StepGramPrivacy Policy
Last updated: October 23, 2026
This policy explains what information StepGram ("we", "us") collects when you use the StepGram app and website, why we collect it and the choices you have. StepGram is operated by Mah Noor (StepGram), Germany. Contact: almongez@stepgram.com.
1. Information we collect
- Account information: your name, username, profile photo, email address (when you sign in with Google or Apple), phone number (when you sign in with a phone number), gender, country, bio and profile link.
- Content you create: videos, photos, posts, stories, comments, likes, messages, live streams, gifts you send or receive and reports you submit.
- Device and technical data: a device identifier, push-notification token, app version, IP address and basic logs needed to run and secure the service.
- Diagnostics: crash reports and performance data (Firebase Crashlytics) to fix bugs.
- Purchases: if you buy coins, the purchase is processed by Apple or Google. We receive a transaction reference to credit your coins; we never receive your card details.
We do not collect your precise location. The country on your profile is chosen by you.
2. How we use information
- To create and run your account and show your content to other users.
- To deliver messages, live streams, notifications and gifts.
- To keep StepGram safe: automated and human moderation, handling reports and blocks, preventing fraud and abuse.
- To credit purchased coins and process creator withdrawals.
- To fix problems and improve the app.
We do not sell your personal information.
3. Service providers
We share data only with providers that help us run StepGram, under contracts that limit their use of it:
- DigitalOcean (server hosting, United Kingdom data centre)
- Google Firebase (sign-in, push notifications, crash reports)
- Apple (Sign in with Apple, push notifications, in-app purchases) and Google (Google sign-in, Google Play billing)
- ZEGOCLOUD (live streaming and real-time audio/video)
- Sightengine (automated moderation of images and videos)
- Resend (account emails such as password reset codes)
- Google AdMob (advertising, only if ads are enabled in the app)
We may also disclose information when required by law or to protect users and the public.
4. Public information
Your profile (name, username, photo, bio, link, country) and the videos, posts, stories and comments you publish are visible to other StepGram users. Users you block cannot see your profile or content.
5. Retention and deletion
We keep your information while your account is active. You can delete your account in the app under Settings → Delete account, or by following the steps on our account deletion page. When you delete your account, your profile and content are removed; limited records may be kept where the law requires (for example purchase records) or to prevent abuse.
6. Your rights
Depending on where you live (including under the EU/UK GDPR) you can ask to access, correct, export or delete your data, or object to certain processing. Write to almongez@stepgram.com. You can also complain to your local data protection authority.
7. Children
StepGram is not intended for children under 13 (or the minimum age in your country). We remove accounts we learn belong to children below that age.
8. Security
We use encryption in transit (HTTPS), access controls and backups to protect your data. No system is perfectly secure, so please use a strong password and keep your login private.
9. Changes
We may update this policy. We will change the "Last updated" date and, for important changes, notify you in the app.