Who we are
TrovaStep Lite (package ng.trovastep.lite) is a free app operated by GhostAxis in Nigeria. It shares an account and servers with TrovaStep. This notice covers TrovaStep Lite and its use of trovastep.ng. The TrovaStep privacy notice covers the main app.
Account and challenge data
We keep your username, the phone number or Google or Apple sign-in details associated with your account, and support messages you send us. We keep the free challenges you create or join, invitations, progress, results, streaks and badges. Lite has no paid entries, payment details, prize pots or payouts.
Device and usage data
We record an app install identifier, device model, operating system and app version, sign-in events, crash reports, and device-integrity results from Google Play Integrity or Apple App Attest. We use these to run, secure and improve Lite. Advertising data is described separately below.
Step and health data
With your permission, Lite reads step counts, timestamps and record sources from Health Connect, Apple Health or your phone's step counter. Up to 30 days of step history helps set a baseline goal. Lite does not read location, heart rate or weight. We use steps to score challenges, show progress and award badges. We never use step or health data for advertising or pass it to an ad provider.
You can remove step access in Health Connect or the Health app. Without it, you can browse but cannot take part in challenges.
How we use data
- To create your account and sign you in.
- To set goals, score challenge days, show standings, streaks and badges, and answer support requests.
- To show labelled ads and grant optional rewards after you choose to watch an ad.
- To detect abuse, check device integrity, fix errors and keep the service secure.
Advertising
Lite shows ads supplied by Google AdMob (Google Ireland Limited and Google LLC). AdMob may receive your advertising ID, IP address, device and app details, and information about your interaction with an ad. Google describes its use of this data in its advertising policies at policies.google.com/technologies/ads.
AdMob does not receive your step counts, health records, challenge results, streaks, badges, leaderboard position, username, phone number or email from us. We do not use health data to target ads.
Where required, Lite asks for consent before personalised ads. If you decline, ads may still appear without personalisation. You can reset or delete your advertising ID in your device settings. For questions about a consent choice, contact our privacy team. On iPhone, Lite asks before using Apple's advertising identifier.
Ads appear only as labelled “Sponsored” cards in Find and the Leaderboard, or as optional videos you choose to watch for a reward. They do not appear during sign-up, health permissions, challenge creation or joining, or on your live step count. Gambling ads are blocked.
Optional rewards
If you choose to watch a rewarded ad, Google sends our server a signed completion message with a transaction ID and your account ID. We store it to grant the selected reward and prevent duplicate claims. Rewards can change a streak display or unlock a style or view; they never change steps, challenge results, rank or another person's result.
Public leaderboard
If you opt in, other Lite users can see your username and weekly credited step total. Device-integrity checks help keep the board fair. You can leave the public board at any time. Members of a challenge can see your username, daily progress and result within that challenge.
Legal bases and consent
We process account and challenge data to provide the service you request; security data under our legitimate interest in keeping it fair and safe; and step and health data with your explicit consent. Where consent is required for personalised ads, you can withdraw it. Other advertising processing relies on our legitimate interest in funding a free app, subject to your rights.
Who receives data
We do not sell your personal data. Providers receive only what they need: Google AdMob for ads, sign-in and messaging providers for access codes, our hosting and database providers to run the service, Sentry for error reports, and Google or Apple for device checks and notifications. Lite does not send payment data to Paystack. We may disclose data where law requires it.
International transfers
Our servers are in London, United Kingdom. Some providers process data in the UK, EU or United States. We rely on applicable contractual and other safeguards for these transfers.
Retention
- Account, challenge and step data: until you delete your account, subject to the exceptions on the deletion page.
- Reward verification records, including ad transaction IDs, are kept to grant rewards and prevent duplicate claims. They remain in our database after account deletion. We do not currently have a fixed deletion period for these records.
- Fraud-review records: up to 180 days. Sign-in codes: 10 minutes. Crash reports: 90 days. Encrypted backups: up to 35 days.
Lite creates no payment or payout records. If you also use the main TrovaStep app, its payment records have a separate retention rule in that app's notice.
Security
We encrypt data in transit and at rest, limit access to the people who run the service, and check sessions and devices for abuse. No system is perfectly secure.
Your rights
You can ask to access, correct, move or delete your data, object to or restrict some processing, and withdraw consent. Email privacy@trovastep.ng. We may verify your identity before acting.
Account deletion
TrovaStep and TrovaStep Lite use one account. Deleting it in either app deletes it in both. See how to request deletion and what may be retained.
Children
TrovaStep Lite is for people aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18.
This website
trovastep.ng sets no cookies, runs no analytics and loads nothing from third parties. Our host may keep standard security logs for up to 30 days.
Changes
We update the effective date when this notice changes and tell you in the app before significant changes take effect.
Contact
Privacy questions: privacy@trovastep.ng. Read the Lite terms of use, or visit Support for other questions.