StepUp is GDPR and CCPA compliant and follows industry-standard security and privacy practices to help keep your data safe and handled responsibly.
We do not sell your personal data or step activity data. We also do not share your personal step activity outside StepUp, except as needed to provide and improve the app, comply with law, or use service providers described in this policy.
StepUp uses Google AdMob and advertising partners, including Liftoff Monetize (Vungle) and Meta Audience Network, to display ads. Personalized ads are shown with your consent, which is optional. You can delete your account and data immediately from StepUp app > Settings > Help & feedback > Delete account.
StepUp is used at work (Amazon, BMW, Google, Meta), schools (Yale, Stanford, Rossall), governments (US, UK, NZ, UAE), gyms, hospitals, conferences and communities around the world.
StepUp's goal is to help users live more active and healthier lives. To provide the app, our services collect, store and analyze activity-related data on your mobile device and through cloud-based services.
When you use StepUp, we may receive information such as your device type, IP address, app version, account information and activity data. You can choose to share additional information, such as profile details, wearable data, or push notification permissions. This statement explains in plain language what data we collect and how it is used. If you have questions, contact us at team@thestepupapp.com.
Information collected
Depending on which features and permissions you use, StepUp may collect the following information to provide the service:
- Activity data: daily step goal, steps taken, distance travelled, calories burned and floors climbed where available.
- Optional calorie profile: age, gender, height and weight, used to calculate calories burned.
- Account and sign-in data: name, email address, profile photo and sign-in provider token from Apple, Google, Facebook or Email.
- Social data inside StepUp: friends, groups, group membership, group chat messages, direct messages, chat photos, thumbnails, basic photo file information, GIF links, taunts, cheers, nudges and leaderboard activity.
- Device and app data: device type, operating system, app version, IP address, notification settings, diagnostics and app usage events.
- Wearable sync data: step counts and associated dates from Google Health API for Fitbit, Samsung Health and Garmin Connect when you choose to connect them, and step and activity data from Apple Health, Android Health Connect or other supported sources you authorize.
None of this data is posted publicly outside StepUp by us.
Limited Use Policy
StepUp's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
StepUp complies with the Google Health API Developer and User Data Policy, including its Limited Use requirements, when handling information obtained through that API or its Developer Tools.
Login credentials
When creating a StepUp account, you can sign in with Apple, Google, Facebook or Email. StepUp does not receive your username or password from those providers. We receive a token that lets the provider identify your account to StepUp.
Who can see your steps
By default, no one other than you can see your steps in StepUp. We never post your steps anywhere.
If you add friends, only those friends can see your profile name, photo and step activity. If you join a group, other people in that group can see your profile name, photo and relevant step activity on group leaderboards. You can hide or block friends, leave groups, or delete your account and data at any time.
Access to device health services and wearables
To track steps, StepUp uses health and activity services provided by your phone and connected wearable sources that you authorize.
On iOS, you may be asked for permission to access motion data and/or Apple Health. On Android, you may be asked for permission to access Android Health Connect. StepUp also supports wearables that sync step data to Apple Health or Health Connect.
These sources may provide steps, distance travelled, floors climbed and related activity data where available. StepUp does not use GPS location to count your daily steps.
Connected step-tracking services
With your permission, StepUp imports your step counts and associated dates from supported services, including Google Health API for Fitbit, Samsung Health and Garmin Connect. Connecting these services is optional.
We associate imported steps with your StepUp account and use them to display your activity history, track progress toward your goals, and power leaderboards and other step-based features. Imported steps follow the same sharing settings as other steps in StepUp: friends you add and members of groups you join can see relevant step activity.
These integrations import steps into StepUp; they do not write StepUp activity data back to the connected services.
We do not sell imported health data, use it for advertising, or share it with advertising platforms.
You can stop future syncing by revoking StepUp's access through the relevant service's account or app permissions. Previously imported steps remain in StepUp until deleted under our data retention policy. You can delete your StepUp account and its associated step data from StepUp app > Settings > Help & feedback > Delete account.
Analytics information
We use Google Analytics for Firebase and similar tools to understand app usage and improve StepUp. A list of data captured by default by Google Analytics for Firebase can be found here.
We may also capture app usage events such as install, sign-up, set daily goal, invite friend, cheer, taunt, nudge, add friend, hide friend, view friend details, view history, view alerts and enable notifications.
Use of your data
Providing the app
We use your data to operate StepUp features such as step tracking, leaderboards, friend connections, groups, group chat, direct messaging, chat safety checks, wearable sync, reports, notifications, account support and troubleshooting.
App improvement and aggregated information
We use analytics and aggregated, de-identified information to understand app performance, improve product quality and make StepUp more useful. Aggregated information does not identify you personally. Our use of imported health data is limited to providing or improving the health and fitness features described in this policy, subject to the applicable provider requirements. Google Health API Limited Use restrictions also apply to aggregated, anonymized, de-identified and derived data.
Data security
We use reasonable protections appropriate to the sensitivity of the information we process. StepUp services use industry-standard SSL technology to help encrypt personal information in transit. No method of storage or transmission can be guaranteed to be completely secure.
Data retention
We keep account information, such as your name and email address, while your account exists because we need it to operate your account. We keep activity data, including steps imported from connected services, until you delete the data or your account, subject to legitimate business, legal and safety needs. Disconnecting a service stops future syncing but does not automatically delete previously imported steps. Chat photos and safety review copies follow the retention periods described under Photos and GIFs in chats.
Deleting your data
You can delete your account and data from StepUp app > Settings > Help & feedback > Delete account. All account and steps data will be permanently deleted immediately and cannot be recovered. Account deletion also deletes your chat photos and any retained safety review copies, as described below. Deletion from StepUp does not delete the original data held by your connected health services.
Photos and GIFs in chats
What we collect
When you send a photo in chat, we store the photo, a thumbnail, and basic file information. We associate this information with the message containing the photo.
We store chat photos on our servers in Microsoft Azure. Within StepUp, photos are shown only to members of the conversation, subject to the safety checks and authorized staff review described below.
How long we keep photos
Except for copies retained for safety review as described below:
- We delete a photo when you delete the message containing it, when a group administrator deletes that message, or when you delete your account.
- We automatically delete photos two years after they are sent.
- We delete photos that are uploaded but never sent within two days.
Automated safety checks
To help keep chats safe, we automatically check every photo sent in a chat for sexual content, violence and self-harm. OpenAI performs these checks as our service provider.
- We provide OpenAI with access to the photo through a link that expires after 10 minutes. We do not include your name, account details, message text or information about other conversation members with the request. The photo itself may contain personal information.
- OpenAI does not use API data to train its models by default. Its processing and retention of images are governed by the applicable API terms and data controls.
- If the automated check identifies a photo as violating our community guidelines, we replace it with a “Photo removed” notice.
- If you believe a photo was removed by mistake, contact us at team@thestepupapp.com and we will review it.
- When an automated check removes a photo, we retain a private copy for review by authorized staff. This helps us correct mistakes, address misuse and improve our safety settings.
- We automatically delete the review copy after 30 days, or earlier if you delete your account. Deleting the message does not delete the review copy before that period ends.
GIFs
GIFs available through our GIF search feature are provided by KLIPY. We do not upload or store these GIF files on our servers. Instead, the chat message contains a link to the GIF hosted by KLIPY.
- When you view a GIF, your device connects directly to KLIPY, which receives technical information such as your IP address and device type.
- When you search for GIFs, your search terms and an anonymous identifier are shared with KLIPY.
- KLIPY may collect search and viewing history and other usage information. Its handling of this information is described in KLIPY’s privacy policy.
Ads
StepUp displays ads through Google AdMob and advertising partners, including Liftoff Monetize (Vungle) and Meta Audience Network. These providers may collect device and advertising identifiers, IP addresses, device information, and information about ads viewed or clicked to deliver ads, measure performance and prevent fraud. Collection and use depend on your consent choices, device settings and the provider's practices.
Learn more in the Google Privacy Policy, Liftoff Privacy Policy and Meta Privacy Policy.
Your consent for personalized ads is requested before personalized ads are shown, and that consent is optional. You may also opt out of personalized advertising through your mobile device operating system settings.
Imported health data is not used to select or personalize ads and is not shared with AdMob or other advertising platforms. Your consent to personalized ads does not change this restriction.
If you make an in-app purchase to go ad-free, ads are no longer shown in StepUp.
Social sharing
If you use StepUp social features, your step activity may be visible to friends you add and to members of groups you join. You can stop sharing with a friend by hiding or blocking them. You can stop sharing in a group by leaving that group. You can delete your account and data from the app at any time.
Communication
If you share contact information with us, such as an email address, we may use it to send service updates, respond to support requests, or send occasional product messages. If a message is promotional, we will provide an opt-out option.
Policy for children
StepUp's services are not directed at persons under the age of 13. We do not knowingly collect personal data from children under 13. If you are under 13, please do not submit personal data through StepUp. If you believe a child under 13 has submitted personal information to StepUp, contact us so we can delete it.
Changes to this policy
We may update this Privacy Policy as StepUp changes. Any changes will be posted on this page.
More information
Contact us at team@thestepupapp.com if you have questions or concerns about your data.
Last updated: October 1, 2026