Privacy notice

1. Data on your device and location permission

Walks, GPS observations, exploration progress, avatars, badges, preferences and downloaded street areas are stored locally. Your device uses location when you choose to locate yourself or record a walk. If you enable recording while the screen is locked, location collection can continue during that active walk. Pause or finish the walk to stop recording. You can change location permission in your device settings; the operating system may interrupt recording.

The local database uses the operating system’s app sandbox, without separate database encryption. Android backup and transfer are disabled by app configuration, and the iOS database directory is marked as excluded from backups. These settings are not a guarantee against older backups, screenshots, device compromise or forensic recovery. The offline demo uses invented data and makes no map requests.

2. Optional accounts

Supabase processes your email address, password authentication, account identifier and sessions so you can register, verify your email, sign in, recover access and delete your account. Passwords are sent over an encrypted connection for authentication; the account service stores password hashes. The app stores session credentials in the operating system’s secure storage, separately from your walks.

The account database contains your account identifier, an optional display name you explicitly save while signed in, profile timestamps, and server-maintained membership status and timestamps. We do not upload your routes, GPS observations, avatars, badges or local street-area caches to the account service. Choosing to associate guest progress with your account only moves it between local profiles on that device. Signing out does not erase it.

3. Map and street requests

When you request an online street area, the selected OpenStreetMap Overpass service receives that geographic bounding box and your network address. This release uses the default Overpass service or the optional Private.coffee service selected in Settings. Saved walks are not included. These independent providers may keep request logs under their own policies. The bundled offline areas can be used without a new street request.

This release has no separately configured remote base-map style. A future release that adds a remote style or tile provider must disclose that provider and the map areas and network information it receives.

4. Emails and support

Supabase Auth uses Resend to deliver account verification, password recovery and account-security emails. Resend receives your email address and the message contents, including any verification or recovery links, and processes delivery and service-security metadata to send and troubleshoot those messages. We use this integration for account emails, not marketing. Email delivery records and provider logs follow the applicable service arrangements and retention policies; deleting an Unwalked account does not promise immediate erasure of those records. The account hosting region listed below does not describe all processing locations used by the email provider.

The contact form stores your email address, message and selected language in the dedicated Supabase project, in the account hosting region listed below, for private manual review. It shows a submission receipt and does not send an automatic email. We use the information you choose to send to respond, investigate a problem or handle a privacy request. Please do not send passwords, verification codes, recorded routes or precise locations. We may need proportionate verification before acting on an account request. Support messages are reviewed and deleted when no longer needed to handle the request or meet applicable legal obligations.

5. Membership and payments

Paid subscriptions are not active in this release. Creating an account does not make a purchase. The account service stores a Free membership record. If paid subscriptions are introduced, we will update the disclosures before activation, including the app stores, billing provider, purchase information and retention involved.

6. Retention and deletion

Local data remains on the device until you delete it or it is removed by the operating system. In Settings, Delete local personal tracking data removes the current account’s or guest profile’s personal walks, exploration, profile details and requested street areas. It does not delete a remote account or another local profile. Public offline packs and demo data are separate.

Account deletion is available in Account settings and through the external deletion page linked below. After password verification, the service removes the authentication account and its associated profile and membership records and revokes sessions. Service logs, security records and provider backups may follow separate provider retention schedules or legal obligations; deletion does not promise immediate erasure of every backup or log. Contact us for questions about a particular record.

In-app deletion separately offers local erasure. If you keep local walks after deleting the account, they remain isolated under the deleted account’s identifier and cannot be opened afterward. Creating a new account with the same email does not recover them. The external website cannot erase files on your phone. Deleting an account does not cancel any app-store subscription; subscriptions must be managed through the relevant store.

7. This website and service providers

We add no analytics, advertising or application storage for tracking to these pages. The website host may run security and anti-bot scripts and use necessary security cookies. The host and network infrastructure receive normal request information, such as your network address, requested page and browser information, and may retain operational and security logs. The external account-deletion page sends credentials to the account service over HTTPS and keeps its temporary session in memory rather than browser storage.

The deployment-specific providers and account hosting region are listed below. Providers process data to deliver their services, prevent abuse and meet legal obligations. Their own policies may also apply to their independent processing. We do not sell your personal data or use your recorded routes for advertising.

8. Purposes, legal bases and international processing

Where a legal basis is required, account and support processing is used to provide the service you request and perform the account agreement; optional location access is based on your permission and, where applicable, consent. Necessary security and abuse-prevention processing may rely on legitimate interests, and some records may be kept to comply with legal obligations. You can withdraw device location permission at any time; this does not change earlier lawful processing.

Providers may process information outside your country, including in the account hosting region shown below. Applicable protections depend on your location and the provider arrangements, including legally required safeguards for international transfers. Contact us to request information about the safeguards relevant to your data.

9. Your choices and rights

You can use guest mode, choose whether to grant location permission, edit your account display name and delete local data or your account. Depending on applicable law, you may also request access, correction, erasure, restriction, portability, object to certain processing or withdraw consent. Contact us through the link below. These rights can have lawful limits and identity-verification requirements; local-only walks cannot be retrieved from our servers because they are not uploaded.

Where available under local law, you can complain to your data-protection authority. This beta is intended for adults aged 18 and over. If you believe a child has provided account information, contact us so we can investigate.

10. Changes

We will update this notice when the service or its processing changes and show the effective date. Material changes will be brought to your attention as required by applicable law.

Services used for this release

Account service and hosting region

Supabase · US East (Ohio, us-east-2)

Account email service

Resend

Website hosting

OpenAI Sites / Cloudflare

Support requests

Supabase — private support inbox in US East (Ohio)