1.Who we are
Stepplio is provided by Rumah Maya (“we”, “us”), a website and software company with its main office in Malang, East Java, Indonesia. Our team works together with colleagues in several countries. We provide the Stepplio mobile app, the Stepplio watch experience and this website. For the personal data described here we act as the personal data controller. Our details: Rumah Maya, Malang, East Java, Indonesia.
If you have a question about your data, contact us at the address in the Contact section below.
2.Data we collect
Depending on how you use Stepplio, we collect the following.
- Account data: such as your name or username, email address and profile photo, if you create an account.
- Body and health data you enter: your height, weight, age, sex, fitness level and goal. Indonesian law treats health data as “specific personal data”, so we handle it with extra care.
- Activity data: your steps, distance, duration, pace, activity type (such as walking or running), streaks and, if you use a watch or connect a sensor, your heart rate.
- Location data: if you allow location access, we use it to record the route of your activities and show it on the map.
- Photos: pictures you take or add to an activity.
- Social data: your friends, the streaks you share or gift, and anything else you choose to share with friends, such as step counts, places you visited and routes.
- Device and usage data: your device model, operating system, app version, language, crash reports and how you use the app.
3.Why we may process your data
We only process personal data when we have a legal basis to do so. Ours are:
- Your explicit consent. We ask for it when you create an account and separately for health data, location and photos. For anyone under 18 we ask for the consent of a parent or guardian.
- Performing our agreement with you, which means providing the Stepplio features you ask for.
- Complying with the law.
- Our legitimate interests, such as keeping Stepplio secure, preventing abuse and fixing problems, always balanced against your rights.
You can withdraw your consent at any time (see “Your rights”). Withdrawing does not affect processing that happened before, and some features will stop working without the data they need.
4.How we use your data
- To count your steps, detect and record your activities, and draw your routes.
- To power the AI coach: recommending your daily step goal, workouts and training plans.
- To run streaks, friend features and notifications, for example telling you when a friend reaches their step goal.
- To keep Stepplio working, fix problems, prevent abuse and improve the app.
- To contact you about your account or important changes.
- To follow the law.
5.The AI coach and automated decisions
The coach creates recommendations from the body and activity data you give Stepplio. This is automated processing, including a form of profiling. The recommendations are estimates, not medical advice, and they do not have legal effects on you.
You have the right to object to decisions based only on automated processing. You can ignore any recommendation, and you can ask us to stop using your data for the coach (see “Your rights”).
We may use service providers to help run the coach. They only receive the data needed to do that work.
7.Transfers outside Indonesia
Our service providers or servers may be located outside Indonesia. We only transfer your personal data abroad if the destination country has an equal or higher level of personal data protection than Indonesia, or if we have put adequate and binding safeguards in place, or, where neither applies, with your consent, as Indonesian law requires.
Our team includes people working from different countries. They may reach personal data from outside Indonesia only when needed for their work (for example, user support or fixing a fault), only through secure company accounts, and they are bound by confidentiality duties and by this policy. The same transfer rules apply to this access.
8.Location, photos and sharing controls
You decide whether Stepplio can use your location, your photos and your notifications, and you can change these permissions at any time in your phone's settings. Some features, such as route maps, will not work without the related permission.
Think before you share a route or a place. A route can show where you live or work, so only share it with people you trust.
9.Health and fitness data
Data about your body and your activity can be sensitive. We use it only to provide Stepplio's features and we protect it with extra care. Stepplio is a fitness tool, not a medical service, and does not diagnose or treat any condition.
10.How long we keep data
We keep your data while your account is active. If you ask us to delete your account, we delete or anonymize your personal data, except where we must keep some of it to follow the law or to resolve disputes. We delete data we no longer need.
11.Your rights
Under Indonesian law you have the right to:
- get information about how and why your data is processed;
- access your data and get a copy of it;
- correct or complete your data;
- ask us to stop processing, delete or destroy your data;
- withdraw your consent;
- object to decisions based only on automated processing, including profiling;
- ask us to delay or limit processing;
- receive your data in a usable format and ask us to send it to another service, where this is possible;
- claim compensation if we break the law in handling your data.
To use any of these rights, write to us at the Contact address. We answer promptly and within the time limits set by Indonesian law. We may need to confirm it is really you before we act on a request.
12.If something goes wrong
If a failure to protect personal data happens, we will notify the people affected and the personal data protection authority in writing within 3 x 24 hours of the incident, and explain what data was involved, what happened and what we are doing about it.
13.Children
Children's data is also “specific personal data” under Indonesian law. Stepplio is not intended for anyone under 18 unless a parent or guardian has agreed to this policy and to our Terms on their behalf. We do not knowingly process the data of a child without that consent. If you think a child has given us data without it, contact us and we will delete it.
14.Security
We use reasonable technical and organizational measures to protect your data. No system is completely secure, so we cannot guarantee absolute security. Please use a strong password and keep your device up to date.
15.Changes to this policy
We may update this policy as Stepplio changes. When we do, we will change the date at the top of this page and tell you in the app or by email. If a change affects how we use your data in a way that needs your consent, we will ask for it again.
16.Contact and complaints
Questions or requests about your privacy: amgadalhrazi@gmail.com. This is also the contact point for data protection matters.
If you are not happy with our answer, you can complain to the personal data protection authority designated under Indonesian law.