FlosForge Steps for Android

Privacy policy for FlosForge Steps

Checked against FlosForge Steps 1.0 on 23 September 2026. The data controller is Dimitrios T, Athens, Greece — hello@flosforge.eu.

FlosForge Steps has no internet permission and no network code, so your step history cannot leave the phone through the app. Steps come from the phone’s step sensor, never from GPS or location. There is no account, no analytics and no advertising.

What FlosForge Steps collects about you

Nothing. There is no account, no telemetry, no analytics, no crash reporting and no identifier of any kind. The app has no server of its own to send anything to, and it does not phone home to check for updates — Google Play delivers new versions.

What it stores, and where

Your step history
Steps by hour and by source, added activities, goal history and your reminder answers, in the app’s private database.
Your settings
Goal, stride, units, reminder time and appearance, in the app’s private storage.
Left out of backups
Every part of the app’s storage is excluded from Google’s cloud backup and from device-to-device transfer. Use the app’s own backup file to move to a new phone.

Everything it can connect to

The app has no internet permission. These are the only things outside it that it ever reaches, and each one is something you choose.

The phone’s step sensor
A low-power chip that counts steps on its own. Reading it needs the physical-activity permission; the app never asks for location.
Health Connect, if you turn it on
Off by default. The app then reads step counts from the last thirty days, when you open it or tap Import now. It never writes to Health Connect.
Files you save
CSV exports and backups go only to the place you pick in the save dialog, and a restore reads only the file you pick.
Links you tap
The website link opens flosforge.eu in your browser. The app itself opens no connection.

What never leaves your phone

  • No step count, activity or reminder answer is transmitted by the app.
  • No location, no GPS, no account.
  • No analytics, no crash reporting, no advertising and no third-party SDKs.

Safeguards

Nothing to switch off
Without the internet permission the app is unable to send anything, whatever its settings say.
Permissions only when needed
Notifications are requested only when you turn the reminder on, and Health Connect only when you enable the import.
Deleting is confirmed
Delete step history warns that it cannot be undone and suggests a backup first.

Your rights, and who to ask

Because the app holds nothing about you, there is nothing for the controller to access, correct or erase on your behalf: everything it knows is in files on your own phone, under your own control. Uninstalling the app deletes everything it stored, and because its data is excluded from backups there is no other copy. Exports and backup files you saved are yours to delete. For anything else, write to hello@flosforge.eu. The site-wide privacy policy covers this website, your rights under the GDPR, and the supervisory authority you can complain to.

Changes

This statement is checked against each release. If a version changes what the app stores or what it can connect to, the version and date at the top change with it.

Trademarks and affiliation

FlosForge is an independent, one-person project. It is NOT affiliated with, endorsed by, sponsored by, certified by, approved by or connected in any way to any of the companies or organisations named below, or to any other company whose products, services or trademarks appear anywhere on this site or inside its screenshots. None of them has reviewed, approved or supported this software, and no such relationship is claimed or implied. Their names appear here for one reason only: to identify the software the pages are talking about.

Apple Inc.
Apple, macOS, Mac, the Mac App Store, Touch ID, Keychain, Apple Intelligence, AirTag, AirPods and Find My
Microsoft Corporation
Microsoft, Windows, Visual Studio, WinUI and .NET
Google LLC
Google, Android, Google Play, Google Drive, Health Connect, Find Hub and Gemini
Samsung Electronics Co., Ltd.
Samsung, Galaxy, Samsung Health, SmartTag and S Pen
the WordPress Foundation
WordPress
Linus Torvalds
Linux, registered in the U.S. and other countries
The MITRE Corporation
CVE (registered trademark) and CWE
Docker, Inc.
Docker
the OpenJS Foundation
Node.js and Electron
Cloudflare, Inc.
Cloudflare and R2
Amazon.com, Inc. or its affiliates
Amazon Web Services, AWS and Amazon S3
GitHub, Inc.
GitHub
Bluetooth SIG, Inc.
the Bluetooth® word mark and logos
the OpenStreetMap Foundation
OpenStreetMap
Yoast BV
Yoast
reMarkable AS
reMarkable, reMarkable 2 and reMarkable Paper Pro

cURL, Python, Ollama, Tile, Chipolo, Pebblebee, Meta, Ray-Ban, Flipper Zero, GoPro, Backblaze, Wasabi, MinIO, GeoNames, OpenTopoMap, NVD (National Vulnerability Database), the security advisory databases named on the project pages, and every other product, brand or company name shown on this site or inside its screenshots are the property of their respective owners. This product uses data from the NVD API but is not endorsed or certified by the NVD. Each mark is used nominatively — to identify the software, platforms or data sources concerned — and never as a badge of origin, quality or endorsement.