Privacy

Controller

Sebastian Fechtrup

Hackländerstraße 2

50825 Köln

Germany

Email: hello@walkd.io

On your iPhone

Without an account, the app stores your journeys, workouts, settings and paired devices only on your iPhone. Widgets and the Live Activity show this data without it leaving the device.

With Apple Health, walkd. reads – only if you allow it – steps, distances, workouts, heart rate, active energy, age, sex and weight, to move journeys on and to estimate heart rate zones and calories. walkd. writes your workouts with distance, route, steps, elevation gain and calories to Apple Health. walkd. never sends heart rate, calories or body data off your device; with an account, it backs up only the workout values listed under “Your account”. Health data is never used for advertising or shared with third parties. What Apple Health itself does with it, such as syncing through iCloud, is governed by your settings with Apple.

walkd. uses your location – only if you allow it – to start a journey where you are, and during a workout outdoors to measure distance and route. Apple works out the place name. The route of a workout stays on your iPhone and in Apple Health.

The motion sensor and barometer count steps and elevation on the device. walkd. connects to your treadmill or trainer over Bluetooth; its identifier stays on the iPhone. walkd. exchanges workout data directly between your iPhone and your Apple Watch.

What leaves your iPhone

To plan a journey, walkd. sends the route – start, destination and points in between – to these services: Apple Maps (Apple Inc., for the way and place names), Wikidata, Wikipedia and Wikimedia Commons (Wikimedia Foundation, USA, for places, texts and photos) and Open-Meteo (Switzerland, for the route's elevation). For technical reasons this transmits your IP address. No other information about you, your health data or the route of your workouts is sent.

For the weather where your journey stands, walkd. asks Apple Weather (WeatherKit) with the position on the route – not with your location.

The legal basis is Art. 6 (1)(b) GDPR: without these requests the app cannot plan your journey. For transfers to the USA, the Wikimedia Foundation relies on the European Commission's standard contractual clauses.

Your account

An account is optional. You sign in with Apple, with Google or with a code we email you. We then store your email address – with Apple, an anonymous relay address if you prefer –, how you signed in and, if Apple tells us, your name. If you sign in with Apple or Google, Apple or Google learn that you are signing in to walkd.; their privacy terms apply to that.

Signed in, walkd. backs up your journeys with start, destination and route, your workouts (time, duration, distance, steps, pace, elevation gain, type and device), your flights and your role, so they come back on a new iPhone. If a journey starts where you are, its start is there. Heart rate and calories stay in Apple Health and are never sent; we don’t store the way you walked during an outdoor workout.

You can sign out at any time and delete your account in the app’s settings. This immediately deletes your account, your backup, your profile, your friendships and the postcards and cheers you sent or received. The legal basis is Art. 6 (1)(b) GDPR.

With friends

You add friends only through your invite code. They see your name, your role and where your journey stands: the position on the route, the last place, your destination, the kilometres in total and today and, if any, the legendary way. They never see where you or your iPhone actually are – though at the beginning of a journey that starts where you are, its position is still close to that place.

Postcards with your message and cheers are seen only by the friend you send them to. If you remove a friend, they no longer see your journey. The legal basis is Art. 6 (1)(b) GDPR.

Where it is stored

Your account, backup and friends are kept by our processor Supabase (Supabase Inc., USA) on servers in Frankfurt am Main. Connections are encrypted, and every row is protected so that only you – and for what friends see, only they – can access it. Supabase also sends the sign-in code by email on our behalf. For any access from the USA, Supabase relies on the European Commission’s standard contractual clauses.

TestFlight

If you test walkd. through Apple's TestFlight, Apple passes on crash reports, your feedback and information about how the beta is used if you agree to this in TestFlight, and your name and email address if we invited you by email. We use this only to improve walkd. and delete it when the test ends. The legal basis is Art. 6 (1)(f) GDPR.

This website

The website is hosted by Netlify (Netlify, Inc., San Francisco, USA), which delivers it on our behalf through a worldwide network of servers. When you visit, Netlify processes technically necessary data (IP address, time, page requested, browser) in server logs, to deliver the site and protect it from abuse; the logs are deleted after a short time. For transfers to the USA, Netlify relies on the European Commission’s standard contractual clauses. The legal basis is Art. 6 (1)(f) GDPR.

The website sets no cookies, uses no analytics and loads its fonts and images only from this website.

If you pick a role or switch between the light and dark look on the website, your browser remembers that choice in its local storage (localStorage) so the page looks the way you left it on your next visit. Without a choice of your own, the page follows your system’s light or dark appearance. Whether the short hint about the figure has been shown is kept only until you close the tab (sessionStorage). It stays on your device and is never sent to us. You can delete it at any time in your browser’s settings.

If you join the waitlist, we pass your email address and language to our processor Brevo (Sendinblue SAS, Paris, France). Brevo sends you an email with a confirmation link; only when you click it are you on the list. Brevo keeps the time and IP address of the sign-up and the confirmation as proof of your consent. We use the address only to tell you when walkd. launches. The legal basis is your consent (Art. 6 (1)(a) GDPR). You can unsubscribe at any time through the link in every email; we delete the list after the launch.

Your rights

You have the right to access, rectification, erasure and restriction of processing, to data portability and to object, and you can withdraw consent at any time with effect for the future. Write to the email address above.

You can also complain to a data protection supervisory authority.