Steplet
Privacy Policy
Effective date: June 1, 2026
1. Basic Policy
The individual operator (the “Operator”) appropriately manages user information handled in the Steplet smartphone application (the “Service”) in accordance with Japan’s Act on the Protection of Personal Information and other applicable laws and regulations.
The Service is offered to users in Japan. If a user is a minor, they must use the Service with the consent of a parent or other legal representative.
2. Information We Collect
The Operator may collect the following information to the extent necessary to provide the Service:
- Account information: user ID, email address, identifiers provided through a Google account, display name, profile image, and similar information
- Profile information: username, profile image, and optionally entered date of birth, gender, region, and similar information
- Usage information: owned sneakers, profile showcase, in-game currency, rewards, items, collections, play history, in-app activity history, and similar information
- Step-count and health-related information: step count, aggregated step-count results, and information needed to calculate rewards and currency based on steps
- Location information: current location and information needed to display nearby spots and determine proximity to a spot
- Device and technical information: device information, operating system, app version, crash information, diagnostic information, IP address, logs, cookies, or similar identifiers
- Inquiry information: inquiry details, contact information, and information needed to verify identity
The Service accesses step-count data, health data, location information, photos, notifications, and other device features only when the user grants permission on their device. Users can change these permissions in their device settings. Revoking a permission may make some Service features unavailable.
3. Purposes of Use
The Operator uses collected information for the following purposes:
- To provide the Service, authenticate and verify users, and manage accounts
- To record steps, display history, issue rewards, calculate in-game currency, manage sneakers, and provide collection features
- To display nearby spots based on current location, determine proximity to spots, and provide related reward features
- To display usernames, profile images, owned sneakers, profile showcases, and similar information within the Service
- To detect, prevent, investigate, and respond to fraud, violations of terms, outages, and security issues
- To analyze Service usage, improve quality and features, and develop new features
- To respond to inquiries and communicate important notices or changes to terms and policies
- To comply with requests from laws, administrative authorities, or courts
4. Information Made Public
Within the Service, usernames, profile images, owned sneakers, profile showcases, in-game status, and other displayed information may be visible to other users. Information that may be public includes images and display names set by users as part of their profiles.
The Service does not provide user-editable bios, comments, posts, or chat features.
5. Disclosure to Third Parties and Outsourcing
The Operator does not provide users’ personal data to third parties except when required by law, with the user’s consent, when necessary to protect life, physical safety, or property, or in other cases permitted by law.
The Operator may entrust external service providers with handling information to the extent necessary to provide, maintain, analyze, and troubleshoot the Service. In such cases, the Operator provides necessary and appropriate supervision of those providers.
6. External Services We Use
The Service uses the following external services:
- Firebase Authentication: authentication and account management
- Cloud Firestore, Cloud Functions for Firebase, Cloud Storage for Firebase, and Firebase Hosting: data storage, server processing, image storage, and web page delivery
- Firebase Crashlytics: collection of crash and diagnostic information and failure analysis
- Firebase Analytics / Google Analytics: usage analysis and Service improvement
To provide these external services, their providers may process device information, app usage information, crash information, IP addresses, identifiers, and similar information. Services provided by Google LLC and its affiliates may store or process information outside Japan.
The Service does not use advertising SDKs, external advertising, or social media integrations.
7. Location and Step-Count Information
Location information is used to display nearby spots and determine a user’s proximity to them. Beyond these purposes, the Service does not use location information for the purpose of storing a continuous history of a user’s movements.
Step-count information is used to record steps, display history, issue rewards, calculate in-game currency, and provide other parts of the Service’s game experience. The Service does not use step-count information for medical care, diagnosis, health management, or safety purposes.
8. Security Measures
To prevent leaks, loss, damage, unauthorized access, and similar incidents involving user information, the Operator implements necessary and appropriate security measures, including access restrictions, authentication, encryption of communications, use of security features provided by external services, and log reviews.
9. Retention and Account Deletion
The Operator retains user information for as long as necessary to fulfill the purposes for which it is used. When a user deletes their account, the Operator deletes authentication information, profile information, profile images, owned items, rewards, aggregated step-count information, and other account-related information to a reasonable extent.
However, the Operator may retain logs or related information for a certain period to the extent necessary for legitimate reasons, including fraud prevention, failure investigation, legal compliance, inquiry handling, and dispute resolution.
10. Disclosure, Correction, Suspension of Use, and Similar Requests
Under applicable law, users may request disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision of their retained personal data. To make a request, contact the address at the end of this Policy. The Operator will verify the requester’s identity and respond in accordance with applicable law.
11. Changes to This Privacy Policy
The Operator may change this Policy in response to changes in law, changes to the Service, changes to external services used, or other needs. If a material change is made, the Operator will provide notice within the Service, on the website, or by another appropriate method.
12. Operator Information and Contact
The Operator is an individual. The Operator’s address will be disclosed without delay in accordance with applicable law upon a legitimate request.
Contact: info{at}steplet.app