Privacy Policy

Tyler A. ("we," "us," or "our") operates the Step Wars Challenge mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

Information We Collect

Health Data

With your explicit permission, we access your step count data from Apple Health (HealthKit). This includes:

• Daily step counts
• Historical step data (up to 30 days when you first sign up)
• Step count timestamps and hourly distribution

We only read this data; we never write to or modify your HealthKit data.

Account Information

When you create an account, we collect:

• Email address (if you sign up with email)
• Username (chosen by you or auto-generated)
• Authentication credentials (managed securely by Supabase Auth)

Usage Data

We automatically collect certain information about how you use the App:

• League participation and rankings
• Achievement progress
• Streak data
• Activity tier classification (Casual, Active, Athlete, Elite)

How We Use Your Information

We use the information we collect to:

• Calculate your weekly step totals for league competition
• Match you with other users in appropriate competitive tiers
• Track your progress, streaks, and achievements
• Calibrate your activity tier based on your average daily steps
• Detect and prevent cheating or unfair gameplay
• Improve the App's features and user experience

Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud database provider with enterprise-grade security:

• All data is encrypted in transit using HTTPS/TLS
• Data at rest is encrypted using industry-standard encryption
• Access to your data is controlled by row-level security policies
• We do not sell, rent, or share your personal information with third parties for marketing purposes

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or security purposes.

Your Health Data Rights

You have complete control over your health data:

• You can revoke HealthKit access at any time through your iPhone Settings → Privacy & Security → Health → Step Wars Challenge
• Revoking access will stop new data from being synced, but historical data will remain in your account unless you delete it
• You can request deletion of all your health data by deleting your account or contacting us

Children's Privacy

The App is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication provider (see Supabase Privacy Policy)
• Apple HealthKit: Health data access (governed by Apple's privacy policies and your iOS settings)

We do not use any analytics, advertising, or tracking SDKs.

Data Sharing

Your step count data is visible to other users in your weekly leagues as part of the competitive gameplay. This includes:

• Your username
• Your weekly step total
• Your rank within the league
• Your rank tier badge (Bronze, Silver, Gold, etc.)

Your email address, detailed hourly step distribution, and other personal information are never shared with other users.

International Users

Your data is stored on Supabase servers, which may be located in different countries. By using the App, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App or by email. You are advised to review this Privacy Policy periodically for any changes.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your data
• The right to correct inaccurate data
• The right to delete your data
• The right to restrict or object to data processing
• The right to data portability

To exercise any of these rights, please contact us using the information below.