Privacy Policy

Introduction & Scope

RH Studio PK ("we," "us," "our," or "the developer") is an independent developer based in Pakistan that publishes and operates the mobile application StepReward: Walk & Rewards (the "App"). This Privacy Policy explains what information we collect when you use the App, how we use and share that information, and the choices and rights available to you.

The App is made available to users worldwide. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

Information We Collect

Account Information

You can create and sign in to your App account in one of two ways: (a) using a Google account through Firebase Authentication / Google Sign-In, which shares your name, email address, and profile photo from your Google account with the App; or (b) using an email address and a password you create, in which case your password is handled directly by Firebase Authentication and is never visible to us in readable form. We use this information solely to create, authenticate, and manage your in-app account.

Profile Information

During onboarding, we ask you to provide your date of birth and your country. We also automatically detect your device's timezone to support features such as daily check-ins and streaks. If you choose to, you may upload a profile picture, which is stored on our cloud storage provider and linked to your account.

Device & Anti-Fraud Information

To protect the integrity of our reward system and prevent abuse, we automatically collect a device identifier (Android's built-in device ID) and your device's public IP address when you sign up or sign in. This information is used to enforce a limit on the number of accounts that may be associated with a single physical device, and to detect and block fraudulent referral activity (for example, referrals between accounts that share the same device or the same network).

Step & Activity Data

The App reads step-count data from your device's built-in step sensor and/or, where available, the Android Health Connect platform, which requires activity-recognition permission. A background/foreground tracking service (which may continue running after a device restart) records your step activity so that steps can be converted into in-app points. Your recent step history is stored primarily on your own device, and a summary is periodically synced to our servers so your points, totals, and daily/weekly progress stay up to date across sessions. See the Health & Fitness Data section below for more detail on how this data is used and your rights over it.

Rewards, Transaction & Redemption Data

We collect and store data related to your in-app economy, including points, coins, daily check-in progress, challenge participation, your virtual cash balance, and your history of point conversions and redemption requests. Points may be converted to a real cash balance only at fixed, pre-set conversion rates that we control — this process does not involve chance, randomness, or a "scratch card" style outcome. When you submit a redemption request, you choose an amount from your cash balance and provide an email address, to which we (or a partner we work with to fulfil the request) send a redeemable gift-card code once your request has been manually reviewed and approved. We collect and retain this information in order to process your request.

Referral Data

We generate a personal referral code associated with your account. When another user redeems your code, we store a record of that referral relationship, including the referred user's name and email address, so that referral rewards can be correctly and fairly credited, and so that we can detect and prevent abusive or circular referral activity between accounts.

Device, Usage & Advertising Data

We and our third-party advertising partner (Google AdMob) collect certain device and usage information, including an advertising/device identifier, general app-usage and interaction data, and technical information (such as device model and operating system version), for the purpose of delivering optional rewarded ads and occasional app-open ads, and, where applicable, ad personalization.

Settings & Notification Data

Preferences such as dark mode, and whether you want notifications, daily reminders, reward reminders, or security alerts, are stored locally on your device and are not shared with third parties. If you grant notification permission, the App may send you local notifications, such as streak or check-in reminders, generated on your device.

Health & Fitness Data

Step and activity data collected by the App is used exclusively to calculate the in-app rewards (points and coins) you earn from walking. It is not used, analyzed, or repurposed for any medical, diagnostic, or health-monitoring purpose.

We do not sell your step or activity data. We do not share this data with insurers, employers, healthcare providers, or any third party for purposes unrelated to operating the App's reward system. The App and its underlying sensors are not a medical device and are not intended to diagnose, treat, monitor, or manage any medical condition.

You may stop the collection of step and activity data at any time by revoking the App's activity-recognition or Health Connect permission through your device settings, though doing so will prevent you from earning further step-based rewards. You may also request deletion of your historical step and activity data by contacting us using the details in the Contact Us section.

How We Use Your Information

• To create, authenticate, and maintain your App account.
• To calculate step-based points and coins, and to operate daily check-ins, step challenges, and other reward mechanics.
• To operate the fixed-rate points-to-cash conversion feature, and to process and review redemption requests, including verifying the details you submit.
• To operate the referral program and credit referral rewards, and to detect and prevent referral abuse.
• To enforce a limit on the number of accounts associated with a single device, and to otherwise detect, investigate, and prevent fraud and abuse.
• To deliver optional rewarded ads and app-open ads, and to measure their performance.
• To send local notifications you have permitted, such as streak or check-in reminders.
• To maintain, secure, and improve the App's functionality and performance.
• To communicate with you regarding your account, support requests, or material changes to our policies.

Third-Party Services We Use

The App relies on a small number of third-party service providers to function:

• Authentication, Database & Storage Provider: We use Google Firebase (Authentication, Firestore, and Cloud Storage) to sign you in and to store your profile, reward data, and any uploaded profile picture securely.
• Advertising SDK: The App integrates Google AdMob to deliver optional rewarded ads and app-open ads. This SDK may collect an advertising/device identifier for ad delivery and, where permitted, ad personalization.
• Device Activity Platform: Where supported, the App reads step data through Android's Health Connect platform, which is governed by its own permission controls on your device.

These providers process data on our behalf and are contractually or technically restricted from using your information for purposes unrelated to providing their service to us, except as described in this Policy. We do not control the independent privacy practices of the app marketplace you downloaded this app from; please review that marketplace's own privacy terms separately.

How We Share Information

We do not sell your personal data. We share information only in the following limited circumstances:

• With service providers (such as our cloud backend and advertising SDK provider) who process data on our behalf strictly to operate the App.
• To the extent necessary to fulfil a redemption request you have submitted — for example, if we need to purchase or issue a gift-card code through a retailer or partner in order to deliver it to the email address you provided.
• Where required to comply with applicable law, legal process, or governmental request.
• To protect the rights, property, or safety of RH Studio PK, our users, or the public, including to investigate fraud or violations of our Terms.
• In connection with a merger, acquisition, or transfer of business assets, subject to continued protection of your data under a policy at least as protective as this one.

Data Retention

We retain your account, reward, and redemption data for as long as your account remains active, and for a reasonable period afterward as needed to resolve disputes, enforce our Terms, prevent fraud, and comply with legal obligations. Some records — such as point-conversion, redemption, referral, and challenge-claim history — are kept as an immutable audit trail even after other changes to your account, for fraud-prevention and record-keeping purposes. If you request account deletion, we will delete your account and profile document within a reasonable timeframe, except where retention of specific transaction records is required by law or for legitimate audit purposes related to completed transactions.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information from unauthorized access, alteration, disclosure, or destruction, including secure cloud infrastructure and access controls on our backend. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security of your data.

Your Rights & Choices

• Access & Correction: You may request a copy of the personal information we hold about you, or ask us to correct inaccurate information, by contacting us using the details in the Contact Us section.
• Account & Data Deletion: You may delete your account directly from within the App, or by emailing us. We will process such requests within a reasonable timeframe, subject to any legal retention requirements.
• Ad Personalization: You can generally limit ad tracking and personalization through your device's ad-settings (for example, by resetting or limiting your advertising identifier).
• Permission Controls: You may revoke activity-recognition, notification, or other permissions at any time through your device settings, which may limit certain App features.

Children's Privacy

The App is not directed at, and is not intended for use by, children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to promptly delete that information from our systems. If you believe a child under 13 has provided us with personal information, please contact us using the details in the Contact Us section.

International Data Transfers

Our cloud backend and other service providers may store or process data on servers located outside of Pakistan. By using the App, you understand that your information may be transferred to, and processed in, countries other than your own, which may have different data protection laws. We take reasonable steps to ensure your information continues to receive an adequate level of protection wherever it is processed.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will update the "Last Updated" date at the top of this page whenever changes are made, and, where changes are material, we will make reasonable efforts to notify you (for example, via an in-app notice). Your continued use of the App after any update constitutes acceptance of the revised Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Legal Disclaimer