StepLock: Walk to Unlock

by M3 Strategies Limited

Privacy Policy for StepLock

Last updated: 12 June 2026

1. Introduction

This Privacy Policy explains how M3 Strategies Limited (“StepLock”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use the StepLock mobile application (the “App”).

StepLock is designed to help users reduce distractions and build healthier habits. The App allows you to select distracting apps to block, choose a daily step goal, unlock breaks or access to selected apps when you reach step milestones, and view your activity progress over time. You may also add friends and view the step progress they choose to share with you.

We aim to collect only the limited information required to provide these features.

For the purposes of applicable data-protection laws, the data controller is:

M3 Strategies Limited
Unit 82a James Carter Road
Mildenhall
Bury St. Edmunds
England
IP28 7DE
United Kingdom

Privacy contact email: admin@m3strategies.co.uk

2. Information We Collect

2.1 Account and Registration Information

When you create an account, we collect or process the information needed to register and authenticate you, including:

The name or display name that you enter during registration;
An account identifier;
Your login identifier, such as your email address, where email-based registration or login is used;
Authentication records and session information needed to keep your account secure and allow you to sign in.

Authentication is provided through Supabase Auth. If password-based login is enabled, passwords are handled through Supabase Auth and are not stored in readable form in our application database.

2.2 Step and Activity Information

With your permission, the App processes limited activity information needed to provide StepLock’s core functionality, including:

Your daily step count;
The date associated with each daily step count;
Estimated calories burned for the day, where this feature is enabled;
Your progress towards your daily step goal;
Milestone status, such as whether you have reached a step threshold that unlocks a short break or restores access to selected apps;
Historical activity records used to generate charts and progress insights for you.

StepLock is not a medical service. Any calorie figures, progress information, or similar estimates displayed by the App are for general wellness and informational purposes only.

2.3 Health and Fitness Permissions

Depending on your device and the version of the App, StepLock may request permission to access step-related information through Apple HealthKit.

The App only requests access to the limited information needed to operate its step-based features. We do not use your health or fitness information for advertising, marketing, or unrelated profiling.

You can withdraw access through your device settings. If you withdraw permission, some or all of StepLock’s step-based unlocking, milestone, graph, and progress features may no longer work correctly.

2.4 Friend and Progress-Sharing Information

StepLock allows you to add friends and track progress together. To provide this feature, we process:

Friend requests;
Accepted friend connections;
Your display name;
The limited step and progress information displayed in the friends section of the App.

When you connect with another user as a friend, that user may be able to view:

Your display name;
Your step count for the relevant day;
Your progress towards your daily goal;
Your milestone progress or status, where displayed in the App.

Your estimated calories burned are not shared with friends unless the App clearly tells you otherwise before sharing them.

Your information is not made publicly available merely because you use the App. Friend progress is shared only through StepLock’s friend functionality.

You should only add or accept users as friends if you are comfortable sharing the progress information shown in the friend area of the App. You may remove a friend to stop future sharing with that person.

2.5 App-Blocking Settings

StepLock allows you to select apps that you consider distracting and apply blocking rules or unlock conditions.

Your selected blocked-app settings are used to provide the requested functionality on your device. We do not upload or store a list of your selected distracting apps in our backend database.

We do not collect a list of all apps installed on your device.

2.6 Limited Technical Information

When the App communicates with our backend, our service providers may process limited technical information needed to operate, secure, troubleshoot, and protect the service. This may include information such as:

Internet Protocol address;
Request timestamps;
Basic network-request information;
Authentication events;
Error information;
Security-related logs.

We do not use this information to create advertising profiles.

3. Information We Do Not Collect

StepLock does not collect or store:

Your precise or approximate location;
Your contacts or address book;
Your photos, videos, or camera content;
Your messages;
Your payment-card details;
Your advertising identifier for behavioural advertising;
A list of all apps installed on your device;
Unrelated medical records or health information;
Health or fitness information for advertising, marketing, or data-broker purposes.

If we introduce a new feature that requires additional information, we will update this Privacy Policy and provide any required notice or consent request before collecting that information.

4. How We Use Information

We use information only where needed to provide, secure, and maintain StepLock. This includes using information to:

Create and manage your account;
Authenticate you when you log in;
Calculate your daily step progress;
Determine whether you have reached your chosen goals and milestones;
Unlock selected apps or breaks when the relevant milestone is reached;
Display your personal activity history and analytical graphs;
Provide friend requests and friend-progress features;
Respond to support and privacy requests;
Detect, prevent, and investigate security issues or misuse;
Comply with legal obligations;
Improve the reliability and functionality of the App without using health or fitness information for advertising or unrelated profiling.

We do not sell your personal information.

We do not use your step counts, calories burned, health information, or fitness information for advertising, marketing, or use-based data mining.

5. Legal Bases for Processing

Where the UK General Data Protection Regulation or similar laws apply, we rely on the following legal bases:

5.1 Performance of a Contract

We process your account information and the limited information required to provide StepLock’s requested features because this is necessary to provide the service you choose to use.

5.2 Consent and Explicit Consent

We rely on your consent to request access to device health or fitness information.

To the extent that step counts, calorie estimates, or related information are treated as health data or another form of special-category personal data under applicable law, we rely on your explicit consent to process that information for StepLock’s step-tracking, milestone, unlock, and graph features.

We also rely on your choice to add or accept friends before sharing your limited progress information with those users.

You may withdraw consent through your device settings, by removing a friend, by deleting your account, or by contacting us.

Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.

5.3 Legitimate Interests

We may process limited technical and security information where necessary for our legitimate interests in:

Protecting accounts;
Preventing misuse;
Maintaining the reliability of the App;
Responding to technical issues;
Establishing, exercising, or defending legal claims.

We do not rely on legitimate interests to use your health or fitness information for advertising or marketing.

5.4 Legal Obligations

We may process or retain limited information where necessary to comply with applicable laws, regulations, court orders, or valid requests from public authorities.

6. Automated App Locking and Unlocking

StepLock uses rules chosen by you to lock or unlock selected apps or breaks based on your step progress.

For example, the App may determine that you reached a configured step milestone and then allow a break or restore access to a selected app.

This is a user-requested, rules-based feature. It is not used to make decisions that produce legal effects or similarly significant effects about you.

7. When We Share Information

We share information only in the limited circumstances described below.

7.1 With Friends You Choose to Add

When you connect with another StepLock user, we share the limited profile and step-progress information described in Section 2.4.

7.2 With Supabase

We use Supabase to provide backend infrastructure, database functionality, and authentication services.

Supabase processes limited information on our behalf to provide these services. This may include:

Account identifiers;
Login identifiers, such as an email address where applicable;
Authentication records;
Your display name;
Daily step records;
Estimated calorie records, where enabled;
Friend-connection records;
Progress-related information stored or generated for the App.

We require service providers that process information for us to apply appropriate protections and use information only as permitted by their agreements with us and applicable law.

7.3 For Legal Reasons

We may disclose information where reasonably necessary to:

Comply with a legal obligation;
Respond to a valid court order or lawful government request;
Protect the rights, safety, or property of our users, the public, or M3 Strategies Limited;
Investigate misuse, fraud, or security incidents;
Establish, exercise, or defend legal claims.

7.4 Business Transfers

If M3 Strategies Limited is involved in a merger, acquisition, restructuring, financing, insolvency process, or sale of assets, information may be transferred as part of that transaction.

Where required, we will notify users before personal information becomes subject to a materially different privacy policy.

8. International Data Transfers

M3 Strategies Limited is based in the United Kingdom.

Our service providers may process information in other countries. These countries may have data-protection laws that differ from those in your country.

Where required by applicable law, we use appropriate safeguards for international transfers, such as adequacy regulations, contractual protections, or other lawful transfer mechanisms.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

Your account information is retained while your account remains active;
Your display name is retained while your account remains active;
Daily step counts and estimated calorie records are retained while your account remains active so that StepLock can provide historical graphs and progress information;
Friend requests and friend relationships are retained until they are removed, rejected, or your account is deleted;
Security and technical logs may be retained for a limited period where necessary to operate, troubleshoot, or protect the App;
Information that must be retained for legal compliance or legal claims may be retained for the period required by law.

When you delete your account, we delete or anonymise the personal information associated with your account unless we are legally required to retain particular information.

Residual copies may remain temporarily in routine backup systems until those backups are securely overwritten or expire through the ordinary backup cycle. Backup copies are not used for ordinary business purposes.

10. Account Deletion

You may initiate deletion of your StepLock account from the account settings section of the App.

Deleting your account removes your StepLock account and the personal information associated with it, subject to the limited legal and backup exceptions described in this Privacy Policy.

Account deletion also removes your profile and future progress visibility from the friend feature.

You may also contact us at admin@m3strategies.co.uk if you need assistance with an account-deletion request.

11. Your Privacy Rights

Depending on where you live, you may have the right to:

Request access to the personal information we hold about you;
Request correction of inaccurate information;
Request deletion of your information;
Ask us to restrict certain processing;
Object to certain processing;
Request a portable copy of information you provided to us where applicable;
Withdraw consent at any time where processing is based on consent;
Lodge a complaint with a data-protection authority.

If you are based in the United Kingdom, you may lodge a complaint with the Information Commissioner’s Office.

To exercise your rights, contact us at admin@m3strategies.co.uk.

We may need to take reasonable steps to verify your identity before responding to a request.

12. United States Privacy Disclosures

Where applicable United States state privacy laws apply:

We do not sell personal information;
We do not share personal information for cross-context behavioural advertising;
We do not use health or fitness information for targeted advertising;
We use sensitive information only where reasonably necessary to provide the StepLock features you request, secure the App, and comply with applicable law.

You may contact us at admin@m3strategies.co.uk to exercise any applicable privacy rights.

13. Children’s Privacy

StepLock is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that a child under 13 has created an account or provided personal information, contact us at admin@m3strategies.co.uk.

If we become aware that we have collected personal information from a child under 13 without an appropriate legal basis, we will take reasonable steps to delete it.

Additional protections may apply where local laws impose a higher age threshold or require parental consent.

14. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information.

These safeguards include restricting access to personal information and using backend and authentication controls appropriate to the information processed.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

15. Third-Party Platforms and Services

Your use of StepLock may involve operating-system services and third-party infrastructure providers, including:

Apple device permissions and health or fitness frameworks, where enabled;
Device-level app restriction or screen-time functionality;
Supabase backend and authentication services.

These services may process information under their own terms and privacy notices where they act independently of us.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date at the top of the policy. Where required, we will provide additional notice in the App or request new consent before using information for a materially different purpose.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

For questions, privacy requests, or account-deletion assistance, contact:

M3 Strategies Limited
Unit 82a James Carter Road
Mildenhall
Bury St. Edmunds
England
IP28 7DE
United Kingdom

Email: admin@m3strategies.co.uk