Privacy Policy
What StepFlow does with your data.
Short version: your walks stay on your watch. There is no account to create, nothing is uploaded to us, and none of it is sold or shared with advertisers or data brokers. The rest of this page is the specifics, because a policy that only says "we respect your privacy" is not worth reading.
On your watch
What the app stores, and keeps there
These never leave the device unless you send them somewhere yourself using one of the options in the next section.
- Your sessions
- Start time, block timings, how far you walked, and the heart-rate samples recorded during the session. Stored on the watch.
- Your profile
- Resting and maximum heart rate, and the protocol settings you pick. Used to compute your zones. Stored on the watch.
- Your route
- If you grant location access, the GPS trace of the walk, so the app can draw it. Stored on the watch and, if you allow it, written to Health Connect as an exercise route.
Deleting the app deletes all of it. There is no copy anywhere else for us to hold on to.
Off the watch
The three things that can leave
Two of these are yours to switch on. The third is diagnostics, and it is described here in full so you can judge it rather than take our word for it.
Health Connect, or Apple Health
Completed workouts: exercise session, distance, heart rate, calories, and the route if you permitted it. The watch app also reads heart rate.
WhenOnly after you grant the permission, and only on the platform you are running.
This is a transfer to your own phone, not to us. Revoke it any time in Health Connect or the Health app, and delete what is already there from those same apps.
Our diagnostics server
App events such as which screen you opened and which haptic fired, plus crash and error details, your watch model, OS version, and app version.
WhenWhile the app is running, if it has a network connection.
This carries no account, name, email, advertising ID, or persistent device identifier, and no heart-rate values, no location, and no session data. Health Connect writes are recorded as a count of records, never their contents. The server is OpenTelemetry into a SigNoz instance we run ourselves at signoz.codetomuscle.com. It is not a third-party analytics product and nothing is passed to one.
Hevy, if you turn it on
Your completed StepFlow walks, posted to your own Hevy account.
WhenOff unless you paste in your own Hevy API key.
The key is held in the Android Keystore or the iOS Keychain and is sent only to api.hevyapp.com. Once a workout reaches Hevy it is covered by Hevy's privacy policy, not this one. Remove the key to stop it.
Permissions
Why the app asks for each one
- Heart rate, body sensors
- Reads your heart rate during a session so the app can show your zone.
- Physical activity
- Counts steps and distance for the session summary.
- Location, precise and approximate
- Traces the route of the walk. Used only while a session is running.
- Health Connect read and write
- Reads heart rate, and writes the finished workout back so it appears in your health apps.
- Notifications, vibration, wake lock
- Delivers the haptic cues and keeps the session alive with the screen off.
- Foreground service
- Keeps the interval timer running for the length of the walk.
- Internet
- Diagnostics, and the optional Hevy sync. Nothing else.
Every one of these is optional at the system level and the app degrades rather than refuses to run. Decline location and you get a session without a route. Decline Health Connect and the walk stays on the watch.
Health and location data
The specific commitments
Health and fitness data read through Health Connect, along with your location, is used for one purpose: running and recording your walk on your device. It is not used for advertising, not used to build a profile of you, not sold, and not transferred to any third party other than the destinations you choose in the section above.
We do not receive it. Heart rate, routes, and session contents are never sent to our servers, including in diagnostics.
Access is revocable. Health Connect on Android and the Health app on iOS both let you withdraw any individual permission and delete data already written, without uninstalling StepFlow.
This website
The mailing list
If you enter your email address on this site, we store the address, the time you submitted it, which form you used, and whether you have confirmed. That is the whole record. It lives in Cloudflare KV, and the confirmation and welcome emails go out through Cloudflare Email Sending.
It is double opt-in, so nothing is sent until you click the link in the first email, and that link expires after 48 hours. Every email carries an unsubscribe link that does not expire. You can also ask us to delete the record outright at [email protected].
The site sets no advertising or analytics cookies, and runs no third-party trackers.
The rest
Retention, children, and changes
Retention. Session data lives on your watch until you delete it or uninstall. Diagnostics are kept for at most 90 days and then dropped. Mailing list records are kept until you unsubscribe or ask us to remove them.
Children. StepFlow is not directed at children under 13 and we do not knowingly collect anything from them.
Your rights. Most of what you would ask us for is already in your hands, since the data is on your device. For anything we do hold, which in practice means a mailing list entry, write to [email protected] and we will show you the record or delete it.
Changes. If this policy changes we update the effective date at the top of the page. Changes that widen what we collect will be announced in the app before they take effect, not slipped in here.