<p>StepMates ("we", "our", or "us") is a private step tracking app. This policy explains how we handle your data.</p>
<h2>Data We Collect</h2>
<p>We collect the following information when you use StepMates:</p>
<p><strong>Account information:</strong> Your email address and display name, provided via Google Sign-In.</p>
<p><strong>Step data:</strong> Daily step counts read from Google Health Connect (Android) or Apple Health via Health Auto Export (iPhone). We only read step count data — we do not access any other health information.</p>
<p><strong>Friend data:</strong> Display names and step counts of friends you choose to connect with inside the app.</p>
<h2>How We Use Your Data</h2>
<p>Your step data is stored in Firebase Firestore and used solely to display your personal step history and to show your ranking on the leaderboard shared with your approved friends.</p>
<p>We do not sell, share, or use your data for advertising or any purpose other than operating the StepMates app.</p>
<h2>Health Connect Data</h2>
<p>On Android, StepMates uses Google Health Connect to read your step count. We only request read access to Steps. We do not write any data to Health Connect. Step data is synced to our secure Firebase database and displayed only to you and your approved friends.</p>
<h2>Data Sharing</h2>
<p>Your step data is visible only to friends you have mutually approved within the app. No data is shared with third parties.</p>
<h2>Data Storage</h2>
<p>Your data is stored securely using Google Firebase, hosted in the United States. You can request deletion of your account and all associated data by contacting us.</p>
<h2>Account Access</h2>
<p>StepMates is a private app — new accounts require admin approval. Access can be revoked at any time.</p>
<p>You may request complete deletion of your account and all associated data (including step history, profile, and friend connections) by emailing <ahref="mailto:justin@slothware.net">justin@slothware.net</a> with the subject line "Data Deletion Request". We will process your request within 30 days.</p>
