Your steps stay on your iPhone.

Health data StepYear accesses

With your permission, StepYear reads only your step count from Apple HealthKit. Access is read-only: StepYear does not add, modify, or delete information in Apple Health.

The app reads up to the previous 365 calendar days and aggregates the results into one step total per day. Those daily totals are used to draw the heatmap in the app, its widgets, and images that you choose to export.

The StepYear developer does not use HealthKit data for advertising, marketing, profiling, data mining, data brokerage, or medical research, and does not sell or disclose it.

Information stored locally

StepYear stores a compact cache containing 365 daily step totals and the time of the latest update. This cache is stored in an iOS App Group shared only by the StepYear app and its widget extension. Widgets read this cache and never query HealthKit directly.

The cache contains daily totals, not individual HealthKit samples, data-source details, device-source details, or other HealthKit metadata.

Your selected color scheme and whether premium features are unlocked may also be stored locally so the app and widgets remain consistent. Cached information is replaced as the app refreshes. It can remain on your device until it is overwritten or you delete StepYear.

Sharing and disclosure

StepYear has no developer-operated account, database, analytics service, advertising service, or health-data server. We do not receive your step totals or exported heatmaps.

If you create a share image, it is generated on your device. Nothing is shared until you deliberately choose a destination in the iOS share sheet. After that choice, the privacy practices of the service or person you selected apply.

App Store purchases

Optional purchases are processed by Apple through the App Store and StoreKit. StepYear does not receive or store your payment card details. The app checks Apple-provided transaction entitlements locally and stores only the resulting unlocked status for use by the app and widgets.

Your choices and controls

You can deny HealthKit access when StepYear asks for permission. You can also review or revoke StepYear's access later in the Health app or iOS privacy settings. Revoking access prevents StepYear from reading new step data, but it does not automatically erase an existing local cache.

Because StepYear has no account or server-side copy of your data, there is no remote health record for us to retrieve or delete. Delete the app to remove its locally stored app data. You can manage or delete the original step records separately in Apple Health.

Security

StepYear relies on Apple's HealthKit permission system, iOS application sandboxing, and the App Group shared container used by the app and its widget. No method of storage is risk-free, but keeping the processing and cache on your device limits exposure and avoids transmission to a remote service.

Changes to this policy

If StepYear's data practices change, this page will be updated before the revised practices take effect. The effective date at the top of the page identifies the current version.