StridefallBack to home

Privacy policy

Last updated 13 October 2026

Stridefall is a walking game. It needs your step count to work, and it needs an account if you want your progress backed up. If you choose, it can also count workouts and training from other apps. This page says exactly what we collect, why, where it goes, and how to get rid of it. It is written to be read, not skimmed past.

Who we are

Stridefall is published by Mandooist, based in Australia. We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles. If you are in the United Kingdom or the European Union you also have the rights described under "Your rights" below.

For anything about this policy you can reach us by email at support@stridefall.com.

What this covers

The Stridefall app for Android (and iOS, when it ships), and this website,stridefall.com. It does not cover other services you choose to connect to the game, such as Strava, or the other apps made byMandooist: RouteMap, TrekLedger and GymDays. Each of those has its own privacy policy. This page does say what Stridefall receives from them if you link them, under "The Mandooist link" below.

The app

Playing without an account

You can play without signing in. Your save then lives only on your phone, in the app's private storage, and nothing about your play leaves the device except as described under "Step data" below. Training, workouts and the Mandooist link need an account. Uninstalling the app deletes your local save.

Your account

Your Stridefall account is a Mandooist account. Mandooist is the studio that publishes the game, and the same Mandooist login also works in TrekLedger and GymDays. (RouteMap has its own separate login.) If you create an account we collect your email address and a password. Sign-in is handled by Firebase Authentication, a Google service. Firebase stores your password as a salted hash; we never see it and cannot read it. We use your email address to identify your account, to let you reset your password, and to answer you when you contact us. We do not send marketing email to app accounts.

If you sign in with Google instead, Google tells us your email address, your name and your profile picture, and Firebase keeps those on the account record. We use them only to show you who is signed in. We receive nothing else from your Google account, and Google's own privacy policy governs what Google records about the sign-in.

Your cloud save

With an account, the game backs up your save to Google Cloud Firestore so you can restore it on another phone. The save is your whole game state: character, levels, inventory, quests, settings, and the running step totals the game has counted. It is written when the app goes into the background and when you tap "Back up now" in Settings. Only your own account can read or write your save; that is enforced by server rules, not by the app.

Step data

Steps are the currency of the game, so with your permission the app reads your step count from the health platform on your phone: Health Connect on Android, and Apple's Motion framework on iOS. This permission reads step counts and nothing else.

The counts are turned into game progress on your phone. The raw records stay in the health platform; what the game keeps is the total it has spent, which becomes part of your save and, if you have an account, of your cloud save. You can withdraw the permission at any time in your phone's Health Connect or Motion settings. The game keeps working; it just stops counting.

Workouts and heart rate (Android, optional)

Training can count workouts that other apps have recorded. This is off until you turn it on: in the app, open Training, then Sources, and link Health Connect. Only then does the app ask Health Connect for four things, all of them read access:

• Steps, which the game already uses.
• Exercise sessions: a run, a ride, a gym session and so on.
• Distance.
• Heart rate.

The app never writes anything to Health Connect. It reads only while you have the app open, never in the background, and only workouts that start after you linked it. It does not read your older history.

For each workout, the app reads the type, title, start and end time, which app recorded it and how, and the distance covered during it. Heart rate is read only inside the start and end time of a workout, never at any other time of day. Of that heart rate, the app sends only the average, the highest reading and the name of the app that recorded it. The individual heart rate readings are not sent to us and we do not store them. The app does not ask Health Connect for the route or location of a workout.

Distance and heart rate are optional extras. If you decline them, a workout can still count, but it is more likely to be held for review (see "Held for review" below). Workouts that Strava wrote into Health Connect are left out, because Strava activity counts through RouteMap only.

What we do with it. We use workout, distance and heart rate data only to run the game: to work out how much a workout counts, to grow your character, to show you your Debrief, and to check that activity is real. We do not sell it. We do not use it or share it for advertising, including personalised or interest based advertising. We do not use it or share it to decide credit, lending or insurance, or for anything that is not running the game. We do not transfer it to anyone else except Google, whose Firebase service stores it on our behalf, and except where the law requires it. The only people who can read it are described under "Who can see your data in our systems" below.

Google Health Connect. Stridefall's use and transfer of information received from Health Connect adheres to theHealth Connect Permissions policy, including the Limited Use requirements. We read a person's Health Connect data only to provide and improve the features described on this page that the person can see in the app, we do not allow humans to read it except for security and abuse investigation (see "Held for review"), where the law requires it, or where you ask us to look at it, and we do not use it for advertising.

You can stop this at any time. Unlink Health Connect on the Sources screen, or take the permissions away in Health Connect itself. Either one stops new workouts being read.

The Mandooist link (optional)

Mandooist makes four apps that can count toward your character:Stridefall itself, RouteMap, TrekLedger and GymDays. If you want them to, you can link them to Stridefall. It is off until you turn it on, one source at a time, on the Sources screen. Nothing is sent to the ledger described below until you do, and only activities that start after you linked a source count. Nothing from before is brought in.

The ledger. Linked activities go into a shared Mandooist ledger tied to your Mandooist account. It is a set of Google Firebase services (Cloud Firestore and Cloud Functions) in Google's Sydney region, australia-southeast1. The ledger scores each activity and writes you a Debrief. Only your own account can read your ledger entries, and only our own server functions can write them.

What each source sends to the ledger:

Strava activity reaches the ledger only through RouteMap's server, and only if you have linked RouteMap and connected Strava inside RouteMap. The Stridefall app does not send Strava activity to the ledger. Linking RouteMap uses a one time code, made in the Stridefall app, that is good for 10 minutes. RouteMap's own privacy policy covers what RouteMap holds, and so do the GymDays and TrekLedger policies for those apps.

Your Debrief

When you have been training, the ledger sends your in-game mailbox a Debrief: a summary of the activities it has scored, for you to claim in the app. For each activity it lists the title, type, start and end time, distance and moving time, how much of its full value it counted for and why, the exertion it added, and the stat points it earned. It also shows your totals and whether you are fresh, strained or fatigued. A Debrief does not contain routes, heart rate readings or individual sets. It may name a lift record you set (the exercise and your estimated best), and the trip an expedition day belonged to.

Stat points are applied on your phone when you claim a Debrief, and they become part of your save. If an activity is deleted at its source or counted for less than first thought, the ledger can send a correction that takes the points back. The Debrief and the ledger entries behind it are used to run the game and to check fair play, and for no other purpose. They are not shown to other players.

Held for review

Because the apps run on your phone, the ledger checks that activity is plausible before it counts. It looks at things like whether the pace suits the sport, whether the route jumps faster than any person could move, whether the distance matches the steps taken, and whether a recorded track is too thin to be a real outing. It also counts activity for less, or not at all, if it was typed in afterwards, imported from a file, or comes from a source it cannot verify. An activity that fails these checks is held and earns nothing while it is held. This is an automatic decision about whether an activity counts in the game; it has no effect outside it. If you think a held activity is real, contact us and we will look at it.

Fair play records

Because the game runs on your phone, it cannot prove a step count is genuine. To keep races and leaderboards honest we keep a server side record of how each account's step total has moved over time, timestamped by our servers rather than by the phone. Only our own tools can write or read it. It contains totals and times, not individual steps or locations. For linked activities the ledger entries and how each was scored serve the same purpose. They exist to spot tampering and for no other purpose.

Unlinking

You can unlink any source at any time on the Sources screen in the app. Unlinking stops new activities from that source counting from that moment. It does not take back points you have already earned, and it does not erase the ledger entries already recorded, which stay until you delete your data (see "How long we keep it"). If you link the source again later it counts from then on, not from the gap. To stop RouteMap sending, you can also unlink Stridefall in RouteMap's settings. If you disconnect Strava in RouteMap or revoke RouteMap's access in Strava, the route line and heart rate are removed from the ledger entries for those activities; the points stay.

Who can see your data in our systems

Your save, mail, step records and ledger entries can be read by you, and by Mandooist's operator console, which is used by the developer and no one else. We use it to look after the game and answer your messages: it shows the player list with email addresses, saves, mail, step records and ledger entries (the entry details, such as distance, time and average and highest heart rate, and the number of route points, but not the route itself), and the queue of held activities. The ledger view is read only. We look at individual records to support you, to investigate a held activity or suspected cheating, to keep the service secure, or where the law requires it. We do not use it to profile you.

Strava (optional)

Some in-game races can be completed with real runs. If you choose to connect Strava, the game asks Strava for permission to read your activities, and then reads only what it needs: the activity type, distance, moving time and start date of runs inside a short window around the race. Strava's access tokens are stored on your phone. The one server step, exchanging Strava's sign-in code for a token, runs on a Cloudflare Worker we operate and keeps Strava's client secret off your device. You can disconnect Strava in Settings at any time, and revoke the game's access from your Strava account. Strava's own privacy policy applies to Strava. This race connection is separate from Training: it does not send anything to the ledger.

Messages from us

We can leave a message in your account's in-game mailbox, for example to hand you an item after a bug. These are written only by our own tools and can be read only by your account. Your Debriefs arrive in the same mailbox.

Notifications

Reminders are scheduled on your phone by the app itself. We do not use a push service and the app does not send a push token anywhere.

What the app does not do

• No analytics or usage tracking SDK.
• No advertising and no ad network.
• No access to your phone's location, contacts, camera or microphone, and no route or location read from Health Connect.
• No crash reporting service. If we add one we will name it here first.
• No sale of personal information, ever.
• No use of health, workout or heart rate data for advertising, or for credit, lending or insurance decisions.

This website

The site is static and sets no cookies. It is served by Cloudflare, which keeps ordinary server logs (your IP address, browser and the pages requested) for security and operations under its own policy.

We measure visits with Cloudflare Web Analytics. It counts page views and page speed without cookies, without a device fingerprint, and without following you to any other site. It does not tell us who you are, and we cannot use it to look you up. You can block it with any script or tracker blocker and the site works exactly the same.

If you sign up to hear about the launch, your email address is stored byButtondown, who send the email on our behalf. It is used for that and nothing else. Every email has an unsubscribe link, and unsubscribing deletes the address from the list.

Who else sees your data

The Mandooist ledger (Cloud Firestore and Cloud Functions) runs in Google's Sydney region. Other providers store data in data centres that may be outside Australia, including the United States. We choose providers that commit to protecting personal information to a standard at least equivalent to the Australian Privacy Principles.

How long we keep it

Your account, cloud save, fair play records and mailbox are kept for as long as the account exists. The same goes for your ledger entries, your link settings and your Debriefs: we do not delete them on a timer, they stay until you delete your data. When you delete your account, all of it is deleted within 30 days, including from backups. Theaccount deletion page explains how, and what deleting your Stridefall account does and does not touch. Newsletter addresses are kept until you unsubscribe.

In short: deleting your Stridefall account removes everything Stridefallholds for you, including the ledger and your links. Your Mandooist login and your data in other apps are not touched by that. Deleting the Mandooist login itself (for example with Delete account in TrekLedger or GymDays, or by asking us) removes the login and the data of every Mandooist app tied to it: Stridefall, GymDays and TrekLedger, including the ledger. RouteMap keeps its own account and its own data, which you delete in RouteMap.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, and ask us to delete it. We answer within 30 days. If you think we have mishandled your information you can complain to us first, and to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the UK or EU you have the additional rights the GDPR gives you, including to object to processing and to take your data with you, and you can complain to your local supervisory authority.

Children

Stridefall is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Security

Everything between the app and our providers travels over TLS. Cloud saves and ledger entries are protected by server side rules that let only the owning account read them, and only our own server functions write the ledger. No system is perfectly secure, and if we learn of a breach affecting your information we will tell you.

Changes

If we change what we collect or why, we will update this page and the date at the top, and for a material change we will tell you in the app before it takes effect.

Contact

You can reach us by email at support@stridefall.com.

Back to home