Get Step Go

Privacy Policy

Effective 12 September 2026

Who we are

Get Step Go is operated by Deeplogix, LLC. If you have a question about this policy or about your data, email [email protected].

What we collect

We collect the information the app needs to run groups, challenges and leaderboards:

Where step data comes from

Step counts reach the app from Apple Health, Android Health Connect, a connected Oura account, manual entry, or by reading a number out of a screenshot you upload. Garmin, Whoop and Samsung devices are not integrated directly — if you use one, its data reaches Get Step Go because that device already writes into Apple Health or Health Connect, and the app reads it from there.

Health platform access is read-only

Get Step Go reads your step count from Apple Health or Health Connect. It never writes anything back to either platform.

Apple and Google health data commitments

Health data is never used for advertising, never sold, and never disclosed to third parties for their own purposes. We use it only to provide the features described in this policy. These commitments are required of us by Google's Health Connect data policy and Apple's HealthKit terms, and we hold to them regardless of platform.

Connecting Oura

Connecting Oura requests the daily scope, which covers your daily activity summary. The access and refresh tokens for that connection are stored encrypted at rest and are never readable by the app running on your device — only our server-side functions can use them, to fetch your data from Oura on your behalf. Disconnecting Oura deletes those stored tokens. The step data already imported from Oura before you disconnected stays in your step history.

Who can see your steps

Every member of a group can see the step counts of every other member of that group. Nobody outside the group can see them. This is enforced by row-level security in our database, not just by what the app's screens choose to show — the same rule applies no matter which client reads the data. If you upload a screenshot as evidence for a day's count, it's visible to your fellow group members on the same terms as the count itself.

Per-member visibility controls — letting you hide your steps from a specific group while still sharing with another — do not exist yet. Today, joining a group means every member of that group sees your counts. This is planned.

How we use your data

We use your data to run the app's features: your stats, your groups, your challenges, leaderboards and chat. We do not use it for any other purpose. Specifically, we do not use your data for advertising, we do not use it to make automated decisions about you, and we do not sell it.

Who we share it with

We use Supabase to host our database and run our backend, so Supabase processes your data on our behalf. If you connect Oura, we call Oura's API to fetch your own activity data — nothing more. We do not share your data with advertising networks. We do not share it with an analytics provider, because we do not use one today.

Analytics

We do not use any analytics or tracking SDK today. If we introduce one, we will update this policy first, and it will never receive your health or step data.

Advertising

We do not show advertising today. If that changes, your health or step data will never be used to target ads — the health platform policies we operate under forbid it, and we would hold to that regardless.

Purchases

Get Step Go is free today, with no purchases or subscriptions.

Emails we send

We send account emails only: confirming your address when you sign up. Password reset does not exist in the app yet — if you can't get into your account, email [email protected] and we'll sort it out by hand. We do not send marketing or product email today. If we introduce it, it will be opt-in and every message will carry an unsubscribe link.

Sharing outside the app

You can share a group's invite code through your phone's share sheet, the same way you'd share any link or text. The app does not post to social networks on your behalf, and shareable result cards — an image summarising a challenge you could post elsewhere — do not exist yet.

How long we keep it

Daily step rows are deleted automatically twelve months after their date, by a scheduled job that runs every night. That window exists so you can compare your steps year on year and so annual challenges have a full year of history to work with. Account data — your profile, groups and messages — is kept until you delete your account.

Deleting your data

In-app account deletion does not exist yet. Today, you delete your account by emailing [email protected] — see Delete your account for details. Deletion is permanent: once it's done, your data cannot be recovered.

Security

Your data is encrypted in transit and at rest. Every database query is scoped by row-level security to the signed-in user and their groups, so one account can never read another account's private data by accident or by a bug in the app. Oura tokens are accessible only to our server-side functions and are never exposed to the app itself.

HIPAA does not apply

Deeplogix, LLC is not a HIPAA covered entity or business associate. Step data collected from your own phone or wearable is not protected health information under HIPAA. We mention this because people reasonably assume otherwise about anything touching health data — the commitments in this policy are the ones that actually govern how we handle yours.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to object to how we use it, and to withdraw consent you've given us. To exercise any of these, email [email protected].

These rights are described by the GDPR and UK GDPR for users in Europe and the UK, and by various US state privacy laws for users there. Deeplogix is a small business and qualifies for the small-business exemption under Texas's Data Privacy and Security Act, but we honour these rights for every user regardless.

Children

Get Step Go is for users aged 13 and over, or 16 where local law sets that higher age. If we become aware that an account belongs to someone younger, we remove it.

International transfers

Your data is processed in the United States. If you're in Europe or the UK, that means your data is transferred there, and we do so under appropriate legal safeguards.

Changes to this policy

If we make a material change to this policy, we'll tell you in the app or by email before it takes effect, and we'll update the effective date at the top of this page.

Contact

Questions about this policy or your data go to [email protected]. Deeplogix, LLC is registered in Texas.