Last updated 15 October 2026
Lockstep is a step-count competition between people who already know each other. It needs your step counts to do that, and almost nothing else. This page says exactly what it holds, who else ever sees it, and how to make it go away.
Step counts, and only step counts. Lockstep asks Apple Health for permission to read your daily step total. It requests no other Health type, and it requests no permission to write at all — the list of things it asks to share is empty, so it cannot add, change or remove anything in Health.
What leaves your phone is a number per day: a date and a step total. Not routes, not locations, not workouts, not heart rate, not the time of day you walked. The 90-day history is read once when you first connect Health, so the competitions you join can show something other than an empty chart.
You can revoke this at any time in iOS Settings → Privacy & Security → Health → Lockstep. Lockstep keeps working; it stops receiving new totals, and you can enter days manually instead.
Lockstep uses Sign in with Apple and has no password of its own. Apple gives it a stable identifier for you. Lockstep asks Apple for your name and nothing else - not your email address - so it holds no email for you and never sends you one.
A display name, a permanent username, an optional profile photo, an optional daily goal, your time zone, and a short note that disappears after 24 hours. Steps you enter manually are stored the same way steps from Health are, and are marked as manual so everybody in a competition can see which is which.
No location, no contacts, no calendar, no photo library beyond the single image you pick for your profile, no advertising identifier, no device fingerprint, and no behavioral analytics of any kind.
People you compete with. That is the point of the app. Everyone in a competition you have joined can see your display name, your username, your profile photo, your daily and total steps for that competition's date range, whether a day was entered manually, and any note you attached to a day. Your friends can see your profile and your notes.
Nobody outside that. Lockstep has no public profiles, no feed, and no directory. Somebody who is neither your friend nor in a competition with you can find your username by searching for it — that is how people add each other — and sees your display name and photo, which is what a request has to show to be answerable at all. Blocking somebody removes you from their search results and them from yours, in both directions.
Three service providers, all as processors:
us-east-1). They do not use the data for anything of their own.There is nobody else. No advertising network, no analytics vendor, no data broker, no AI training.
Daily totals are kept while your account exists, because a finished competition has to stay finished — a leaderboard from March is a record, not a cache. Finished competitions keep a stored result permanently for the same reason.
In the app: Profile → Settings → Delete account. Your profile, your step data, your notes and your photo are removed. Where you appeared in a competition somebody else is still running, a placeholder stays in the standings so their history does not silently change shape underneath them — it carries no name, no photo and no steps.
If you would rather ask a person, write to support@locksteptracker.app and it will be done by hand.
A Lockstep account can keep steps for people who have no phone of their own - usually children with a pedometer. They never use the app. The adult keeping their steps - their caretaker - adds them and types in their numbers, and is the only source of anything Lockstep holds about them: a display name, an emoji or a picture made with Memoji, Genmoji or Image Playground (never a photo), a time zone, a daily goal, and their daily step totals, with the Crowns and Medals those earn. Lockstep never asks for or stores their age, and nothing is ever collected from the family member directly.
A family member has no username, cannot be found by search, has no friends, and posts no notes. Besides their caretakers, they are seen only by the people in the competitions their caretaker joins them to - always competitions that caretaker is in - who see their display name, picture, steps for the competition's dates, and which caretaker keeps them. They receive no notifications.
Any caretaker can delete a family member. Their name and picture are removed straight away, and everything else is erased after seven days, during which any of their caretakers can undo it. Deleting your own account deletes, immediately, every family member nobody else keeps.
Lockstep is not directed at children, and does not knowingly collect anything from a child. If you believe a child is using Lockstep themselves, write to support@locksteptracker.app.
If this page changes in a way that affects what is collected or who sees it, the change is announced in the app before it takes effect, not only by editing this date.