← Back to home

Privacy Policy

Last updated : June 20, 2026

1. Introduction

vsteps (hereinafter "we", "our") is an iOS step-counting and friend-challenge app, developed and operated from Switzerland. We take the protection of your personal data very seriously, in accordance with the Swiss Federal Act on Data Protection (nFADP) and the European Union's General Data Protection Regulation (GDPR).

2. Data collected

We collect and process the following data:

  • Account data: Apple identifier (via Sign in with Apple), display name chosen by the user.
  • Health data: daily step count, read from Apple Health with your explicit permission.
  • Usage and analytics data: interactions with the app (leaderboards viewed, invitations created or accepted, groups joined, premium offer views, subscriptions), collected pseudonymously and without any advertising identifier, for audience measurement and product improvement.
  • Diagnostic data: crash reports and performance data, to detect and fix app malfunctions.

3. Use of data

Your data is used exclusively to:

  • Display leaderboards among friends.
  • Calculate your progress toward your daily step goal.
  • Measure app usage and improve features (aggregated, pseudonymous statistics).
  • Detect, diagnose and fix crashes and performance issues.

4. Data sharing and processors

We never sell your personal data. Your step data is only shared with members of your groups within the app. No data is transmitted to third parties for advertising purposes.

We use the following processor for data hosting and storage:

  • Google LLC (Firebase) — authentication, database (Firestore) and hosting, as well as audience measurement (Firebase Analytics, without any advertising identifier), crash reporting (Crashlytics) and performance monitoring (Performance Monitoring). Data may be stored on servers located in the European Union or the United States. Google acts as a data processor in accordance with its Data Processing Terms and the Standard Contractual Clauses approved by the European Commission for international transfers.

5. Legal basis

The processing of your data is based on your explicit consent (particularly for Apple Health access) and our legitimate interest in providing, securing and improving the service (audience measurement and diagnostics).

6. International transfers

Your data may be transferred to servers located outside Switzerland and the European Economic Area (notably in the United States via Google/Firebase). These transfers are governed by the European Commission's Standard Contractual Clauses and the safeguards recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

7. Data retention

Your data is retained as long as your account is active. You can request the deletion of your account and all associated data at any time from the app settings. Upon account deletion, your data is erased from our servers within 30 days.

8. Your rights

Under the Swiss nFADP and the European GDPR, you have the following rights:

  • Right to access your personal data.
  • Right to rectify inaccurate data.
  • Right to erasure of your data.
  • Right to data portability.
  • Right to withdraw your consent at any time.
  • Right to object to the processing of your data.
  • Right to lodge a complaint with a competent supervisory authority.

To exercise these rights, contact us at the address below. We will respond to your request within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption of data in transit and at rest.

10. Contact

For any questions regarding data protection, contact us at contact@vsteps.app.