FunSteps

"Please note that, with your consent, we will collect information about your location and physical movement in order for the App to function properly and monitor and verify forms of eligible movement. You may turn location monitoring on and off from time to time using the setting of your operating system of your mobile device but, if you disable this functionality, we will not be able to collect information relating to your step-count and GPS/Cell-ID location which will prevent tracking and/or conversion of your movement into reward points."

The app continuously tracks GPS and Cell-ID location along with physical movement data, and disabling it removes core app functionality (reward points), effectively pressuring users to keep tracking enabled.

"User information we collect may include the following: Email address, User name, Age, Gender, Weight/Height, Physical activity (your daily steps), Identification credentials, Location. The App may also request permission to automatically collect other information from your mobile device."

The app collects sensitive biometric-adjacent data (weight, height, physical activity, step count) plus an open-ended permission to collect 'other information' from the device, which is vaguely defined and potentially excessive.

"In particular, we may share information with the following Third Party Service Providers and Advertisers: Amazon Web Services, Google & Google Firebase & Google Analytics, Facebook Audience Network & Facebook Analytics, AppLovin, AppsFlyer, Chartboost, Digital Turbine/Fyber, InMobi, ironSource, Liftoff, Mintegral, Pangle, Pubnative."

The app integrates with over a dozen third-party advertising and analytics SDKs, many of which collect data directly from the user's device, creating an extensive data-sharing ecosystem far beyond what a step-tracking reward app requires.

"We may share (i) certain technical information about your device (including IP addresses and mobile device IDs), (ii) aggregated non-personally identifiable information, and (iii) anonymous information with third party advertisers. You agree that this information may be used by us or by the said third party advertisers to undertake user trend analyses, demographic profiling, and web analytics and to offer you behavioral targeted advertising."

Sharing IP addresses and mobile device IDs with numerous ad networks enables cross-app and cross-service tracking, allowing advertisers to build unified profiles of users across different apps and services.

"We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice. We encourage you to review the Privacy Policy whenever you access the Services to stay informed about our information practices."

The company can change the privacy policy at any time with no guarantee of direct notification beyond updating a date, placing the burden on users to check for changes.

"Your personal data will be kept only for as long as is necessary to fulfill the purposes set out in this policy, for as long as we are required to do so by law or any regulatory obligation. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data."

No concrete retention periods or deletion timelines are provided — only vague criteria about considering 'the amount, nature and sensitivity' of data, giving the company effective discretion to retain data indefinitely.

"Should you have any inquiries about these rights or you would like to exercise any of them, please reach out to us by transmitting an email. If you have any questions, complaints, or comments regarding our Privacy Policy, or have other questions or suggestions about our Services, please contact us via e-mail at adevelopers302034@gmail.com."

There is no self-service account or data deletion option. Users must email a generic Gmail address to exercise their erasure rights, with no guaranteed response timeline or process.