Legal
Emberstep Privacy Policy
Last updated: 2026-09-03
No account, no cloud, no upload: your steps, badges and streaks stay on this phone, and the only thing that leaves it is the store's own purchase receipt.
Seller: WaveApp LLC
Checkout: Apple · Google
Contact: support@emberstep.app
Product domain: emberstep.app
1. What never happens
- Emberstep 1.0 has no account, no sign-in and no server holding your history. Onboarding asks for no email.
- Health access is read-only and limited to four types: steps, distance, floors climbed and exercise minutes. Sleep, weight, energy and workout detail are never requested, read or stored.
- Health values, dates, sources, streaks and badge values have no network path out of the app. Share cards never show a sensitive value.
- No readiness score, no health score, nothing that implies a medical claim.
- The 1.0 app sends no usage analytics from your device. No ads, no sale of data.
2. Data we touch
2.1 Health data on your device
Data: daily steps, distance, floors climbed and exercise minutes, read from Apple Health on iOS or Health Connect on Android. On Android the app also asks to read history older than 30 days and to read in the background, so a missed day still counts. Imports from a Fitbit or Google Takeout archive or an Apple Health export are parsed on the device; the raw file is not kept.
Used to: compute your badges, streaks and lifetime totals.
Kept: in an encrypted local database until you export, delete local data or uninstall. Export to CSV or JSON is free, always.
Emberstep's use of information received from Health Connect adheres to the Health Connect permissions policy, including the Limited Use requirements. Emberstep's use of information received from Google Health API and Developer Tools adheres to the Google Health API Developer and User Data Policy, including the Limited Use requirements. That data is never sold, never used for advertising, credit or lending decisions, never transferred to a data broker or advertising platform, and never read by a person.
2.2 Purchase and entitlement
Data: the store receipt and transaction identifiers for the Premium subscription, plus an anonymous app-instance identifier.
Used to: unlock Premium, restore it on a new device, and keep it working offline from a local cache.
Who: Apple App Store or Google Play takes the payment; RevenueCat checks the receipt. We never see your card number.
Basis: performing the purchase contract.
Kept: by the store under its own terms; by RevenueCat while Emberstep is on sale, so Restore purchase keeps working.
2.3 Usage analytics — none in 1.0
The 1.0 build sends no analytics event, so nothing about your use of the app leaves the device. If a later release adds analytics, this page and the store data declarations change first. Even then, no event will carry a health value, a date, a source, a streak, a badge value or free text.
2.4 Support email
Data: what you write to support@emberstep.app, and your address.
Used to: answer you.
Kept: 12 months after the thread closes.
2.5 The website
emberstep.app uses PostHog for anonymous page analytics: page views and exits, selected buttons, store links, campaign tags and referring site. Session recording, heatmaps and location lookup are off. Hosting and security providers process your IP address to deliver the page.
3. Processors
- Apple App Store and Google Play — payment and receipts (United States).
- RevenueCat — entitlement verification (United States), under its data processing terms.
- PostHog — website analytics (United States).
- Hosting and security providers — delivery and protection of site traffic (United States).
Nobody else receives data from Emberstep. We do not sell data and we show no advertising.
4. Your rights
If you are in the EU, the UK or another place with data-protection rights, you can ask us to show, correct, delete, restrict, export or stop using data about you. You can also complain to your local supervisory authority. Write to support@emberstep.app; we answer within one month. We hold no record of you beyond a support thread, so most requests end at the export and delete controls in the app, or at the store for purchase records.
5. Children
Emberstep is not directed at children, and it collects no personal data from anyone, children included.
6. Changes
If a change would affect what data we touch, we announce it in the app's update notes before it takes effect.
7. Contact
support@emberstep.app — WaveApp LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA