← Back to home

Privacy Policy

Last updated : March 17, 2026

1. Introduction

vsteps (hereinafter "we", "our") is an iOS step-counting and friend-challenge app, developed and operated from Switzerland. We take the protection of your personal data very seriously, in accordance with the Swiss Federal Act on Data Protection (nFADP) and the European Union's General Data Protection Regulation (GDPR).

2. Data collected

We collect and process the following data:

  • Account data: Apple identifier (via Sign in with Apple), display name chosen by the user.
  • Health data: daily step count, read from Apple Health with your explicit permission.
  • Usage data: interactions with the app (leaderboards viewed, groups joined).

3. Use of data

Your data is used exclusively to:

  • Display leaderboards among friends.
  • Calculate your progress toward your daily step goal.
  • Improve app features.

4. Data sharing and processors

We never sell your personal data. Your step data is only shared with members of your groups within the app. No data is transmitted to third parties for advertising purposes.

We use the following processor for data hosting and storage:

  • Google LLC (Firebase) — authentication, database (Firestore) and hosting. Data may be stored on servers located in the European Union or the United States. Google acts as a data processor in accordance with its Data Processing Terms and the Standard Contractual Clauses approved by the European Commission for international transfers.

5. Legal basis

The processing of your data is based on your explicit consent (particularly for Apple Health access) and our legitimate interest in providing the service.

6. International transfers

Your data may be transferred to servers located outside Switzerland and the European Economic Area (notably in the United States via Google/Firebase). These transfers are governed by the European Commission's Standard Contractual Clauses and the safeguards recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

7. Data retention

Your data is retained as long as your account is active. You can request the deletion of your account and all associated data at any time from the app settings. Upon account deletion, your data is erased from our servers within 30 days.

8. Your rights

Under the Swiss nFADP and the European GDPR, you have the following rights:

  • Right to access your personal data.
  • Right to rectify inaccurate data.
  • Right to erasure of your data.
  • Right to data portability.
  • Right to withdraw your consent at any time.
  • Right to object to the processing of your data.
  • Right to lodge a complaint with a competent supervisory authority.

To exercise these rights, contact us at the address below. We will respond to your request within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption of data in transit and at rest.

10. Contact

For any questions regarding data protection, contact us at contact@vsteps.app.