Privacy Policy

1. Scope

This Privacy Policy explains how BigSteppa ("BigSteppa," "we," "us," or "our") collects, uses, discloses, and retains information when you use our iOS app, website, invite links, and related services (the "Services").

2. Information We Collect

Account information

We collect your phone number, display name, account identifiers, authentication records, and session information.

Health and step information

With your permission, the app reads step-count data from Apple HealthKit. Recent chart data can remain on your device. When you choose to check in, we send the applicable daily step total, date, and timezone information to our servers so we can score and display your rivalry.

BigSteppa requests access only to step-count data. We do not sell Health data, use it for advertising or marketing, or disclose it to data brokers.

Rivalry and social information

We collect rivalry invitations, rival identities, step goals, wager amounts, check-ins, outcomes, streaks, balances owed or due, and related timestamps. Rivals can see information needed to participate, including your display name and rivalry history. Yesterday's step result may remain hidden until the other rival checks in.

Account funding and transaction information

If account funding or settlement is enabled, we collect embedded account identifiers, public blockchain addresses, balances, transaction amounts, provider references, transaction hashes, and settlement status. Payment, identity-verification, and onramp providers may collect payment-method or identity information directly under their own policies. BigSteppa does not receive full payment-card details.

Device and usage information

We and our hosting providers may process IP address, browser or device type, request timestamps, crash information, and security logs. The app also checks notification authorization status so it can provide reminders you request.

3. How We Use Information

• Authenticate users and maintain accounts.
• Display steps, score rivalries, calculate streaks, and determine results.
• Create invitations and share rivalry information with the intended participants.
• Provision account funding features, maintain a transaction ledger, and process or retry settlements.
• Send requested reminders and service notices.
• Protect the Services, prevent fraud and abuse, debug problems, and comply with law.

4. How We Disclose Information

We disclose information to the rival you choose to play, to service providers that operate the Services, when you direct us to share it, and when required for safety or legal compliance.

Service providers may include Apple for HealthKit and platform services, Twilio for phone verification, Privy and onramp providers for embedded accounts and funding, blockchain networks for public transactions, and cloud hosting providers such as Railway and Vercel. They process information under their own terms and privacy policies.

We may transfer information in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate notice and applicable law.

5. HealthKit Choices

You can grant or revoke BigSteppa's step access in the Health app or iOS Settings. Revoking access stops new HealthKit reads but does not automatically delete rivalry check-ins already submitted to the Services.

6. Retention

We retain account and rivalry information while your account is active and as reasonably needed to provide the Services. We may retain transaction, fraud-prevention, tax, dispute, and legal-compliance records for longer periods required by law. We delete or de-identify information when it is no longer needed, subject to those obligations.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

You may update your display name in the app, control Health and notification permissions through iOS, and request access, correction, or deletion of personal information by contacting us. We may need to verify your request and may retain records where permitted or required by law.

Before public launch, BigSteppa will provide an in-app account-deletion path. For now, deletion requests can be sent to support@getbigsteppa.com.

9. Children

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children under 18.

10. International Use

Information may be processed in the United States and other countries where our providers operate. Those countries may have different data-protection laws than your country.

11. Changes

We may update this policy as the Services change. We will post the revised policy and update the effective date. We will provide additional notice when required by law.

12. Contact

Questions or requests can be sent to support@getbigsteppa.com.