STEPOFF
Privacy Policy
The fine print · last updated July 13, 2026
STEPOFF is a step-competition game. Your steps are a score, and this policy covers everything the app touches: what it reads, what it stores, and what leaves your device.
What STEPOFF reads
With your explicit permission, STEPOFF reads your step count from Health Connect on your device. Nothing else: no heart rate, no location, no sleep, no workouts, no other health data.
If you grant background access, STEPOFF reads your step count periodically while a fight is live so results settle on time and lead-change notifications work. If no fight is live, there is nothing to check.
Without Health Connect permission the scoreboard shows zero, and no fight can be booked or settled. The app never invents a step count.
What STEPOFF stores on your device
Fight bookings, results, and your win/loss record are stored locally in the app's private storage. Fight history is excluded from Android cloud backup and device-to-device transfer.
What STEPOFF transmits
- Competition data. Competing with real people requires a connection. When online features are active, the app sends your daily step totals, fight bookings, reports, and results, and a display name you choose to STEPOFF's servers (hosted on Supabase), tied to your account identifier. This is the minimum needed for two phones to run and settle one fight honestly. Friends you add can see the step counts you put on the table; nobody else can.
- Profile photo (optional). If you add a profile photo, the image is uploaded to STEPOFF's servers and shown as your avatar to the people you compete with. It is optional — there is no photo unless you add one — and removing it from your profile deletes it from the server.
- Notifications. So you're told when you're called out or a fight settles, a push notification token for your device is stored on STEPOFF's servers and used only to send you those notifications.
- Your Google account (optional). You can play STEPOFF as a guest without signing in. If you choose to sign in with Google, your account is identified by an anonymous identifier and your Google email address and Google account identifier are linked to it. This is how your record and friends follow you if you switch phones, and how STEPOFF keeps ranked results honest: permanent wins and losses only count between signed-in players, which is what stops fake accounts from farming easy wins.
- Crash and usage diagnostics. The app uses Google Firebase Crashlytics and Analytics to report crashes and basic usage (device model, OS version, app version, coarse usage events) so bugs get found and fixed. Diagnostics never include your step history.
- Transport security. All transmission is over encrypted connections (TLS). The app's network configuration refuses plaintext connections entirely.
- Share sheet. Text or images you explicitly choose to share go through the Android share sheet and are sent by the apps you pick.
What STEPOFF does not do
- No advertising SDKs, no ad identifiers used for ads, no data brokers.
- Your data is never sold and never used for advertising.
- No location, no contacts, no microphone, no camera.
Who you're actually fighting
Every opponent in a ranked stepoff is a real person with a real step count. Wins and losses that go on your permanent record only happen between two real, signed-in people.
Two modes are clearly labeled and never presented as another person, and neither ever touches your permanent win/loss record:
- The Evil You is a solo mode. Your "opponent" is a step target you set for yourself, which the app paces evenly across the window so you can race yourself. It settles to a separate solo tally and never touches your real record.
- The House is the one-time onboarding tutorial fight, a scripted practice opponent used only to teach the game. It is labeled as a tutorial and never counts.
Your controls
- Revoke step access at any time in Health Connect settings: the scoreboard shows zero until you reconnect.
- Turn off notifications at any time in system settings.
- Uninstalling the app deletes all locally stored data.
- Delete your account and all server-side data at any time from Settings → Delete account ("Tear up the file"): it erases immediately and cascades everything tied to your account. You can also contact the address below.
Children
STEPOFF is not directed at children under 13.
Changes
When STEPOFF's online features change what is collected or transmitted, this policy is updated before those features ship, and the app makes the change obvious.