Shadowstep
Privacy Policy
Last updated 22 June 2026
Shadowstep is an anonymous daily step duel. We collect the few things the game
actually needs to work — and nothing else. No ad tracking, no data sold, no profiles built on
you. This page says exactly what happens to your data, in plain language.
What we collect
- Your phone number. Used only to sign you in (a one-time SMS code) and to
let friends find you in the game. We store your number to keep your account; we never share it.
- Your daily step count. Read from Apple Health to score your duel. We read
the daily total only — never your location, heart rate, workouts, or any other health data.
Shadowstep only reads steps and never writes anything to Apple Health.
- A display name and time zone. Your chosen name shows to your rival when the
duel is revealed at 8 PM; your time zone sets your local 5 AM–8 PM duel window.
- Basic app usage and diagnostics. Anonymous in-app events (e.g. a duel
started, a code sent) so we can keep the app working. Not linked to advertising.
Contacts — hashes only
The optional "find friends" feature checks which of your contacts already play. Your address
book never leaves your device in readable form. On your phone, each contact's
number is reduced to its last digits and one-way hashed (SHA-256). Only those
hashes are sent to us, matched against players, and discarded — we store no
contact names, no numbers, and no list of who you know. We can't reverse a hash back to a number.
What we never do
- No advertising identifiers (no IDFA), no ad networks, no cross-app or cross-site tracking.
- We don't sell or rent your data to anyone.
- We don't write to Apple Health or read any health data beyond your step count.
- We don't build advertising profiles about you.
Why we hold each thing
Phone number → to keep your account and friend-matching working. Steps → to run today's duel
and your history. Name/time zone → to show the reveal and time your window. We keep your account
data while your account exists.
Who processes it
App data is stored on our backend (the Bodify platform) on our behalf. Sign-in codes are sent
by SMS through our messaging provider (Vonage), which receives your number solely to deliver the
code. These providers act under our instructions and don't use your data for their own purposes.
Your choices
- Health access is optional and can be revoked anytime in iOS Settings →
Privacy & Security → Health → Shadowstep. Without it, the duel can't score your steps.
- Contacts are never read unless you tap "find friends," and only hashes are sent.
- Delete your account and data — email us and we'll remove your account,
your step history, and your phone number from our systems.
Children
Shadowstep isn't directed at children under 13 and we don't knowingly collect their data.
Changes
If this policy changes, we'll update the date above and, for material changes, surface a notice
in the app.
Contact
Questions, or to delete your data: privacy@livx.cc