Health Connect and the shared race
With your permission, the Android app reads recorded steps, distances and exercise sessions from Health Connect. Only eligible automatic or actively recorded movement after joining or recovering an account counts. Manual/unknown recording methods and unapproved writers are excluded. Built-in phone steps and verified approved fitness publishers are eligible. Overlapping records are handled conservatively and can differ from the total displayed by your fitness app.
The app sends daily activity totals and dates. For workouts averaging over 50 km/h, it also sends sport, start/end times, distance, active duration and a hashed workout reference for private review. Alerts go to our operator by email. Routes are never uploaded. A flag does not automatically change scores. Today and yesterday start at your local midnight. It never writes to Health Connect. Your country’s totals and mission results are shared with iPhone users.
Account and country
The server stores race account credential hashes, daily activity, country credits, badges, invitations and purchase records. It uses the connection’s IP address to look up a country in its locally stored GeoLite database. Individual lookups are not sent to MaxMind. VPNs, roaming and proxies can affect the country. Past contributions stay with their original country; new credits follow the country assigned at sync. Public results show country totals and explorer counts, not your Google email or personal activity history.
This product includes GeoLite data created by MaxMind, available from https://www.maxmind.com.
Google services
Google linking is required to open the live race and contribute activity, fuel or invitation rewards from Android, and supports recovery. A Google ID token is sent to the server for verification and may include email/profile claims. The race stores only the verified Google account identifier; it does not store your Google name or email. Google Play Integrity verifies the app/device through request-bound proofs and a hardware-attested installation signing key. The server verifies app identity, locked secure boot and Google certificate revocations, retaining the public key and certificate serials for this purpose. Google receives verification/sign-in requests under its privacy policy. Credential Manager and Google Identity handle the Google account selected for linking. Google Play Integrity processes app and device integrity information to prevent fraud.
Google Play handles fuel payments. We keep verified purchase records linked to your race account to add fuel, prevent duplicate credits and handle refunds. We do not receive your payment card details. Fuel is separate from recorded activity and is never written to Health Connect. Google purchase records remain governed by Google’s policies. Paid fuel is currently unavailable in the live race; the local sample journey provides free sample fuel without making a payment.
Optional Google Play Games sharing
If you connect and share Cosmo Steps in the app, your server-confirmed total activity contribution, purchased fuel steps, credited invite fuel steps and earned Games achievements are sent to Google and associated with your Play Games profile. Shared scores can appear in friends and global rankings. Google separately asks for friends access; the app never reads friends’ Health Connect records or your device contact list. Google Play Games retains your best shared total, so corrections and refunds can change the current race total without lowering that Games score. Stop sharing in the Cosmo Steps tab to prevent future uploads. Stopping sharing or deleting your race account does not delete Games scores or achievements already held by Google. Games sharing is independent of the required Google account link for the country race.
Optional camera AR
The AR viewer asks for Camera access only when you choose to start AR. Camera frames and surface tracking are used to place and display the destination on your device. The app does not save or upload frames, room measurements or world maps, and AR does not earn Health activity. Cloud anchors, geospatial tracking and recording are disabled. AR uses Google Play Services for AR (ARCore), provided by Google under its privacy policy. ARCore collects device/app diagnostics, service-usage information and identifiers, including a Google account identifier when signed in, to operate and improve AR. This collection is handled by Google. Cosmo Steps does not enable ARCore Cloud Anchors or the Geospatial API. On unsupported devices and emulators, the viewer uses an interactive 3D preview without requesting the camera.
Optional voice requests
If you choose Gemini or another system assistant to ask about Cosmo Steps, that assistant handles your voice and its own account data under its provider’s terms. Cosmo Steps does not request microphone permission, record your voice or upload audio. Information you deliberately provide to an assistant is handled by that service.
What stays on the phone
Your session credentials are encrypted with a device-bound Android Keystore key. Preferences, saved country progress, daily activity totals, badge receipts and pending invite information are stored locally so the app can resume your journey. Android backup is disabled. Recovery and deletion clear the previous account’s display caches and stop its Games sharing. Offline artwork and discoveries are bundled with the app.
Wear OS companion
If you use the watch companion, the paired phone sends a mission summary through Google Play services: country, mission, rank and progress, today’s local-day activity, total contribution and update status. The watch privately caches this summary for offline viewing, with backup disabled. It receives no recovery key, account token, raw workout or purchase token and submits no separate race credits. Changing or deleting the account clears the companion summary when the devices reconnect.
Your controls
Health Connect access is optional and read-only. Choose the activity types to share in Android Settings → Health Connect → App permissions → Cosmo Steps. Turning access off stops new reads of those types; it does not erase activity already synced to the race server. Previously contributed Cosmo Steps remain in country totals, including after account deletion.
Health activity is never sold or used for advertising.
Recovery and deletion
Save a private recovery key or use your linked Google account. Recovery disconnects the previous race session and starts a new recording cutoff. Anyone with your private recovery key can take over your session; do not send it by email.
Delete the account from Settings → Account & privacy → Account & recovery. Deletion removes the account, activity history and personal identity/contribution/badge links. Previously earned country totals and podiums remain without the account link. Earned rewards belonging to friends remain theirs. Deletion does not delete your Health Connect records, cancel/refund Google purchases or delete your Google account.
Invitations
Invitations work across Android and iOS. Creating or accepting one stores the code, expiry, account relationships and qualification state on the shared race server. Sharing includes the invitation code and instructions, without your activity history or private recovery key. The code includes your friend’s name, which is visible to anyone you share it with. Use a nickname rather than a full legal name. Expired invitations disappear from the app, but their named codes can remain in server history; hiding an invitation is not the same as deleting it.
To prevent repeat rewards, qualification retains keyed hashes of the verified sign-in identity and app-installation key for 180 days, including after account deletion. These markers contain no raw Google or Apple account ID, account link or activity records. Expired markers are removed during server requests.
Retention and security
Account-linked race records remain until account deletion. Anonymous country aggregates and historical results remain in the shared race. Purchase hashes and minimal country/amount records remain for fraud prevention and later refunds. Invitation identity/installation anti-abuse hashes remain for 180 days after eligible use, including after deletion. A domain-separated Google identity hash and expiry remain for 180 days after account deletion to prevent restarting another competitive journey with that identity; your Google email/name are not retained. Request-limit hashes and deletion receipts expire after 24 hours; expired records are removed on subsequent requests. Temporary app-verification challenges expire after two minutes and Google sign-in challenges after five minutes.
Race data is stored on our server and sent over encrypted connections. We keep app-installation verification records to help prevent misuse. Android installation proofs are shared with Google for verification. Raw IP addresses are omitted from API access logs. The race database is hosted on an OVHcloud VPS, and Cloudflare protects the public API. Those providers process connection and infrastructure data to deliver and secure the service. Provider-managed VPS backups use a rolling seven-day retention. Restricted operational backups used for release rollback may contain earlier account records and currently have no automatic expiry; they are not used for the live race. Deletion removes data from the active service. If a backup is restored, account deletion must be reapplied before restored data is used. Contact support about deletion of any retained backup copies. Brevo delivers automatic private workout-review alerts to our operator. These contain the race account ID, country, platform, sport, workout start, distance, duration, average speed and review case ID. Account deletion removes linked review records from the live database, but does not automatically delete delivered emails. Review cases currently have no automatic time-based deletion schedule. Email-provider and operator-mailbox retention are separate from database cleanup. Contact support to ask about access to or deletion of retained review information. Separately, if you choose to send a support email, your email app shares your sender address and any information you include.
Your privacy rights
Contact cs@lesyklele.com to request access, correction, export or deletion of your personal race data, or to raise a privacy concern. We verify ownership before disclosing or removing account data. You can withdraw optional Health Connect, camera or Games permissions through the app or Android/Google settings. Depending on where you live, you may also have rights to object to or restrict processing, and to complain to your local data-protection authority. Activity is used to provide the movement race with your permission; minimal security records protect the service against abuse.
Audience and updates
Cosmo Steps is intended for people aged 13 and older. We do not knowingly invite children under 13 to provide race data. Contact support if an account was created by a child below that age. We update this notice when the service’s data practices change.
Last updated: .