StepInside
TREN
Get the app

Legal

Privacy Policy

Last updated:

This Privacy Policy describes how StepInside (“we”, “us”, “our”, or the “App”) collects, uses, and shares information when you use our mobile application. By using StepInside, you agree to the terms of this Privacy Policy.

App Name: StepInside Developer Contact: mrkutapp@gmail.com

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you sign in with Google (optional), we receive your Google account email address, display name, profile photo URL, and Google user ID to link your anonymous account to a permanent identity.
  • Profile Data: Display name, country, gender, age range, fitness goals, height/weight (if you choose to enter them), and onboarding preferences.
  • Workout Data: Exercise sessions, completed workouts, durations, planned exercises, streaks, active minutes, and tap interactions used for scoring.
  • Nutrition Data: Meal photos, manual meal entries, macro/calorie estimates, and nutrition goals.
  • Voice Input: Audio captured by your device microphone when you use the in-app AI Coach voice feature is processed on-device through your browser/system Speech Recognition. Transcribed text is sent to our backend.
  • Chat Messages: Text messages you send to the AI Coach.

1.2 Information Collected Automatically

  • Device & Technical Data: Device model, OS version, language, time zone, app version, install ID, network state, crash logs, ANR reports, performance traces, and unique app instance identifiers.
  • Usage Data: Screens viewed, feature interactions, session length, button taps, ad impressions, purchase events, and aggregated leaderboard contributions.
  • Push Notification Token: Firebase Cloud Messaging (FCM) token used to deliver streak reminders, leaderboard updates, and re-engagement notifications.
  • Advertising Identifiers: Google Advertising ID (GAID) and similar identifiers, used by mediated ad networks (see Section 4).

1.3 Camera & Microphone

  • Camera: Used only when you actively capture or upload a meal photo. Photos are sent to our backend for AI nutrition analysis and stored in your account.
  • Microphone: Used only when you activate the AI Coach voice feature. Audio is not stored; only the transcribed text reaches our servers.

2. How We Use Your Information

We use collected information to:

  • Provide core app features (workouts, nutrition tracking, AI Coach, leaderboards, streaks).
  • Authenticate your account via Firebase Authentication.
  • Compute global, country, and rival leaderboards on our servers.
  • Send push notifications (streak reminders, leaderboard events, lifecycle re-engagement). You can disable these in your device settings.
  • Validate and manage subscriptions via RevenueCat and Google Play Billing.
  • Detect abuse, modified APKs, and bot traffic via Firebase App Check (Play Integrity).
  • Monitor crashes (Firebase Crashlytics) and performance (Firebase Performance).
  • Measure aggregate usage and feature adoption (Firebase Analytics).
  • Deliver and measure advertising via Appodeal mediation (free users only).
  • Generate AI-powered coaching replies and nutrition analyses (Anthropic Claude API).

3. Legal Bases (GDPR / UK GDPR)

Where applicable, we process data under the following legal bases:

  • Contract: to deliver the App features you request.
  • Legitimate Interests: security, fraud prevention, analytics, product improvement.
  • Consent: advertising personalization (collected via Google UMP consent form in EEA/UK), push notifications, microphone, and camera.
  • Legal Obligation: to comply with applicable laws.

4. Third-Party Services & Data Sharing

We share data with the following service providers strictly to operate the App:

  • Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, Performance, App Check). Backend, auth, analytics, crash reporting, push, abuse prevention. Shares: Account ID, profile, workout/nutrition data, device info, crash logs, FCM token.
  • Google Sign-In. Optional permanent account linking. Shares: Google email, name, profile photo, Google user ID.
  • Google Play Billing. Subscription payments. Shares: Purchase tokens, product IDs.
  • RevenueCat. Subscription state management. Shares: App User ID, purchase events, entitlement state.
  • Anthropic (Claude API). AI Coach chat replies, meal-photo nutrition analysis. Shares: Chat text, meal images, contextual workout/nutrition summary.
  • Google ML Kit (on-device). Object detection in meal photos (e.g., fork, plate). Image processed locally on device; no upload.
  • Appodeal SDK + mediated ad networks. Show ads to non-subscribers. Shares: Advertising ID, IP address, device info, ad interaction data.
  • Google User Messaging Platform (UMP). EEA/UK consent collection. Shares: Consent choices.

4.1 Advertising Partners (Appodeal Mediation)

StepInside uses Appodeal to mediate advertising across the following networks, each of which may collect advertising identifiers and device data as independent controllers:

Google AdMob, AppLovin, Meta Audience Network, Unity Ads, Vungle (Liftoff Monetize), IronSource, Mintegral, InMobi, Chartboost, BidMachine, BigoAds, DT Exchange, MobileFuse, Moloco, Start.io, TaurusX, Amazon Publisher Services, Yandex Ads, VK Ads (myTarget), Ogury, PubMatic, Smaato, Verve, zMaticoo, Bidon.

Full details of each network’s data practices are available at:

You can opt out of personalized ads via your device’s Ad Settings or the in-app consent form (EEA/UK users).

4.2 We Do Not Sell Your Personal Data

We do not sell personal information for monetary value. Sharing with ad mediation partners for behavioral advertising may be considered “sharing” under the CCPA/CPRA; you may opt out via the in-app consent controls.

5. Data Retention

  • Account & workout data: retained while your account is active.
  • Crash & analytics data: retained per Firebase defaults (up to 14 months).
  • Meal photos & AI chat history: retained until you delete them or your account.
  • Backend logs: retained up to 90 days for security and debugging.

You may request deletion of your account and associated data by emailing mrkutapp@gmail.com. We will fulfill verified requests within 30 days, subject to legal retention obligations.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data.
  • Object to or restrict processing.
  • Withdraw consent.
  • Data portability.
  • Lodge a complaint with a supervisory authority (EEA/UK: your local DPA).
  • Opt out of the sale or sharing of personal information (CCPA/CPRA).

To exercise any right, email mrkutapp@gmail.com.

7. Children’s Privacy

StepInside is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

8. Data Security

We use industry-standard safeguards including TLS/HTTPS transport encryption, Firebase Authentication, Firebase App Check (Play Integrity), Firestore security rules, and least-privilege backend access. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate (including Google, Anthropic, RevenueCat, and Appodeal partners). Where required, transfers rely on Standard Contractual Clauses or other lawful mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or via the Google Play listing. The “Last Updated” date reflects the most recent revision.

11. Contact

For any questions, requests, or complaints regarding this Privacy Policy:

Email: mrkutapp@gmail.com App: StepInside

Back to home