Privacy Policy

STEP! (STEP) is a trading name of Infracoding Ltd, registered in England and Wales under Company No. 15565330. Infracoding Ltd is the data controller for the information described here. Contact: privacy@stepforward.games.

You can play STEP! without signing in. In that case no account is created. Your language, player names, voice and pacing settings, and the list of recently used questions are stored only on your device (browser storage or the app’s local storage) so the game remembers them next time.

If you choose to create an account we store:

• Your email address and a hashed password (email sign-up), or the email, name and profile picture your Google account shares with us (Google sign-in, web only).
• A profile record: display name, avatar image link and preferred language.
• Game state: your player list and the questions you have recently seen, so they can follow you across devices.
• Round history: game mode, language, difficulty, number of players, the player names you entered, question count, whether the round was recorded, and the date.

Account data is hosted on secure, access-controlled cloud infrastructure. Authentication emails (verification, password reset) are sent to the address you provide.

STEP! asks for camera and microphone access only when you start a round with recording turned on, and only after showing you why. Access is used solely to record that round. You can decline, retry later, or tap “Play without recording” — the game works fully without it. If access is denied the app does not ask again on its own; you can change the permission in your device settings at any time. The camera and microphone are released as soon as the round ends or you leave the screen.

• Recordings are created and stored on your device only (in the app’s local storage / browser storage).
• We do not upload recordings to our servers, and we cannot see them.
• The STEP! watermark, timer and question text are drawn into the clip while it records.
• Clips leave your device only when you explicitly choose to share or save them, using your phone’s share sheet or a download. From that point the receiving app or service handles the file under its own terms.
• You can delete any clip from the clip library inside the app. Uninstalling the app or clearing site data also removes them.

Please make sure everyone in a recording is happy to be filmed before you share a clip. Recording others without their agreement may be unlawful where you live.

Two optional features send text to an AI service through our servers:

• Custom question packs: the theme, tone and language you type are sent to generate questions. Results are moderated for safety.
• STEP! AI voice: the question text is sent to a text-to-speech service to produce the audio you hear. Generated audio is cached on your device so the same question is not requested twice.

No recordings, photos, audio from your microphone or player names are sent to the AI service. These features require an account; we log the time of each request against your account solely to enforce a fair daily limit. Requests are also rate-limited by network address to prevent abuse. The AI provider processes the text only to fulfil the request.

We collect a small set of usage events (for example “round started”, the game mode, language and the page name) to understand which features are used. These events are only sent after you accept analytics in the cookie banner on the website; the iOS and Android apps do not send analytics events. Events carry a random device identifier that is not linked to your account, and no recordings, question answers or contact details.

The full game is a one-time purchase made through Apple’s App Store or Google Play. We never see your card details. Purchase status is managed by RevenueCat, which receives the store’s purchase receipt, an anonymous app user identifier and, if you are signed in, your account identifier so the purchase can be restored across your devices. There is no subscription and nothing renews.

Like any online service, our servers receive standard technical information when the app contacts them (network address, device/browser type, time of request). It is used for security, rate-limiting and to fix errors, and is retained only for a short period in server logs.

We use essential browser storage to remember your sign-in session, language and game settings. Analytics on the web only starts after you consent. See the cookie policy for details.

• Cloud hosting and authentication provider (account data, game state, analytics events).
• AI gateway / model provider (question and narration text only).
• RevenueCat, Apple and Google (purchase status).
• Google (only if you sign in with Google on the web).

We do not sell personal data and we do not use third-party advertising SDKs.

• Account, profile, game state and round history: until you delete your account.
• AI usage log entries: kept only as long as needed for the daily limit and routine clean-up.
• Analytics events: up to 24 months, in aggregate form after that.
• Recordings: never stored by us — they live on your device.

Open Profile → Delete my account in the app, or follow the steps on our account deletion page. Deletion is immediate and removes your account, profile, game state, round history and usage logs. It does not refund or cancel store purchases, which remain with Apple or Google and can be restored on a new install.

STEP! is designed for adults and older teenagers and contains party content. It is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Under UK and EU data protection law you can ask for access to, correction of, or deletion of your personal data, object to or restrict processing, and request a copy in a portable format. Email privacy@stepforward.games and we will respond within 30 days. You also have the right to complain to the UK Information Commissioner’s Office or your local supervisory authority.

If this policy changes in a meaningful way we will update the date at the top and, for account holders, let you know in the app.