Privacy Policy

Introduction

Welcome to Stride Quest, operated by Stride Quest LLC ("Stride Quest," "we," or "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our fitness tracking and rewards application.

Information We Collect

We collect the following types of information:

• Account Information: Email address and profile information when you sign up
• Date of Birth: Collected at signup and used only to confirm you meet our minimum age requirement to use the app.
• Fitness Data: Step count, measured using the motion sensor built into your device
• Activity Data: Step-sync session IDs, timestamps, and step activity patterns for security verification
• Usage Data: Token balance, milestone achievements, and redemption history
• Token History: A record, kept since October 14, 2026, of each change to your token balance: what earned or spent the tokens (such as a step collection, a spin, a redemption, or a partner offer), how many tokens, and when, with small details such as the gift card or offer name. That record is linked to your account, and the token history you can see in the app (version 1.0.2 and later) is drawn from it.
• Partner Offers: When partner offers are available and you first open an offer wall in the app's Earn tab (once offers are open for your account), we create a random offer ID for your account and give it to our offer partner instead of your account details; we may also include your device's iOS version. If you have already allowed tracking (see "Advertising" below), we may also give the partner your device's advertising identifier, depending on the partner (some partners do not accept one). If you have not allowed tracking, we never give it, and the app never asks for tracking permission in order to show offers. When the partner reports that you completed an offer, or that it rejected or reversed one, it sends us the transaction ID (and, for a reversal, the original transaction's ID), the offer, its name and the offer event, and the amount it paid (for some partners, also the amount in the partner's own currency), and we keep that report linked to your account. We do not store your IP address, advertising identifier, or other device details from these reports.
• Device Time Zone: Your device's time zone setting, which we store with your account and use to compute your local day for streaks and daily limits, and to decide which optional bonuses, such as doubling a spin's tokens, are offered in your region. We read it from your device's settings, not from GPS or any location service.
• App Integrity Key: On iOS, a device-bound app-integrity key (Apple App Attest) that the app registers with our server and that we use to detect and prevent fraud. We keep details such as the key's public part, an identifier for it, a use counter, and Apple's attestation receipt, linked to your account, and use them only to prevent fraud: to confirm that requests come from a genuine copy of the app, and that a key registered to one account is not used by another. Apple's attestation receipt can also be used to ask Apple for a fraud-risk assessment of the device.
• Sign in with Apple: If you sign in with Apple, we may keep a token Apple issues for your sign-in, stored encrypted and linked to your account. We use it only to revoke Stride Quest's access to your Apple ID when you delete your account, and it is deleted with your account.
• Advertising Identifiers and In-App Activity: Your device's advertising identifier and your in-app activity, including how you interact with ads, collected by Google's AdMob SDK and linked to you. Google uses this to deliver and measure ads, and Google's own privacy disclosure also lists analytics as a purpose. Separately, when you finish a rewarded ad, Google sends our server a signed confirmation. To make that confirmation possible, the app gives Google your Stride Quest account number and, when the app holds one, a one-time code with each rewarded ad you watch while signed in, and Google returns them to us in that confirmation. We store a record of that ad, such as an id for the ad view, the ad unit and network, the reward, and the time. Once you use the reward, we also record which kind of spin you spent it on. That record is linked to your account. We keep that record so we can confirm the ad was really watched before we pay out, and we do not keep these records long: each time a new one is written, we delete any that are more than 30 days old. Stride Quest does not run an analytics service of its own, and does not track which screens you view or how you move around the app. What we do keep are functional records such as your steps, tokens, milestones, redemptions, the rewarded-ad record above, and the error reports below. Your advertising identifier, the ads you are shown, and the in-app ad activity AdMob collects are all handled separately from your step data, and are subject to the tracking and consent choices described under "Advertising" below. Those choices do not apply to the reward record above: we keep it to confirm a reward before we pay it, and we do not use it to target ads.
• Approximate Location and Diagnostics: Your device's approximate location, performance data, and other diagnostics, collected by Google's AdMob SDK for advertising and analytics. The same SDK also collects crash logs, which it uses only for analytics. Your approximate location is estimated from your IP address, not from GPS or precise location data, and Stride Quest does not request or use any location permission.
• Error Diagnostics: When something goes wrong on our servers, we record the error and the route it happened on so we can fix it. Headers, cookies, request bodies, query strings and your IP address are removed before the report is stored, email addresses are filtered out, and the reports are not meant to carry your name. Some carry an internal reference, such as a redemption number or a one-way code made from an email address, that lets us match a report to an account when we investigate it.

How We Use Your Information

We use your information to:

• Track your fitness progress and award tokens for achievements
• Record step data from your device's motion sensor to verify milestones and detect fraudulent activity
• Process reward redemptions for gift cards and charitable donations
• Credit tokens for partner offers you complete, and remove them if the partner reverses an offer
• Show you the history of your token balance
• Decide, from your device's time zone setting, which optional bonuses are offered in your region
• Improve our services and user experience
• Send you important updates about your account

How We Measure Your Steps

Stride Quest counts your steps using the motion sensor built into your phone. No account with a separate fitness app or wearable is required, and we do not read your step data from any third-party fitness service.

We do not sell or share your fitness data with third parties.

Rewards and Redemptions

When you redeem tokens for a gift card or charitable donation, we use Tremendous, a third-party rewards provider, to deliver your reward. To fulfill a redemption we share the reward amount, which reward it is for (the gift card or charity you chose, or the category it belongs to), and the name and email address on your account with Tremendous so they can send your reward by email. Tremendous handles this information under its own privacy policy.

We do not collect or store your credit card, bank account, or other payment information, and the app does not offer in-app purchases. Tokens are earned through activity, never bought.

We do keep a record of each redemption you make, such as the reward type, how many tokens it cost, the dollar value, the order reference from Tremendous, and the date. That record is linked to your account, and the redemption history you can see in your profile is drawn from it. Our App Store privacy label lists this record under "Purchase History," because it is a record of the rewards you redeemed with your tokens. It does not mean you paid us money.

Partner offers. When partner offers are available, the app's Earn tab shows offers from a third-party offer partner, such as trying a game or another app. The offer pages are run by the partner, and the partner collects information through them (such as your IP address and details about your device and browser) under its own privacy policy. We never give the partner your name, email address, step counts, or any other health data. We keep a record of each offer reward and each reversal, as described under "Information We Collect" above.

Advertising

The Stride Quest mobile app shows ads through Google AdMob, including optional rewarded video ads (watching one unlocks a wheel spin or doubles a spin's tokens) and banner ads shown on some screens. AdMob is a Google service, and Google may collect and use device information to deliver and measure these ads, as described in Google's Privacy Policy.

The app shows live ads from Google AdMob. Whether it requests live ads or Google's demo ads (which are not personalized) is decided by our servers and can change. Either way, the app asks for your advertising choices the first time you open it, as described below.

Users in regions where consent is required (the EEA and UK, per Google's requirements) are shown Google's User Messaging Platform (UMP) consent form before personalized ads are served, and an "Ad Preferences" control appears on the mobile app's Profile screen for those users so they can change that choice at any time.

Outside the EEA and UK, iOS asks you for tracking permission the first time you open the app (the "App Tracking Transparency" prompt). If you allow tracking, ads may be personalized using your device's advertising identifier. If you choose "Ask App Not to Track," iOS withholds that identifier from Google's ads SDK and ads are not personalized using it; Google may still use other information its SDK collects, such as your approximate location and your in-app ad activity, to choose and measure the ads you see, as described in Google's Privacy Policy. You can change this choice later in iOS Settings > Privacy & Security > Tracking.

In the app (version 1.0.2 and later), Profile > Personalized ads is a choice we record on your account. While it is off, the app asks Google for non-personalized ads only, and it does not give your advertising identifier to offer partners. You can also turn it off by emailing us at jordan@stridequest.tech; we record the choice on your account, and it takes effect in app version 1.0.2 and later.

Your advertising identifiers and consent choice are handled entirely separately from your step and health data, which are never used to personalize ads (see "How We Measure Your Steps" above).

Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and regular security audits. Your health data is stored securely and accessed only when necessary to provide our services.

Data Retention

We retain your account data for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us or using the account deletion feature in your profile settings ("Account Deletion Data" below describes the limited records and copies that remain after deletion).

Raw step-count readings used to verify daily milestones are retained only briefly (currently up to 48 hours) and then automatically deleted; your cumulative token balance, token history, milestone achievements, redemption history, and partner-offer records are retained as described above and are not affected by this shorter-term deletion.

Account Deletion Data

When you delete your account, we delete your personal data from our database at once, including your profile, step history, token balance, token history, milestone achievements, and partner-offer records, apart from the limited redemption record described below. Deleting your account does not clear our server logs or error reports, which can still contain your account number or an internal reference to it, and it does not delete what we sent Tremendous to deliver your past rewards, which Tremendous handles under its own privacy policy. If an offer partner sends a report about your account after it is deleted, we keep that report (it still carries the random offer ID), but it is no longer linked to any account.

We keep a limited record of your reward redemptions (such as the reward type, dollar value, order reference, and date) for 30 days after deletion, after which it is permanently deleted. We retain this short-lived record only to reconcile payouts with our rewards fulfillment provider, investigate fraud or payment disputes, and meet financial record-keeping obligations. It is not linked to any active account and is not used for any other purpose, and we do not retain the redeemed gift-card codes themselves.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Request an export of your data

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights over your personal information.

Categories of personal information we collect include: identifiers (such as your email address, name, your Stride Quest account number, the identifier Apple or Google gives us if you sign in with one of them, device advertising identifiers, the random offer ID we create for partner offers, and the identifier of your device's app-integrity key); characteristics such as your age (your date of birth); commercial information (your redemption history); internet or other electronic network activity (such as in-app usage data); approximate geolocation (estimated by Google's AdMob SDK from your IP address, never from GPS; your device's time zone setting, which we store to compute your local day and to decide which optional bonuses are offered in your region, may also count as approximate geolocation); diagnostic information (crash logs, performance data, and other diagnostics); and health or fitness information (your device's step count). We collect this information for the purposes described elsewhere in this policy.

We do not sell your personal information for money. When the app serves ads through Google AdMob, the advertising identifiers, in-app ad activity, and approximate location estimated from your IP address that Google's SDK collects may be considered "sharing" for cross-context behavioral advertising under California law. Declining tracking when the app asks (the iOS "App Tracking Transparency" prompt) withholds your device's advertising identifier from Google's ads SDK, so ads are not personalized using it. On its own, declining tracking does not stop other information Google's SDK collects, such as your in-app ad activity and your approximate location, from reaching Google when an ad is requested. Where shown, the in-app "Ad Preferences" control on the Profile screen lets you review and change your advertising choices. These options are described step-by-step on our Your Privacy Choices page. Where Global Privacy Control applies, we treat a GPC-enabled browser as a valid opt-out request; the website itself does not sell or share personal information.

If you use partner offers after allowing tracking, an advertising identifier we give the offer partner may also be considered "sharing" under California law. Declining tracking, turning off Personalized ads (app version 1.0.2 and later), or not using partner offers, prevents it.

As a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request access to or deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the "sale" or "sharing" of your personal information
• Not receive discriminatory treatment for exercising these rights

To ask us to stop sharing, turn off Personalized ads in the app (Profile > Personalized ads, app version 1.0.2 and later), or email us and we will record the opt-out on your account. App version 1.0.2 and later then asks Google for non-personalized ads only and does not give your advertising identifier to offer partners; earlier app versions do not read this choice, so update the app for it to take effect. On any version, declining tracking withholds your device's advertising identifier, as described above.

We do not knowingly sell or share the personal information of consumers under 16 years of age. To exercise any of these rights, contact us at jordan@stridequest.tech.

California Minors' Privacy Provision and Our Age-18+ Policy

The California privacy rights above include a standard disclosure that we do not knowingly sell or share the personal information of consumers under 16 years of age. As explained under "Children's Privacy" below, new accounts must be 18 or older as of August 14, 2026, and we ask for your date of birth at signup to confirm you meet that minimum age requirement. A small number of accounts created before July 24, 2026 remain eligible under our prior minimum age of 13; we are not aware of any account holder under 16. We include the under-16 disclosure for CCPA/CPRA completeness, consistent with our age-eligibility policy.

Consumer Health Data (Washington, Nevada, Connecticut, and Similar State Laws)

Step counts and similar physical-activity measurements linked to your account are "consumer health data" under some state laws, including Washington's My Health My Data Act, Nevada's consumer health data law, and Connecticut's data privacy law. We ask for your consent in the app before we start collecting step data, and you can withdraw it at any time from Profile > Step Data Consent. We then stop collecting going forward. We maintain a separate Consumer Health Data Privacy Policy describing exactly what health-related data we collect (step counts only, including the record of each step collection in your token history), why (to run the rewards program you requested and to keep it fair), who processes it (our hosting and database providers only, never advertisers, and never sold), how long we keep it (raw readings about 48 hours; milestone records and step collections while your account is active), and how to access, delete, or withdraw consent for it. That policy applies to all users, not only residents of those states.

Children's Privacy

Stride Quest is intended only for adults 18 and older, and our service is not directed to minors. We ask for your date of birth at signup to confirm you meet our minimum age requirement. Consistent with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at jordan@stridequest.tech and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date below.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: jordan@stridequest.tech

Mailing Address and Additional Contact Information

Stride Quest is operated by Stride Quest LLC, a Delaware limited liability company. At this time, we designate the email address above (jordan@stridequest.tech) as our primary, actively monitored point of contact for all privacy inquiries, data rights requests, and support communications. This satisfies Apple App Review's requirement of a working, monitored contact channel for privacy matters, and is consistent with our current CCPA/CPRA disclosure obligations (a mailing address is not independently required for a service at our current scale).

We intend to publish a mailing address on this page once our registered business address is finalized. Until then, the email address above remains the fastest and most reliable way to reach us, and we will respond to privacy-related requests sent there within a reasonable time.