Cudex Privacy Policy

Last updated: 26 September 2026

Cudex ("the app", formerly Monster Steps) is a step-counter app for iPhone and Apple Watch. This policy describes what data the app uses, what leaves your device, and who can see it.

In short: if you do not use Friends, your step counts stay on your device. If you turn Friends on, the app sends your step counts and game progress to our server so the friends you add can see them.

Health data

The app reads step counts from Apple Health (HealthKit). It reads no other Health data, and it never writes to Health. It uses step counts to turn your walking into XP, to draw charts and widgets, and, if you use Friends, to show your friends how far you have walked today.

Step counts are never used for advertising or marketing, never sold, and never shared with third parties. They are never stored in iCloud.

You can revoke Health access at any time in Settings → Apps → Health → Data Access & Devices → Cudex.

Data stored on your device

The app stores your progress on your device. That includes your XP, level, monsters, badges, coins, outfits, step goal, and a record of each day you collected your steps. Some of it is kept in an App Group so the widgets can read it. Your Apple Watch receives a summary from your iPhone so its complications can show it.

Friends

Friends is optional. Nothing about you is sent to our server until you tap the button that creates your friend code. The app tells you what your friends will see before you tap it.

What we store when you join

• A random account ID created by the app and kept in your iPhone's Keychain. There is no sign-in, email or password.
• Your friend code and your username.
• Your step count for today, the day it belongs to, and your time zone. The time zone tells us when your day ends.
• Your game profile: your total steps collected, XP, level, streak, number of days walked, your monster, its outfit, your collection of monsters, and your badges.
• A log of each step count the app sends, with the date, your device identifier, your time zone and the app version. We use it to find and fix counts that look wrong.
• A device identifier (Apple's identifier for vendor), the app version, and your RevenueCat customer ID. The customer ID lets us match a support request about a subscription to your account.

The app sends today's step count when you open it. It also sends it in the background, about once an hour, when Apple Health tells the app new steps have been recorded. It never sends location data.

Who can see it

Only the people you are friends with. Two people become friends when one of them enters the other's friend code. Your friends see your username, today's steps, total steps, XP, level, streak, days walked, monster, outfit, collection and badges. They do not see your account ID, device identifier, time zone, step log or customer ID.

Your username is random until you change it. Anything you type as a username is visible to your friends, so do not use your full name or anything you would not want them to see.

Stopping and deleting

You can remove a friend at any time from their profile. Removing a friend stops both of you from seeing each other.

You can delete your Friends account in the app by tapping Stop sharing in the Friends screen. This immediately deletes your account, your friendships and your step log from our server. Your progress on your device is not affected. Copies may remain in our hosting provider's backups for a short time until those backups expire.

If you uninstall the app without tapping Stop sharing, your account stays on our server. Reinstalling on the same iPhone reconnects to it. To have it deleted without the app, email us at the address below.

Service providers

We use these companies to run the app. Each processes data only to provide its service to us.

• Vercel hosts our server, and Supabase hosts its database. They store the Friends data described above.
• RevenueCat checks your subscription status. Purchases themselves are made through Apple, and payment details are processed by Apple, not by us.
• PostHog receives anonymous usage events, described below.

Analytics

The app sends anonymous product-usage events to PostHog, for example which tabs you open, or that a claim happened. These events:

• are not linked to your name or Apple ID
• do not include step counts or exact XP amounts
• are not used for advertising or tracking across other apps
• carry an anonymous identifier so visits from the same phone can be counted together

The app does not use an advertising identifier (IDFA), does not track you across other companies' apps or websites, and does not record your screen.

Notifications

If you allow notifications, the app schedules up to three reminders a day to collect your steps. They are scheduled on your device and do not send data to a server.

Your rights

We only send your data to our server when you choose to join Friends, and you can withdraw that choice at any time by tapping Stop sharing. You can also ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by emailing the address below. Include your friend code so we can find your account. If you are in the UK or the EU, you can also complain to your data protection authority.

Children

The app is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has joined Friends, email us and we will delete the account.

Changes

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.

Contact

Questions about privacy, or requests about your data: office@thefor.xyz

← Cudex