Last updated: 24 August 2026
StepDuo is made by Johannes Vlot. This policy is short because the app does one thing: it shows your steps next to those of one person you choose. Below is everything it stores, why, and who can see it.
Your account. You sign up with an email address and a password, or with Sign in with Apple. We never see your password — our authentication provider stores it hashed. With Sign in with Apple we receive the identifier Apple gives us, plus your name and email address if you choose to share them.
Your profile. The name you pick, a six-character invite code, which account you are linked to, your bar colour, your shared daily goal, whether the app counts steps or distance, and whether your partner may include your numbers in a shared image.
Health data. With your permission, StepDuo reads two things from Apple Health: your daily step count and your walking and running distance. Those two numbers per day are stored on our server, because that is the only way your partner can see them. Each sync updates the last 31 days; older days stay as they were. Nothing else is ever read from Health.
Notifications, if you turn them on: a device token from Apple, your time zone — so we know when it is night where you are and stay quiet — which notifications you want, and a note of which one we sent you on which day, so the same message cannot arrive twice.
There is no analytics in StepDuo, no advertising identifier, and no tracking of any kind. We do not know which screens you open or how long you use the app.
You, and the one partner you linked with. That is not a promise in a document but a rule in the database: an account can read its own rows and those of its partner, and nothing else. Unlink, and that access ends immediately.
Two companies process data on our behalf:
We do not sell your data and we do not share it with anyone else. Specifically, data from Apple Health is never used for advertising or marketing, never used for data mining, and never disclosed to third parties for those purposes.
Until you delete your account. You can do that yourself in the app, under Settings → Delete account. It removes your profile, your steps and distances, your notification settings and your device tokens — all of it, at once and for good. Your partner keeps their own numbers and simply becomes unlinked.
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. For deletion the button in the app is the fastest route. For anything else, write to the address below and we will answer within 30 days.
StepDuo is not intended for children under 16.
If this policy changes, the date at the top changes with it.