Health Movement Steps Privacy Policy

Last updated: October 12, 2026

Health Movement Steps (“the app”) is made by Health Movement, LLC (“we”, “us”). This policy explains what the app collects, why, and the choices you have. Questions: support@healthmovement.com.

What we collect

Account details. A display name, your age (used only to confirm you are 13 or older; we keep only an approximate birth year, never a full birthday), and, if you choose, a profile photo and a recovery email. If you sign in with Apple or Google, we receive an identifier for that account and the name and email you allow it to share (Apple may give us a private relay address). Until you sign in, the app uses a guest account that is just a random identifier.
Step counts. With your permission, the app reads your daily step total from Apple Health (iPhone) or Health Connect (Android). We read steps only, we store daily totals only, and we ignore steps that were typed in by hand. Your daily totals are also kept in a private history that only you can see, so your charts reach back up to a year and move with you to a new phone. We never read or store anything else from your health data, such as heart rate, sleep, workouts, or location.
Challenge data. The challenges you create or join, your team, your daily goal, and the daily results worked out from your steps.
Device details. Your time zone (so days start and end at the right time) and, if you turn on notifications, a notification address for your phone.

We do not collect your precise location, your contacts, or anything from your photo library other than a profile photo you choose to upload.

How we use it

Only to run the app: scoring your challenges, showing your name, photo, and step counts to the other people in your challenges, sending the notifications you allow, and letting you get your account back on a new phone.

If you sign in with Google, we use the name and email address Google shares only to set up and secure your account and to show your name to the people in your challenges. We do not use Google user data for advertising, and we do not share it with anyone other than the service providers listed below.

We do not sell your data, we do not use it for advertising, and we do not share your health data with advertisers, data brokers, or insurers.

Who can see it

Other members of a challenge you are in can see your name, photo, team, daily step count, and whether you reached your goal. People outside your challenges cannot.
Service providers that process data for us. Supabase stores our database. Expo delivers push notifications and builds the app. Google Firebase Cloud Messaging carries notifications to Android phones, and Apple’s notification service carries them to iPhones. These providers handle data only to provide their service, under their own privacy terms.
Apple and Google supply your step data (Apple Health, Health Connect) and, if you choose, your sign-in. They handle their part under their own privacy policies.
We may disclose information if the law requires it.

Sprints

Sprints are short step goals with an end time, for example 2,000 steps by 10 PM. They come in three kinds: house Sprints that run at set times each day, Sprints with your friends, and public Sprints anyone can join. This section covers what is different from challenges.

What we record. When you join a Sprint, we record the time you joined and count the steps your phone’s health store recorded from then until the Sprint ends. We keep that count for the Sprint, and one running total of how many Sprints you have finished. This is separate from your daily totals.
Who can see you. Friends can see your name, photo and progress in any Sprint you join. In house and public Sprints, people who are not your friends can also see your display name, photo and progress, so choose a display name you are comfortable sharing. If you are 18 or older you can turn this off in Profile, Show my name in Sprints, and you will show as “Someone” to people who are not your friends. People under 18 are counted in the number of participants but are never listed by name, photo or progress to anyone who is not their friend.
Cheers. You can send and receive cheers, which are a short list of preset phrases. There is no messaging and no free text. You can report or block someone from a Sprint.
Time zones, not locations. Sprints are grouped by your phone’s time zone. We do not collect your location, and the Sprint world view shows only time-zone regions, never maps or places of people.
Your Feed. Finishing a Sprint can appear in your friends’ feed if you share with friends. It is never shown to people who are not your friends.
Not in organization reports. Sprints are separate from workplace and school challenges. Organizations never see them.
How long we keep it. Sprint records are deleted 90 days after the Sprint ends, and cheers after 7 days. We keep only the total number of Sprints you have finished.
Your choices. You can hide your name from people who are not your friends (Profile, Show my name in Sprints) and leave a Sprint at any time.

Where you are from (optional, adults only)

If you are 18 or older, you can choose a country, and a city if you like, to show next to your name in Sprints. It is off until you turn it on, and it is only what you pick and type yourself: the app never reads your phone’s location for this, and we do not check it. When it is on, people who can see you by name in a Sprint can see it, including on cheers you send, and the Sprint world view shows how many people are in a country only when at least 5 people there have chosen to show one. It is stored with your other Sprint settings, never shown for anyone under 18, and never shown if you are listed as “Someone”. You can change it or tap Remove my place at any time in Profile, Where you are from. It is deleted with your account.

Workplace programs

Some challenges are run by an employer, school, or other organization. Joining one is always your choice. Before you join an organization, the app shows you what it can see, and you tap Accept. The organization’s admins can see your name, the email address on your account, and when you joined, so they can manage who takes part. You can leave from Profile at any time. The organization can see combined results such as how many people took part and team totals and averages. It cannot see your individual step counts, your goal, or whether you reached it, and it is not told who chose not to join. Other members of a challenge you join can see your name, photo, team, and daily steps, as described above.

Optional questionnaire. Some public groups, such as a health department or city, may add a short optional questionnaire to a challenge: your age range, gender, ZIP code, and how you heard about it. Every question can be skipped, and so can the whole questionnaire. Nobody under 18 is asked. The organization only ever sees counts for each question on its own (for example, how many people are aged 35 to 44), never your answers, never one question combined with another, and never alongside anyone’s steps. Any answer chosen by fewer people than the organization’s smallest group size is combined with others or left out. If you leave the challenge, your answers are deleted.

We do not give an employer, insurer, or health plan access to your individual health data, and we do not allow employers to use the app’s data for hiring, firing, promotion, or discipline. If you leave a challenge or delete your account, you no longer appear in your organization’s future reports. If we ever offer a way to share your own steps with an organization, for example to earn a reward, it will be off by default and you will choose whether to turn it on.

Organization accounts and notification settings

Organization accounts (the web dashboard). People who set up an account for a company, school or other group give us their name, work email, and the organization’s name and type. Plans are paid through Stripe, which handles card details; we do not see or store card numbers. We keep records of purchases, invoice requests, verification requests (for example a website you give us to confirm a school), and a log of what organization admins do. Email, including sign-in links and replies to your requests, is sent through Postmark. Participants’ step data is never sent to Stripe or Postmark.

Notification settings. If you choose reminder times, days, or quiet hours in the app, we save those choices and your phone’s time zone offset so alerts arrive when you want them. You can change or turn off any of it in Profile, Notifications.

Friends and the feed

You can add friends with a friend code or link. Friends can see your display name, your photo, and the goals and streak milestones you share to the feed (for example “hit their goal with 9,214 steps” or “7-day streak”). They cannot see your day-by-day steps, and anything from a workplace or school challenge is never shared. You can turn sharing off at any time in the Feed tab, remove a friend, block someone, or report someone. We do not read your contacts or match you with strangers, and there is no messaging. Feed items are deleted after 30 days.

Your choices

Delete your account at any time from Profile, Delete account. This permanently removes your profile, photo, and step history. If you organized a challenge, it is handed to another member so it can continue for everyone else; if you were the only person in it, the challenge is deleted too.
Stop sharing steps at any time by turning off access in your phone’s settings (iPhone: Settings, Health, Data Access & Devices; Android: Health Connect settings). The app simply stops receiving new steps.
Turn off notifications in the app’s Profile or in your phone’s settings.
Leave a challenge at any time without deleting your account.
Ask us to see, correct, or delete your information by emailing support@healthmovement.com.

Children

The app is for people 13 and older. It asks for your age and blocks sign-up below 13. We do not knowingly collect information from children under 13. If you believe a child has given us information, email us and we will delete it. Parents and guardians of 13 to 17 year olds: a plain-language summary is at go.healthmovement.com/steps/parents.

How long we keep it

We keep your data while your account exists. Deleting your account removes your profile, photo, and step history right away. We may keep anonymous, combined statistics (for example, how many people played a certain challenge type) that do not identify you.

Security

Our database enforces, at the database level, that you can read only your own account and the challenges you belong to. Data travels over encrypted connections. The app does not use passwords. No system is perfectly secure, but we work to protect your information.

Changes

If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you in the app.

Contact

Health Movement, LLC support@healthmovement.com