Privacy Policy

This Privacy Policy explains how ScrollStep ("ScrollStep", "we", "us" or "our") collects, uses and shares information when you use the ScrollStep app for iPhone (the "App") and the website scrollstep.com (together, the "Services"). By using the Services, you agree to the practices described here. If you don't agree, please don't use the Services.

---

Summary

• Your Screen Time data never leaves your iPhone. We can't see it, and nor can anyone else.
• You can use ScrollStep without an account. Signing in is optional.
• We don't sell your personal information, show ads, or share your data for advertising.
• You can export or delete your data at any time from Settings → Account.

---

1. Information we collect

Information that stays on your device

• Screen Time data. ScrollStep uses Apple's Screen Time framework (Family Controls, Device Activity and Managed Settings) to measure how long you use the apps you choose and to pause them. Apple gives ScrollStep anonymous tokens for those apps, not their names or contents. Usage numbers are shown inside a view that Apple keeps separate from the App. This data is never sent to us or stored on our servers.
• Motion and fitness data. The App reads your step count from your iPhone's motion sensor to tell whether you're moving and to reopen paused apps.
• Apple Health data (optional). If you connect Apple Health, the App reads steps (including Apple Watch steps) and active energy. The App only reads Health data. It never writes to Health.
• Settings and history. Your step goal, steps to get back in, picked apps (as Apple tokens), units, and, if you choose, height and weight. Daily summaries of steps, distance, estimated calories, pauses and emergency minutes used.
• Activity log. A short technical log that helps with troubleshooting. It stays on your device unless you choose to send it to us (Settings → Support → Send activity log).

Information you give us

If you sign in with Apple or Google, which is optional, we collect:

Information collected automatically

• Usage information. Events such as which setup screen you reached or whether a feature was used, together with an anonymous ID (or your account ID if you're signed in), device model, iOS version, language and country.
• Purchase information. Product, price, trial status, and renewal and expiry dates for subscriptions.

We never collect your payment card details. Apple processes all payments.

2. How we use information

We use information to:

• provide the Services, including pausing apps, counting steps, and reopening apps when you walk
• create and maintain your account, back up your progress and run invites
• manage subscriptions, free trials and invite rewards
• understand how the App is used so we can fix problems and improve it
• respond to your messages and provide support
• keep the Services secure and prevent fraud or abuse
• comply with legal obligations

Health and motion data is used only to provide the App's features. It is never used for advertising or marketing, never sold, and never shared with data brokers, in line with Apple's HealthKit rules.

3. How we share information

We don't sell your personal information, and we don't share it for targeted advertising. We share information only with service providers that help us run the Services, under contracts that limit their use of it to providing those services to us:

• Apple: payments, Sign in with Apple and notifications
• Google: Sign in with Google, if you choose it
• Supabase: account database and backups (servers in the United States)
• Superwall: subscription purchases and status
• PostHog: usage analytics
• Cloudflare: website hosting and email

We may also disclose information if the law requires it, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

4. Your choices

• Account: you can use ScrollStep without signing in, and sign out at any time.
• Analytics: in the UK, EU and EEA, analytics is off unless you turn it on (Settings → Account). Elsewhere, you can turn it off there at any time.
• Permissions: you can turn off Screen Time, Motion & Fitness, Health or notifications at any time in iOS Settings. Some features won't work without them.
• Export: Settings → Account → Export my data gives you a copy of the data we hold about you.
• Delete: Settings → Account → Delete account permanently deletes your account and server data, and revokes Sign in with Apple. See Delete your account.

5. Data retention

We keep account data for as long as your account exists. When you delete your account, we remove your data from our live systems within 30 days and from backups within 90 days, unless the law requires us to keep it longer. Data on your device is kept until you delete the App.

6. Security

We use encryption in transit (TLS) and at rest, and access controls so that only your account can read your data. No method of transmission or storage is completely secure, so we can't guarantee absolute security, but we limit what we collect so there's less at risk.

7. Children

The Services aren't directed to children under 13, or under 16 in the UK, EU and EEA, and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it.

8. International transfers

We and our service providers may process information in countries other than the one where you live, including India and the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. You can exercise most of these rights in the App. For anything else, email [email protected]. We'll respond within the time the law requires, and we won't discriminate against you for exercising your rights.

UK, EU and EEA. We process personal information to provide the Services you ask for (contract), with your consent (Health data and analytics), and for our legitimate interests in keeping the Services secure and working. You can also complain to your local data protection authority.

California and other US states. We don't sell or share personal information as those terms are defined under the CCPA/CPRA and similar state laws, and we don't use sensitive personal information to infer characteristics about you.

India. You have the rights given by the Digital Personal Data Protection Act, 2023, including the right to nominate someone to exercise your rights. Questions and complaints can be sent to our Grievance Officer at [email protected]. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

10. Changes to this policy

We may update this policy from time to time. We'll post the new version here and change the date at the top. If we make significant changes, we'll also let you know in the App.

11. Contact us

If you have questions about this policy or your information, contact us at [email protected].