Privacy Policy for StepMaxxer

Last updated: September 1, 2026

This Privacy Policy explains how the StepMaxxer app ("the App", "we", "us") handles your information.

1. Controller / Responsible party

The controller responsible for the App within the meaning of the General Data Protection Regulation (GDPR) is:

Benjamin Waibel
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
E-Mail hi@benjaminwaibel.com

2. Summary

StepMaxxer requires no account and asks for no personal details.
All processing happens locally on your device. The App has no server component and makes no network connections of its own.
Your step and distance data is read from Apple Health only with your explicit permission and never leaves your device.
There is no advertising, no analytics, no tracking, and no third-party SDK.
The developer never receives, sells, or shares any of your data. There is nothing to receive.

3. Data the App processes and why

3.1 Health data (step count and walking/running distance)

The App requests read-only access to your step count and your walking/running distance from Apple Health (HealthKit). It reads no other health data and does not write health data. You grant or deny this access through the iOS Health permission dialog; if you deny it, the App simply shows no data.

This data is used, exclusively on your device, to display:

your progress toward your personal goal in the App and in the optional home screen and lock screen widgets;
a daily chart and pace information for the current goal period;
past goal periods, which you can browse in the App. Past periods are fetched from Apple Health on demand, held only in memory while you view them, and are not written to any persistent storage;
your personal records (your best days, weeks, and months), which are computed in memory from your own Apple Health history each time you open that screen. No ranking against other people takes place: there are no other people; the "leaderboard" contains only your own past periods, and nothing about it is stored or transmitted.

3.2 Goal settings and preferences

Your settings (goal type, step or distance target, distance unit, goal period, week start day, and onboarding state) are stored locally on your device in a storage container shared between the App and its widgets (an App Group). They contain no health data and are not transmitted anywhere.

3.3 Locally cached values for the widget

So that the widget can show something when Apple Health is temporarily unreadable (for example, while your device is locked), the App stores two aggregated values in the same local App Group container:

your step or distance total for the current goal period, and
an estimated average stride length, derived from your own recent step and distance totals, used to show your goal in the other unit as well (steps expressed as a distance and vice versa).

No individual samples and no history are stored. The App Group container is local to your device, is not synced to iCloud, and is excluded from device backups of the iCloud/Finder kind for App Group data.

3.4 Background updates

To keep the widget current, the App uses Apple's HealthKit background delivery: iOS briefly wakes the App (at most about once per hour) when new step data arrives, so it can re-read your current total and refresh the widget. This happens entirely on your device; no network activity is involved.

3.5 External links

The App's settings screen contains links to this Privacy Policy, the imprint, and Apple's standard license terms. These open in an in-app Safari view. Only when you tap such a link does your device connect to the respective website (e.g. benjaminwaibel.pages.dev or apple.com); the usual technical data of a web request (such as your IP address) is then processed by that website's operator under its own privacy notice. The App itself sends nothing.

3.6 Email support

If you contact the developer by email, the data you provide (your email address and the content of your message) is used solely to answer your request and is not shared with anyone.

4. What the App does NOT do

The App does not:

collect or transmit any personal data to the developer or anyone else;
use analytics, advertising, or tracking of any kind;
use third-party SDKs or services;
require or support user accounts;
store or sync health data in iCloud or any other cloud service;
write data to Apple Health;
sell, share, or disclose your data (there is nothing to sell or share).

5. Service providers

The App uses no third-party service providers. The only party technically involved is Apple (Apple Inc. / Apple Distribution International Ltd.), whose operating system provides Apple Health, the widget infrastructure, and App Store distribution on your device. Apple's handling of your data is governed by Apple's Privacy Policy. The developer receives no data from Apple about you.

6. Data retention

Data	Where	Retained until
Health data (steps, distance)	Apple Health, read on demand	Managed by you in the Health app; the App stores none of it
Cached period total & stride estimate	Local App Group container	Overwritten continuously; deleted when you delete the App
Goal settings & preferences	Local App Group container	Deleted when you delete the App
Past periods & personal records	In memory only	Discarded when you leave the screen or close the App
Support emails	Developer's mailbox	As long as needed to handle your request and meet legal obligations

Deleting the App from your device removes all data stored by the App.

7. Your rights under the GDPR

Because all processing takes place solely on your own device and no personal data reaches the developer, the developer does not process your personal data within the meaning of the GDPR (except for support emails you choose to send). Nevertheless, for transparency:

Legal basis: To the extent the on-device processing of your step count and walking/running distance is considered processing of personal data (including health data under Art. 9 GDPR), it is based on your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which you give through the iOS Health permission dialog and can withdraw at any time (Settings → Privacy & Security → Health → StepMaxxer). Withdrawal does not affect the lawfulness of processing before withdrawal. Support emails are processed on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.
Your rights: You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15-21 GDPR), as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). In practice, because the developer holds no data about you, you can exercise these rights directly on your device through the Health app and by deleting the App.
Data transfers: No data is transferred to the developer, to third parties, or to any country outside your device.
Automated decision-making: The App performs no automated decision-making or profiling within the meaning of Art. 22 GDPR.

8. California privacy rights (CCPA/CPRA)

The developer does not collect, retain, sell, or share personal information as defined by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Categories of personal information collected by the developer: none. All data stays on your device.
Sale or sharing: the developer does not sell or share personal information and has not done so in the preceding 12 months. No opt-out is needed because no sale or sharing occurs.
Sensitive personal information: the App accesses health data (step count and walking/running distance) only on your device with your consent; the developer never receives it.
Your rights: California residents have the rights to know, delete, correct, and opt out of sale/sharing, and the right to non-discrimination for exercising these rights. Because the developer holds no personal information about you, requests to know or delete can be fulfilled directly on your device as described in Section 6. You may still contact the developer at the email address above with any request.

9. Children's privacy

The App is not directed at children under 13 and does not knowingly collect any data from anyone, including children. Since no data leaves the device, no personal information of children is collected.

10. Data security

All data the App handles remains inside the iOS app sandbox and the local App Group container, protected by iOS device encryption and Apple Health's own protections. Because the App makes no network connections, there is no transmission path an attacker could intercept.

11. Disclaimers

The App is provided "as is" without warranties of any kind regarding fitness for a particular purpose, functionality, or the accuracy of displayed values (which depend on the sensor data recorded by your devices in Apple Health). To the extent permitted by law, the developer accepts no liability for damages arising from the use of the App. This Privacy Policy may be updated when the App's functionality or legal requirements change; the "Last updated" date above will be revised accordingly, and material changes will be indicated in the App or its App Store listing. Please review this policy from time to time.

12. Contact

If you have questions about this Privacy Policy or your data, contact:

Benjamin Waibel
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
E-Mail hi@benjaminwaibel.com