Privacy Policy

1. Zero-Knowledge Infrastructure

StepMate operates without a central cloud server. All health metrics are stored exclusively in a local SQLite database, fortified with 256-bit AES encryption. We do not collect or store your identity.

2. Vault Protocol

Our backup system utilizes the Google Drive AppData API—a restricted cloud space invisible to other applications. Developers have no technical means to access your backup data or encryption keys.

3. Hardware Sensors

The application requests Activity Recognition permissions solely to interface with hardware step counters. We strictly do not track GPS location, microphone audio, or contact lists.

4. Data Ethical Standard

We maintain a firm policy against the sale or trade of user information. Our sustainability is driven by optional premium features, not the monetization of user behavior.

5. Google User Data

StepMate uses Google services only when you explicitly enable the optional "Secure Vault" backup feature.

Data Accessed

When Secure Vault is enabled, StepMate accesses:

• Google Drive AppData Storage — A private, application-specific folder in your Google Drive account for storing encrypted backup files containing your step history, achievements, and goals.

No other Google services or user data are accessed by this application.

Data Usage

Google Drive storage is used exclusively for:

• Backup & Restore — Creating encrypted backup copies of your fitness data and restoring them when needed.
• Encrypted Transmission — All data is encrypted on your device before upload using 256-bit AES encryption. We cannot read, decrypt, or access your backup files.
• Direct Storage — Data is stored directly in your personal Google Drive, not on any third-party servers.

Data Storage

Primary storage is local on your device. When Secure Vault is enabled, encrypted backup copies are stored in your Google Drive AppData folder. Backup files remain until you delete them or disable Secure Vault in app settings.

Data Sharing

We do not sell, rent, or share your data with third parties. Google cannot access the content of your encrypted backup files. You retain full control and can delete backups or disable Secure Vault at any time.