Walk the Walk privacy policy

Effective 11 October 2026

This policy explains how Walk the Walk (WTW), operated by Basel Kurdi, handles information when you use its walking missions, rewards and social features. For privacy questions or requests, contact developer@wtw.life.

Information we handle

• Account and profile: email, account identifiers, sign-in information, username, names, profile image and the profile details you provide, which can include date of birth, phone number, city, country, address, gender, nationality, height and weight. Some profile details are required for reward activation.
• Walking activity: detected steps, motion and activity signals used for verification, mission selections, targets, start and finish times, distance estimates, earned points, completion records, tokens, badges and coupon activity. Weight may be used to estimate calories.
• Location: coordinates and accuracy readings for nearby missions, maps, destinations, walking verification, checkpoint collection and optional live-walk sharing. During an active walk, supported tracking features may continue while the screen is locked or the app is in the background, subject to your device permissions.
• Social content: posts, comments, reactions, connections, group memberships, messages, delivery/read status and photos, videos or voice recordings you choose to upload or send. Camera, photo and microphone access support these actions.
• Service information: notification tokens, app/device information, network request information such as IP addresses, preferences, technical errors and support correspondence. Service providers may maintain operational and security logs.

Why we use information

We use information to provide accounts and walking missions; verify activity and administer rewards; display your history and achievements; deliver messages and notifications; provide maps and weather; manage groups and sharing; respond to support requests; and protect the service against abuse and technical failures. Location and motion access are not a guarantee that every detected step earns a point.

Sharing and visibility

Your chosen audience can see content you share. Profile visibility, connection settings, group membership and leaderboard features determine which information other users can see. Accepted connections may see your full name according to your settings. If you share an active walk, its recipients can receive your live location, progress and outcome. Stop sharing when you no longer want to provide updates. Other people may save copies of information you share.

WTW uses service providers to operate the app. These include Supabase for account services, databases, media storage and real-time delivery; Expo and Apple/Google notification infrastructure for updates and push delivery; and Resend for service emails. Email and push providers receive the addressing information and message content necessary for delivery.

Map and geocoding features use the platform's map services, including Google Maps on Android and Apple services on iOS. Weather uses Apple Weather on supported iOS installations and MET Norway through WTW's server on Android. Weather coordinates are rounded to two decimal places (roughly kilometre-scale, depending on latitude). The MET Norway request does not include your WTW name or account ID.

When you request a new destination, its coordinates, city, proposed name and your email are sent to WTW support. When you open an external music or map service, that service handles information under its own policy. Reward providers may see coupon information you present to redeem a reward. We may disclose information when required by law, to respond to lawful requests, or to protect users and the service.

The current beta has no advertising. We do not sell your personal information or use your walking and location information for advertising-based tracking. Any future change to these practices requires an updated disclosure and any necessary consent.

Messages and security

Messaging implementations may use server storage or device-local history, depending on the feature and app version. Do not assume messages are end-to-end encrypted. WTW uses authenticated services and encrypted network connections for its hosted services. Device-local copies and content saved by other people may remain outside WTW's server-side deletion process. No system can guarantee absolute security.

Retention and deletion

Account and feature records are kept to provide your account, history, social features and rewards until removed through the app or an account-deletion request, subject to operational, security and legal needs. Provider logs and backups can have separate retention schedules. Retention depends on the purpose and provider: account and mission records remain while your account is active, unless you delete them; technical logs and rolling backups expire under the applicable provider schedule. Resend currently documents 30-day email and log retention for its standard plans. Deleted information may remain in restricted backups until those backups expire. Any information retained for a specific legal obligation or unresolved security matter is limited to that purpose and kept only as long as necessary. Contact us for details about a specific record.

In WTW, open Settings → Delete account, request an email code and confirm deletion. The deletion flow removes the account and associated server records and uploaded media, including groups owned by the account. Other people's independently saved copies cannot be recalled. For an external request, use the account and data deletion page. We verify account ownership before acting; never send your password.

Your choices and rights

You can edit profile details, choose sharing audiences, manage notification preferences and change device permissions. Disabling permission may make the related feature unavailable. Uninstalling the app does not itself delete your account. Contact developer@wtw.life to request access, correction or deletion, or to raise a privacy concern. Depending on your location, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent or complain to your local data-protection authority.

Service providers may process information outside your country. The location depends on the provider and hosting configuration, and may include countries with different data-protection laws. Where required, international transfers must be covered by applicable safeguards, such as contractual protections. Contact us for information about the safeguards applicable to your data.

Adults-only beta

The WTW beta is intended for adults aged 18 and over. If you believe a child has provided personal information, contact developer@wtw.life so we can investigate and arrange deletion where appropriate.

Changes

We will update this page when practices change and provide additional notice or request consent when required. The effective date above identifies the current version.