaves is described below.
What is sent to our servers
Account
Sign in with Apple, Google, or an email address and password. If you use Apple's Hide My Email, we only ever see the relay address. We store an account identifier and a session token.
Planning
To order your walks we send your step goal, steps so far, walking pace, the start and end times of your free windows, and errand categories. No titles, no names, no coordinates.
Identifying a photograph
When you collect an object, your device cuts the subject out of the photograph and sends only that cut-out to our server, which passes it to a vision model to be named. The background is removed before it leaves. No location and no image metadata are attached. The image is used to answer that one request and is not used to train anything.
Identification is often wrong. It is a game, not a reference work.
Friends and groups
Until you add a friend, no step data leaves your device at all. Once you do, StepsPal shares your daily step total, your goal and your display name with the people you have connected with. Nothing else — not your route, not your photographs, not your errands.
Third parties
- Apple. Weather forecasts come from Apple WeatherKit, which receives an approximate location. Apple's privacy terms apply.
- OpenAI. Cut-out subject images are passed to OpenAI's vision API to be named, under their API terms, which exclude API data from training by default.
- Apple App Store. Subscriptions are processed by Apple. We never see your payment details.
There are no advertising networks, no data brokers, and no analytics SDK in StepsPal.
Keeping and deleting
Your data stays until you delete it. Settings → Start over erases your goal, preferences, step history, recorded walks and collected photographs from the phone and from our servers, and cannot be undone. You can also revoke calendar, reminders, location, motion or health access at any time in iOS Settings; StepsPal keeps working with less to go on.
Children
StepsPal is not directed at children under 13, and we do not knowingly collect their data.
Your rights
Depending on where you live you may have the right to access, correct, export or erase your data, and to object to processing. Write to support@humuli.com and we will act within 30 days.
Changes
If this policy changes materially we will update the date above and say so in the app before the change takes effect.
Contact
Humuli — support@humuli.com