CashStep Privacy Policy

This policy applies to the step-counter rewards app CashStep (package com.rewardfactory.cashstep, the "Service"). Effective: 2026-09-24

1. Information we collect

You can use the Service without creating an account. We collect and use the following.

Type	Data
Physical activity (collected automatically)	Your step count as measured by your device's built-in step sensor (today's running total). Under Google Play's Data safety categories this is Health and fitness → Physical activity (Activity).
Collected automatically	Install identifier (an anonymous UUID generated on install), advertising identifier (AAID), device information (OS version, model), usage records (steps credited, coins opened, ads viewed, invites)
Collected automatically	Device language setting and time zone
Optional (when you sign in)	Kakao account identifier, or Google account identifier, email and display name — only for the sign-in method you choose
When you request a payout	Only what is needed to pay you. Outside Korea: your PayPal account email, or the mobile phone number to top up with airtime. Korea: account holder name, bank and account number

We do not collect national identification numbers or similar government identifiers.

2. About your step data (physical activity)

Everything you earn in the Service comes from your step count, so we explain this data separately.

What we read — the step count from the step sensor built into your device (Android permission ACTIVITY_RECOGNITION, shown as "Physical activity"). Steps are counted on your device.
What we send to our server — one number: your running step total for today (Korea Standard Time). We send it so the server can work out how many coins you have earned today. We do not collect your routes, your speed, or the type of activity (walking, running, in a vehicle and so on).
We do not collect location — the Service does not request location permission (ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION) and cannot tell where you walked, by GPS or by cell towers.
We do not collect Wi-Fi or network information — we never look at the name (SSID) or identifier (BSSID) of the network you are on, and we never inspect network traffic, browsing history or message contents.
This is not a medical or health diagnosis service — your step count is used only to calculate rewards. It is never used to diagnose a condition or to make any medical judgement.
We do not share it — your step count is not provided to any third party, including our advertising and analytics partners.
On iPhone (iOS) — we use Apple's "Motion & Fitness" permission (CoreMotion) to read today's step count that your iPhone has already recorded, when you open the app. We do not access the Health app (HealthKit), and the iOS app uses no ongoing notification or background service. You can turn it off in iPhone Settings > Privacy & Security > Motion & Fitness.
You can withdraw the permission at any time — (Android) Settings > Apps > CashStep > Permissions > Physical activity. Turning it off only stops you earning; nothing else in the app is affected.

3. About the ongoing notification (foreground service) — Android

This section applies to the Android app only. The iPhone (iOS) app does not show an ongoing notification.

So that your steps keep counting when the app is closed, the Service runs a foreground service for step counting. Android requires a notification to stay visible the whole time that service is running.

The notification is there to tell you that your steps are being counted. If you turn it off, background step counting stops too.
That service collects nothing beyond your step count.

4. About device language and time zone

The Service uses your device language and time zone to determine which payout methods are available to you and which exchange rate applies.

This is decided once, when your account is first created, and does not change afterwards even if you change your device settings. This prevents abuse of the differences between country payout rates.
The Service does not request location permission and does not determine your actual location. It reads only the settings on your device.

5. How we use your information

Calculating rewards from your step count and managing your balance (the server balance is authoritative)
Serving ads, paying rewards, and verifying reward completion (SSV)
Preventing abuse and keeping reward accounting correct
Processing payouts and gift voucher exchanges, and determining eligible payout regions and rates
Sending notices and reward-related notifications

6. How long we keep it

We keep your information until its purpose is fulfilled or until you ask us to delete it, except where law requires longer retention. When you delete the app or request deletion, we destroy the related identifiers and usage records without undue delay. There is one exception, described below.

Exception for abuse prevention — To stop people from deleting an account and signing up again to claim invite rewards repeatedly, when you delete your account we convert your sign-in identifier into a one-way value that cannot be reversed and keep only that value. It cannot be used to identify you again, or to restore your account or your records, and it is used only to check whether an invite reward has already been paid for that identity. It is created only for accounts that received an invite reward; for everyone else, nothing is kept.

7. Sharing and processors

To provide rewards and ads we share the minimum necessary information (such as advertising and event identifiers) with the following. Your step count (physical activity) is not shared with any of them.

Processor	Purpose
Google AdMob (Google LLC)	Rewarded, interstitial, native, banner and app-open ads, and reward verification (SSV)
Google Firebase (Google LLC)	Notifications, usage analytics, crash diagnostics
Google LLC	Google Sign-In, if you choose it
Kakao	Kakao Login, if you choose it
PayPal · Reloadly	Paying out cash and mobile airtime to users outside Korea
Offerwall partners	Offerwall missions and the rewards they pay, where that feature is available and you use it

We otherwise do not provide your information to third parties without your consent, except where required by law.

8. Advertising identifier

We use the advertising identifier (AAID) to serve ads. You can reset it or opt out of personalised ads in your device settings.

Android: Settings > Google > Ads > Reset/Delete advertising ID

9. Your rights and deleting your data

You may ask to see, correct, or delete your information. You can delete your account yourself in the app under Settings → Delete account. See Account deletion for details.

10. Children

The Service is not directed at children under 14, and we do not knowingly collect their information.

11. Contact

Email: cashstep.company@gmail.com

12. Changes to this policy

This policy is effective from 2026-09-24. We will announce changes in the app or on this page.

한국어로 보기