This privacy policy takes effect on 2026-09-07. It is issued by Hubei Yanmenguan Trading Co., Ltd. For the purposes of this privacy policy, the Controller means Hubei Yanmenguan Trading Co., Ltd. The street address of the Controller is Booth A2-02-1019, Building 3, Hongsen Steel Market, Shuanglong Road, Shiquan Village, Junshui Town, Tongcheng County. A person who writes about Stepra or about a shoe photo shall use celiterrellryebedn@gmail.com. That mailbox is the channel for every request set out below.
Personal information, for the purposes of this privacy policy, means information about a person whom the Controller can identify, where the Controller actually holds that information. A shoe photo that never leaves the handset is not personal information held by the Controller. A letter the person chooses to send is personal information the Controller holds.
This privacy policy covers Stepra, the Android package the Controller distributes on Google Play, and the personal information described below. On the handset, a person may record which shoes were paired with which clothes. For one pair, the person may store as many as three pictures, may type a name, and may add a spoken remark or leave the remark out. A filter may sort those records by the kind of footwear and by the length of the trousers. For example, a person may name a pair of brown boots, keep three pictures of those boots, add a spoken remark about wet weather, and set the filter to a cropped trouser length. Where the store listing uses the word Profile, that word means the filter screen kept on the handset. Pictures are not passed to other people. The package contains no footwear shop. Stepra does not charge for keeping a shoe photo.
Subject to the legal-text requests described later, a shoe record stays on the phone. The Controller does not keep a remote gallery of the pictures.
Camera and Microphone are the sensitive permissions Stepra uses. The loss if a permission is refused is set out in the following list.
Video capture is absent from Stepra. Location is absent from Stepra. A picture made with Camera, and a spoken remark made with Microphone, are not shared with any recipient, because both remain on the phone.
The person supplies the shoe record, and the handset keeps it. Photos of a pair, Microphone audio of a spoken remark, and App activity for a saved look remain on the phone. The Controller does not take those Photos, that Microphone audio, or that App activity onto its systems, because they stay on the phone. A typed name stays there as well. So does a filter choice for footwear kind and for trouser length.
An advertising identifier is not read, because Stepra places no advertisement beside a shoe photo.
The Google Play Data safety form is to be read with this privacy policy so that collection, sharing, purpose, and the required or optional status of a practice do not diverge. A shoe photo, Microphone audio, and App activity serve the person's own diary on the phone. A letter lets the Controller answer the writer. Records of a legal-text request serve delivery of the text the phone asked for.
Two kinds of personal information can reach the Controller. The first is a letter sent to celiterrellryebedn@gmail.com. The second arises only in the scenes below. A hosting provider receives the phone's request over HTTPS and writes HTTPS server logs.
The scenes are limited to the following list.
In each scene the host writes those logs. Sending the requested text back to the phone depends on that record. A shoe photo is not attached to the request, because the photo remains on the handset with the typed name and the spoken remark. No other outbound path is used, because those diary files stay on the phone. Photos, Microphone audio, and App activity are not passed to the host.
Where the General Data Protection Regulation (GDPR) applies, it governs personal data that the Controller actually processes, namely mailbox mail and those logs. A shoe photo on the phone is outside that holding.
Where the GDPR applies, the legal basis for mailbox mail is legitimate interest in answering correspondence about a shoe photo. Security of the delivery is why those logs rest on legitimate interest when the GDPR applies. Saving a shoe photo is not the performance of a contract, because that photo stays on the phone and creates no bargain with the Controller.
You are entitled to file a complaint with a supervisory authority. That choice may use the authority of the alleged infringement, the authority of your home, or the authority of your workplace.
The company has no separately named Data Protection Officer. Write celiterrellryebedn@gmail.com for that inquiry.
Technical controls come first. A request for a legal text moves over HTTPS, so those logs are not sent in clear text. Access to the mailbox is limited to personnel who answer privacy letters, and those personnel authenticate with credentials that are not handed to unrelated duties. The Controller does not claim that these controls make every loss impossible.
Staff use a letter only to answer the person who sent it. A person who believes mailbox personal information was exposed may write to celiterrellryebedn@gmail.com. The Controller will look into that report and reply to the address used in the letter.
Retention is stated by kind of record, in short form.
Clearing storage, or uninstalling the package, removes the local diary. It does not erase a letter the Controller has already received. That letter is erased only by the mailbox route.
You may request a portable copy of mailbox personal information. Send the request by email to celiterrellryebedn@gmail.com. A reply on that request is due inside 15 business days. No shoe photo is pulled off the phone by that reply, because the Controller does not hold the photo.
Erasure of personal information that the mailbox has received is started by an email to celiterrellryebedn@gmail.com. That erasure is due inside 15 business days. Shoe photos are removed on the phone by uninstall or by clearing storage. The Controller has no remote switch that deletes those photos.
You may ask the Controller to state which personal information the mailbox holds. Send that access request by email to celiterrellryebedn@gmail.com. The same period of 15 business days applies. The Controller may ask you to reply from the same mailbox so that the letter is tied to the person concerned.
Where personal information is inaccurate or incomplete, you may request correction. Where the GDPR applies, you may seek rectification of that inaccurate or incomplete personal data. Both the correction request and the rectification request are sent by email to celiterrellryebedn@gmail.com, and a reply is due inside 15 business days. Correction of a typed name, of a picture, or of a spoken remark that never left the phone is done by the person in Stepra. The mailbox route is for personal information the Controller holds.
A shoe photo saved on the phone does not open a password screen, because the photo remains on the handset. There is therefore no hosted account and no account-deletion flow, whether inside Stepra or on a website. Uninstall, clearing storage, and a mailbox letter where the Controller actually received something are the deletion routes this package has.
Pictures, names, spoken remarks, and filter settings on the handset are not transferred abroad, because they remain on the phone. Those logs may be handled by the host in a country other than the country where the phone is used. That handling is limited to sending back the text that was requested. The Controller does not add a further overseas recipient, because no further recipient is given personal information from Stepra. A letter to the mailbox is read by the Controller at the street address named above.
A California resident may email celiterrellryebedn@gmail.com to confirm whether personal information is collected and to confirm whether personal information is shared. The California Consumer Privacy Act is the statute that resident may rely on for those questions. The California Privacy Rights Act is the later statute on the same subject. Stepra does not share a shoe photo so that an advertisement can be shown. The photo remains on the phone, and the package shows no advertisement. The Controller does not sell personal information. Money is not asked for a shoe photo, and that fact grounds the refusal to sell. To opt out of selling, email celiterrellryebedn@gmail.com.
The Virginia Consumer Data Protection Act is the statute noted here for a Virginia resident. Targeted advertising is absent from Stepra, because no advertisement sits beside a shoe photo. Sale of personal information is absent from Stepra, because that photo is not offered for money. Profiling is absent from Stepra, because the package does not build a prediction about the person from a shoe photo. A Virginia resident may mail a do-not-sell request to celiterrellryebedn@gmail.com.
A shoe photo in Stepra may be kept only by a person who is 18 and eighteen years old, and minors must not keep a shoe photo there.
Where the person is under 18, a shoe photo is not a source from which personal information is knowingly collected.
Stepra is not designed to hold shoe photos for children. Shoe photos in the package are not marketed to children. A shoe photo kept on the handset is not aimed at children. Children's sensitive identifiers and biometric data are not taken from a shoe photo. The package has no child-focused features, and the trouser-length filter belongs to the same adult record of shoe photos. The store listing and the filter screen speak to an adult who already keeps shoes.
A parent or guardian may email celiterrellryebedn@gmail.com and ask for access to children's information the Controller actually received. A parent or guardian may, in a separate letter, ask for deletion of that children's information. A parent or guardian may, in a further letter, ask that the Controller undertake stopping processing of that children's information. The Controller shall answer a parent or guardian within 15 business days. Local pictures a child may have left on a handset are removed by uninstall or by clearing storage on that handset. The mailbox route covers only children's information the Controller actually received.
A later edition of this privacy policy will replace the text dated 2026-09-07. The edition the host serves, and the edition opened from inside Stepra, will show the new date and will be the edition then in force.