Privacy Policy

This Privacy Policy explains what information Step collects, why we collect it, and the choices you have. Step is made by Pushify LLC ("Pushify Studio", "we", "us"). It is one of the mobile apps we publish (the "Apps"), and this policy also covers our website pushifystudio.com (the "Website").

What Step collects, taken from the declarations we make to Apple and Google, is listed under What Step collects. The rest of this policy applies to Step in the same way as to all of our Apps.

Who we are

The controller of your personal data is Pushify LLC, a company registered in the United States that publishes its apps under the name Pushify Studio.

For anything about privacy, write to us at support@pushifystudio.com. We read every message and reply within 30 days at the latest, usually much sooner.

Our principles

Information we collect

What an App collects depends on its features. The categories below cover all of our Apps; What Step collects shows which ones apply to each App. We collect personal data through the Apps, the Website and email, by fully or partly automated means.

Information you give us

• When you contact us. If you email us or use the contact form on the Website, we receive your email address, your name if you give it, your message and any attachments.
• Accounts. Some Apps offer an optional account, for example to sync progress across devices or to play online. Then we process the details you provide, such as a username, an email address or the identifier we receive from Sign in with Apple or Google Sign-In.
• Content you create. Settings, progress, entries and other content you create are stored on your device. If an App offers backup or sync, it uses the service you choose (such as iCloud or Google Drive) or our servers, as described for that App.

Information collected automatically

• Diagnostics. Crash reports and performance data, such as the App version, device model, operating system version and the technical details of an error, help us find and fix problems.
• Usage information. Aggregated information about how features are used, such as which screens are opened, helps us improve the Apps.
• Device and connection information. When an App connects to the internet, servers receive technical information such as your IP address, which can reveal your approximate location (for example your country). We don't collect your precise location unless a feature needs it and you allow it.
• Information from Apple and Google. The App Store and Google Play give developers aggregated statistics such as downloads, sales and crash rates. If you have chosen to share analytics with app developers in your device settings, we also receive crash and usage reports that don't identify you.

Purchases and subscriptions

In-app purchases and subscriptions are processed by Apple or Google. We never receive your card or bank details. We receive what we need to deliver your purchase and to handle refunds and support, such as a transaction ID, the product, the date and the country of purchase.

Advertising

Some Apps may be free and supported by ads; where that's the case, the App's section says so. Ad networks may use device identifiers (such as Apple's IDFA or Google's advertising ID), your IP address and information about the ads you see to show and measure ads and to prevent fraud.

• On iOS, ads are personalized with your advertising identifier only if you allow tracking when the App asks (App Tracking Transparency).
• In the EEA, the UK and Switzerland, personalized ads are shown only with your consent, which you can change at any time in the App.
• You can reset your advertising identifier or turn off personalized ads in your device settings at any time.

Device permissions

Apps ask for access to features such as notifications, the camera, photos, the microphone or location only when a feature needs it. Data an App accesses through a permission is used only for that feature and, unless the App's section says otherwise, stays on your device. You can change permissions at any time in your device settings.

Information we don't collect

Unless an App's section says otherwise, our Apps don't access your contacts, messages or browsing history, and we don't collect sensitive information such as health data, biometrics, or information about religion or political opinions.

How we use information

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

Sharing and service providers

We share personal data only in these cases:

• Service providers that work for us under contract and may use the data only to provide their service to us, for example hosting and cloud infrastructure, crash reporting and analytics, email delivery, subscription management and, in ad-supported Apps, advertising. Each App's section shows the data it shares, as declared on the stores.
• Apple and Google, as the platforms through which you download Apps, make purchases and use services such as Game Center, Google Play Games, iCloud or Sign in with Apple. Their own privacy policies apply.
• Legal reasons, when we must comply with the law or a valid request from authorities, or to protect the rights, safety and security of our users, the public or ourselves.
• Business transfers, if Pushify LLC is involved in a merger, acquisition or sale of assets. This policy would continue to apply to your data.
• With your consent or at your direction.

We don't sell personal data, and we don't share it for cross-context behavioral advertising.

International transfers

Pushify LLC is based in the United States, and our service providers may process data in other countries. When we transfer personal data from the EEA, the UK or Switzerland, we rely on safeguards recognized by law, such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU-U.S. Data Privacy Framework. Transfers of personal data from Türkiye are made in line with Article 9 of KVKK.

How long we keep data

• On your device: until you delete it or the App.
• Accounts: for as long as your account exists. When you delete your account, we delete its data within 30 days, unless the law requires us to keep something longer.
• Messages to us: as long as needed to help you, and up to 2 years afterwards so we can follow up on related requests.
• Diagnostics and usage data: no longer than 14 months, often less depending on the provider.
• Purchase records: as long as tax and accounting laws require.
• Website server logs: a short period, typically up to 30 days.

When a period ends, the data is deleted, destroyed or anonymized.

Security

We protect data with measures that match the risk: encryption in transit (HTTPS/TLS), access limited to the people who need it, reputable providers, and collecting as little as possible in the first place. No system is perfectly secure, so if you find a vulnerability, please report it to support@pushifystudio.com.

Your rights

Wherever you live, you can ask us for a copy of your personal data and ask us to correct or delete it. Depending on where you live, you may have additional rights.

European Economic Area, United Kingdom and Switzerland

Under the GDPR, the UK GDPR and the Swiss FADP, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting earlier processing. You can also lodge a complaint with the data protection authority where you live or work.

Türkiye (KVKK)

Under Article 11 of the Personal Data Protection Law No. 6698, you have the right to:

• learn whether your personal data is processed and, if so, request information about it;
• learn the purpose of the processing and whether it is used for that purpose;
• know the third parties in Türkiye or abroad to whom it is transferred;
• request its correction if it is incomplete or inaccurate, and its deletion or destruction under Article 7;
• request that these corrections or deletions be notified to the third parties to whom it was transferred;
• object to a result against you that arises from analysis exclusively by automated systems;
• claim compensation if you suffer damage because of unlawful processing.

We respond to your application free of charge within 30 days at the latest. If your application is rejected, our answer seems insufficient to you, or we don't answer in time, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

California and other U.S. states

If you live in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon or another U.S. state with a privacy law, you may have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and not to be discriminated against for using these rights. We don't sell or share personal information, and we don't use sensitive personal information for purposes that would give you a right to limit it.

In the past 12 months we may have collected these categories of personal information, from you, your device and Apple or Google, for the purposes described above: identifiers (such as a device identifier, IP address or email address), commercial information (purchase records), internet or other electronic network activity (usage and diagnostics) and approximate geolocation derived from IP addresses. We disclose them only to the service providers described in Sharing and service providers.

You can make a request through an authorized agent. If we decline a request, you can appeal by replying to our decision. We treat Global Privacy Control signals on the Website as a request to opt out where the law requires.

How to exercise your rights

Email support@pushifystudio.com and tell us which App or Apps your request is about and what you'd like us to do. To protect your data, we may ask you to confirm your identity, for example by writing from the email address linked to your account. We reply free of charge within 30 days, or 45 days where California law applies.

Deleting your data

• Data on your device: delete it in the App, or delete the App.
• Accounts: in Apps with accounts, you can delete your account in the App's settings, or ask us by email.
• Anything else we hold: email support@pushifystudio.com with the subject "Delete my data" and the name of the App. We delete the data within 30 days and let you know when it's done. Some information, such as purchase records, may be kept longer where the law requires.

Children

Our Apps are not directed at children under 13, or a higher age where local law requires it (for example 16 in some EEA countries), and we don't knowingly collect their personal data. If an App is designed for children or families, its section says so, and it follows the rules that apply, such as COPPA, Apple's Kids Category guidelines and Google Play's Families Policy. If you believe a child has given us personal data, contact us and we'll delete it.

This website

• Hosting. Our hosting provider processes technical data, such as your IP address, browser and the pages you request, to deliver and protect the Website. These logs are deleted after a short period.
• Contact form. We receive your name, email address and message through our email provider (Resend), and use them only to reply to you.
• Analytics. If we use website analytics, we use privacy-friendly tools that count visits in aggregate, without advertising cookies or cross-site tracking.
• Cookies and storage. We store your theme preference in your browser and may use a functional cookie to remember your language. We don't use advertising cookies.

Links to other services

The Website and the Apps link to the App Store, Google Play and other services. When you use them, their own privacy policies apply.

Changes to this policy

We may update this policy as our Apps and the law change. We'll change the "Last updated" date above and, if a change is significant, announce it in the Apps or on this page before it takes effect.

Contact

Pushify LLC · Pushify Studio · support@pushifystudio.com

Please put "Privacy" in the subject line so we can prioritize your request.

What Step collects

The data practices of Step as declared on Google Play (Data safety) and the App Store (App Privacy). This section updates automatically when a declaration changes; the store listing always shows the current one too.