Privacy Policy
Last updated: August 9, 2026
1. Introduction
This Privacy Policy describes how the Lord of the Steps application ("App") collects, uses, and protects personal data of its users. Data controller: Ainur Khakimov. Website: lord-of-the-steps.ru Contact email: ainr.khakimov@gmail.com
2. Data We Collect
The App collects the following data: • Email address — via Google Sign-In or Sign in with Apple • Username — set by you in your profile • Height (cm) — to calculate step length and walking distance • Daily step count — from system health data sources: Samsung Health, Huawei Health or Health Connect (Android), HealthKit (iOS), or the device's built-in step sensor • Device identifier — to sync steps across multiple devices We do NOT collect location data, contacts, photos, messages, or any other personal information.
3. Why We Collect Data
All data is used solely for the App's functionality: • Email — account identification and authentication • Username — display in groups and challenges • Height — automatic distance calculation from step count • Steps — route progress, statistics, challenge participation • Device identifier — correct data aggregation across devices
4. Third-Party Data Sharing
We do not sell, share, or disclose your personal data to third parties. Exceptions: • Google Sign-In — during authentication, Google receives standard sign-in information per its own privacy policy • Sign in with Apple — during authentication, Apple receives standard sign-in information per its own privacy policy • Huawei Health — if you connect Huawei Health as a step source, access is granted through your Huawei ID, and Huawei receives standard sign-in information per its own privacy policy The App contains no advertising SDKs, analytics trackers, or other data collection services.
5. Data Storage and Security
Data is stored on a secure server. • All data is transmitted over encrypted HTTPS protocol • Authentication tokens are stored in Keystore (Android) and Keychain (iOS) • Database access is restricted and protected
6. Data Deletion
You can delete your account and all associated data: • In the app: Profile → Delete Account • By email: send a request to ainr.khakimov@gmail.com When you delete your account, the following data is permanently removed: profile data, step history, group memberships, challenge participation, and subscription data.
7. Health Data
The App requests read-only access to step count data. Depending on your device, this data is read from Samsung Health, Huawei Health or Health Connect (Android), from HealthKit (iOS), or from the device's built-in step sensor. We do not write data to any of these sources. We do not request access to other health metrics (heart rate, blood pressure, sleep, workouts, etc.). Step data is used exclusively for calculating route progress, personal statistics, and participating in group challenges. We do not share it with third parties and do not use it for advertising.
8. Policy Changes
We may update this Policy from time to time. If we make significant changes, we will notify users through the App. The current version is always available at: lord-of-the-steps.ru/privacy
9. Third-Party AI Assistant Access (MCP Connector)
Premium subscribers may voluntarily connect their account to a third-party AI assistant (such as Claude or ChatGPT) over the open MCP protocol, to ask the assistant questions about their own data. A connection is always initiated by you: it requires signing in and giving explicit consent on a screen that lists exactly what data the assistant will receive. No access is possible without your consent. What a connected assistant can read: • profile — name, registration date, height, unit system, subscription status (your email address is never shared); • steps, route and goals — day-by-day step history, route progress, goals and their outcomes; • groups and challenges (if you grant this access) — the leaderboards of your groups, including your groupmates' names and step totals — exactly as the app itself displays them. Access is strictly read-only: the assistant cannot change or delete anything. Data shared this way is processed by the assistant as a third-party service under its own privacy policy. You can revoke access at any time from your account page ("Connected Assistants") — revocation takes effect immediately. Deleting your account automatically removes all connections and permissions.
For any questions: ainr.khakimov@gmail.com