We do not sell your personal information or health data.
Information may be processed by:
- Supabase, which provides authentication, database, storage, and backend infrastructure;
- Google AdMob, which provides optional rewarded ads and related delivery, measurement, and fraud-prevention services;
- website and infrastructure providers, which process limited technical data needed to deliver and secure the service;
- contact-form delivery providers, which transmit website messages to our business email inbox; and
- authorities or other parties where disclosure is required by law, necessary to protect users or the service, or part of a corporate transaction subject to appropriate safeguards.
Service providers may use information only to perform services for us or as otherwise disclosed in their own privacy terms. We require providers handling Stepaw user data to apply protections consistent with this policy and applicable law. Health and fitness information is not shared with advertising networks.
Legal bases for processing
Where the GDPR, UK GDPR, or similar law applies, we rely on the following legal bases as appropriate:
- Consent for access to health data, notifications, and advertising technologies where consent is legally required;
- Performance of a contract to provide the IslamApp features you request;
- Legitimate interests in securing, maintaining, and improving the service, provided those interests do not override your rights; and
- Legal obligations where processing is required by law.
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.