Privacy policy

StepRaise (stepraise.org) is a demonstration of fundraising pages with activity goals. We do not collect donations, process payments or transfer money. Cloudflare Workers and D1 host the service and database. We do not use tracker data for advertising, analytics, profiling or AI.

Information we keep

Fundraiser text and settings, a hash of the owner's private access key, simulated support (name, amount and message), reports and operational request logs. Text you publish and demo support messages are public. Do not include sensitive personal or medical information.

Strava

With your permission (activity:read), we read activity type, start time, distance, moving time, visibility and whether an entry is manual. We use only activities recorded after connection, within your fundraiser's dates and selected sports. Only Everyone activities can contribute to automatic public progress, and only after a separate public-display opt-in. We do not store activity titles, photos, maps, GPS tracks, heart rate or other medical information. Tokens are encrypted. Cached entries not refreshed for seven days are deleted.

Google Health

Google Health connects through the Google Health API using the googlehealth.activity_and_fitness.readonly permission. We use only exercise summaries: activity type, date, distance and active duration. Other health categories, GPS routes, heart rate and medical information are not stored. Access is currently restricted to approved test users. Google data is used only to provide your chosen activity-goal feature, never for advertising or resale.

StepRaise's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not send Google Health data to AI services, advertising networks or analytics providers.

Apple Health

StepRaise Sync is an experimental iPhone app. With your permission it reads workouts, walking and running distance, cycling distance, swimming distance and steps through HealthKit, without writing to Health. It sends only selected exercise summaries or one daily walking/running distance summary: type, start and end time, distance, duration, source application bundle ID, record UUID and manual-entry flag. Heart rate, sleep, routes and medical data are not requested. Raw step samples are not uploaded.

HealthKit data is used only for your chosen fundraiser progress. It is not used for advertising, analytics or AI, sold, or shared with third parties; Cloudflare processes the limited data to host this service. Public progress is off by default and requires separate consent. Disconnect in StepRaise Sync or the dashboard to immediately delete the device-token hash and local Apple Health entries and published totals. You may also revoke access in Health or delete the fundraiser. The dashboard or app confirms deletion. Pairing codes expire in ten minutes; device tokens are stored only as hashes on the server.

Garmin

Garmin integration is awaiting developer approval; no Garmin data is collected until access is granted. The planned Activity API integration will use only activity type, start time, distance and duration. We will not collect GPS tracks, maps, photos, heart rate or other medical data.

Public progress and sharing

Visitors see the fundraiser's text, separately published activity totals with source attribution, and simulated support. Tracker progress is private by default. You can opt in by selecting “Show my progress on the public page” and change this choice in your private dashboard. Individual workouts and provider profiles are not published. In participant-reported mode, a separate statement you publish may remain after disconnecting a tracker.

Disconnect, revoke and delete

Use your private management link to hide progress, disconnect a source and immediately delete its local tokens and activity data, or delete the entire fundraiser together with its activities and simulated support. The dashboard confirms deletion. You can also revoke access through Strava → My Apps or your Google Account's third-party permissions. A Strava deauthorization notification removes that source's local data. Invalid or revoked Google tokens are removed when detected during synchronization.

Disconnecting a source does not remove your fundraiser, manual entries, separate participant-reported statements or demo support. You can delete the entire fundraiser to remove those. The private link is your only management credential: we cannot recover it if lost. Keep it confidential.

Retention, processors and requests

Provider data is erased no later than 30 days after the fundraiser ends; seven-day cache limits still apply to provider activity entries. Manual entries, public statements and demo support remain until the fundraiser is deleted. Operational logs contain request metadata, not tokens or workout content, and are deleted after 30 days. Cloudflare is the hosting and storage processor; Cloudflare Turnstile protects creation and simulated support from automated abuse.

To request deletion, use the private dashboard's deletion controls. To flag public content or raise a privacy concern with the operator, use “Report this page” on the relevant fundraiser. An operator can hide or delete reported content. No provider data is sold or shared with third parties except the hosting processor needed to operate the service.