This policy explains what Walkie collects, why, and the choices you have. We wrote it to be readable.
What we collect
- Account: name, email, optional username and profile photo; password stored only as a bcrypt hash.
- Fitness: activities you record (type, time, distance, pace, calories estimate) and GPS route points; daily step totals you allow us to read from Apple Health or Health Connect.
- Optional body details: weight and height, used only for estimates.
- Game data: pets, coins, items, shop layout, missions and achievements.
- Usage events: privacy-filtered events (e.g. "activity completed") without health values, coordinates or free text.
How we use it
- To provide tracking, rewards, insights and social features you turn on.
- To keep the service secure and prevent abuse (e.g. reward fraud).
- We do not sell your personal data. Health data and routes are never used for advertising and never sent to analytics providers.
Sharing & visibility
By default your profile and activity summaries are visible to friends only, and precise routes are private. Leaderboards are opt-in and show weekly totals only. Payment processors (PayMongo for GCash, Maya and cards in the Philippines; Stripe; Apple and Google via RevenueCat) handle payment details under their own policies — Walkie never sees or stores your card or e-wallet credentials.
Service providers
We use carefully chosen processors only to run the service: hosting and database (our own server), email delivery (Resend), push notifications (Firebase Cloud Messaging), payments (PayMongo, Stripe, RevenueCat), and map display (Google Maps, Apple Maps or open map tiles, depending on your platform). Map providers receive the map area being displayed, not your account details. We do not sell personal data or share fitness or location data for advertising.
Your rights
You can export all your data (Profile → Export my data) and permanently delete your account at any time. You can revoke Health and location permissions in your device settings.
Retention & security
We keep data while your account exists and delete it when you delete your account, except records we must keep by law (such as payment records). Data is encrypted in transit; access is restricted by role and audited.
Philippine Data Privacy Act
We process personal information in line with the Data Privacy Act of 2012 (RA 10173) and its implementing rules: for specified purposes, proportionately, and with security measures appropriate to fitness and location data. You may access, correct, object to processing, request erasure or portability, and file a complaint with the National Privacy Commission. Contact our Data Protection Officer at privacy@walkie.run. In the event of a personal data breach that requires notification, we will notify the NPC and affected users within the period required by law.
Security & fraud prevention
To protect accounts and rewards we keep short-lived security records: hashed (not raw) IP addresses for up to 30 days for referral fraud checks, and login/security events for up to 180 days. Expired sign-in sessions and one-time links are deleted automatically.
Children
Walkie is not directed to children under 13 (or the minimum age in your country).
Contact
privacy@walkie.run