Walkie Privacy Policy

01 Who controls your personal data

Walkie is published by Kredo Technologies OPC, the same publisher as Kredo, which acts as the Personal Information Controller for personal data processed through the Walkie app and its backend ("Walkie", "we", "us").

Privacy and data protection inquiries, including requests to exercise the rights described in section 19, may be sent to support@getkredo.app. This address reaches the person responsible for privacy compliance.

Philippine data privacy

Walkie processes personal data in accordance with applicable Philippine data-protection law, including Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.

02 About Walkie

Walkie is a walking companion game for Android and iPhone. Your daily steps, read from Health Connect on Android or Apple Health on iPhone, move your walkie — the mascot, Gohan, or the walkie you style — along a Journey, earn in-game coins, and unlock cosmetics and titles. Optional social features let you add friends, race a friend 1:1 on steps, send reactions and nudges, join weekly leagues with a leaderboard, and invite people with a referral code.

Walkie is a game, not a medical device. It does not diagnose, treat, or monitor any health condition.

03 Your account

Walkie has no sign-up screen. The first time you open the app, it silently creates an anonymous account for that install: a random identifier on our servers that your game progress is stored under. We do not collect an email address, phone number, or password to create it.

Because an anonymous account is tied to the app on your device, you can optionally back it up by linking Sign in with Apple on iPhone or Google Sign-In on Android (see section 4), so you can get your progress back on a new phone.

On Android, the app's data is excluded from Android's device backup, and there is no equivalent of the iPhone Keychain that survives an uninstall. If you uninstall Walkie, clear its data, or reset your phone without having backed up with Google, the app loses its link to the anonymous account and cannot get it back. That account's data stays on our servers until you ask us to delete it, or until it is deleted under the inactive-account rule below if it qualifies.

Accounts are handled by Supabase Auth, which stores the account record and issues the session token the app uses for its requests.

04 Backing up with Apple or Google

Backing up is optional. On iPhone, Walkie offers Sign in with Apple; on Android, it offers Google Sign-In. Either one only links an identity to your existing account; it does not create a separate one.

4.1 Sign in with Apple (iPhone)

If you choose to link Sign in with Apple, Walkie requests the name scope only — not your email address. We receive:

Google Sign-In is not offered in this version of Walkie for iPhone.

4.2 Google Sign-In (Android)

If you choose to back up with Google, Google's sign-in sheet asks you to pick an account and returns a signed identity token to the app, which passes it to our authentication service to link to your account. Walkie does not see or store your Google password. The token Google issues contains:

Walkie does not receive an access token for your Google account and cannot read your Gmail, Drive, contacts, or any other Google data.

05 Apple Health data (iPhone)

5.1 What Walkie can read

When you grant access in iOS's Health permission sheet, Walkie can read:

• step count, walking and running distance, active energy, flights climbed, and exercise minutes;
• optionally, walking speed, step length, walking steadiness, walking asymmetry, and cardio fitness (VO2 max).

You choose which of these to allow, and you can change that at any time in iOS Settings or the Health app.

5.2 What leaves your device

For each day, Walkie sends our backend only:

• your total steps;
• your total distance;
• your step counts for each of the day's 24 hours;
• your time zone; and
• the data source (which app or device recorded the steps).

We use these to award in-game rewards, keep streaks, run races and leagues, check that step counts are plausible (anti-cheat), and work out your "walking personality" type from when in the day you tend to walk.

5.3 What stays on your device

Everything else stays on your iPhone: active energy, flights climbed, exercise minutes, the mobility metrics (walking speed, step length, steadiness, asymmetry), and VO2 max. They are read on your device and shown only in the Stats screen. They are not sent to our servers.

06 Health Connect data (Android)

6.1 What Walkie can read, and why

Walkie asks for Steps when you set it up. Every other type is optional and is asked for only when you open the Stats feature that uses it.

You choose which of these to allow, and you can change that at any time in Health Connect (from Walkie: Menu › Your data › Health data).

6.2 What leaves your device

The same as on iPhone (section 5.2): for each day since you started Walkie, your total steps, your total distance, your step counts for each of the day's 24 hours, your time zone, and the data source (recorded as Health Connect). We use them for the same purposes.

6.3 What stays on your device

Everything else stays on your phone: active calories, floors climbed, exercise sessions, speed, VO2 max, and the older step history read with the history permission. They are read on your device and shown only in the Stats screen. They are not sent to our servers.

07 Profile and game data

To run the game and keep your progress, our servers store, linked to your account:

• your display name and, if you set one, your handle;
• your walkie's appearance and the cosmetics and title it has equipped;
• your daily step goal and time zone;
• your coin and diamond balances and the ledger of transactions that produced them;
• your inventory, achievements, and Journey progress;
• your friends list, races, and the reactions and nudges you send and receive;
• your league membership;
• your referral codes and invites;
• on Android, a random identifier for the app install, used to limit rewards that are meant to be claimed once per device.

08 What other players can see

• Friends can see your display name, your walkie, your daily step totals, and your progress in races with them.
• Leagues. If you are in a league, the league leaderboard shows your standing and step total to the other members of that league. If you are not in a league, you do not appear on one.
• Your hourly step counts, time zone, data source, and any Health data other than daily step totals are not shown to other players.

09 Purchases and subscriptions

Walkie offers in-app purchases — diamond packs, and Walkie Pro, an auto-renewing subscription — that are sold and processed by Apple on iPhone and by Google Play Billing on Android.

On iPhone, when you buy something, we receive Apple's signed transaction, which includes the transaction ID, the product, the relevant dates, and the environment (production or test). We use it to credit your purchase and keep track of your subscription status.

On Android, the app sends our server the purchase token and product ID Google Play returns. Our server checks the purchase with Google Play, which tells us its order ID, state, dates, and, for Walkie Pro, whether it is set to renew. We use this to credit your purchase, track your subscription status, and complete (acknowledge) the purchase with Google Play. Google Play also notifies our server of renewals, cancellations, and refunds; a refunded diamond pack is taken back from your balance. When you start a purchase, the app gives Google Play a one-way hash of your Walkie account identifier, so a purchase can only be credited to the account that made it.

We never see your payment card details. Payment is handled entirely by Apple or Google.

10 Notifications

If you allow notifications, we store your device's push token so we can send race and friend notifications — through Apple Push Notification service on iPhone, and through Firebase Cloud Messaging, a Google service, on Android. A notification's content (its title, text, and which race or screen it opens) passes through that service on its way to your phone. Reminders are scheduled locally on your device and are not sent from a server. You can turn notifications off at any time in iOS Settings, or on Android in Walkie's Menu › Notifications or the Android Settings app.

11 Analytics, diagnostics, and tracking

Walkie contains no third-party analytics SDKs and no advertising in this version — there is no active ad network in the app. Walkie does not use the advertising identifier (IDFA) on iPhone or the advertising ID on Android, and does not track you across other companies' apps or websites. We do not sell your information.

Walkie measures how the app is used with its own first-party usage events. Each event is an event name plus properties, linked to your account identifier, and stored in our own backend. We use them to understand and improve the app, not to advertise to you. They are deleted with your account.

On Android, every event is tagged with the platform, and each time you open the app it sends one "app open" event with the app version and build, the Android version, your device model, and your language and region setting. These tell us which versions and devices are in use. The events never include your step counts.

On iPhone, Walkie also receives crash and performance diagnostics through Apple's MetricKit, which we use to find and fix problems. The Android app contains no crash-reporting SDK.

Separately, our infrastructure provider keeps the ordinary operational logs any hosted service keeps — request metadata such as timestamps, IP addresses, and error information — which are used to keep the service running and secure, not to profile you.

12 How we use information

• To create and restore your account.
• To turn your steps into game progress: coins, Journey progress, streaks, achievements, titles, and your walking personality type.
• To run social features — friends, races, reactions and nudges, leagues, and referrals.
• To check that step counts are plausible and keep the game fair.
• To credit purchases and track subscription status.
• To send the notifications you allowed.
• To operate, debug, and improve the app and keep it secure.
• To respond to you when you contact support.

Walkie does not use your information to serve advertising, and does not build advertising or cross-app tracking profiles.

13 Why Walkie is allowed to process your information

Depending on the processing activity, Walkie processes personal information because:

• it is necessary to provide the game or a feature you requested — keeping your progress, running a race you joined, or crediting a purchase;
• you have given consent, which is the basis for reading Apple Health and Health Connect data, for sending notifications, and for linking Sign in with Apple or Google Sign-In;
• processing is necessary to comply with a legal obligation; or
• processing is reasonably necessary for legitimate interests such as securing, maintaining, preventing cheating in and abuse of, and improving Walkie, where those interests are not overridden by your rights and freedoms.

Where processing rests on consent, you can withdraw it at any time: turn off Health access in iOS Settings or the Health app, or Walkie's permissions in Health Connect on Android, and notifications in your phone's settings. Withdrawal applies from then on; step data already sent stays with your account until you delete it.

14 Service providers and processing outside the Philippines

Walkie relies on the following providers to operate. They process information on our behalf, for the purposes below.

Processing outside the Philippines

Walkie's backend is hosted in Singapore, so information stored on our servers is processed outside the Philippines. When Walkie uses a service provider to process personal data on its behalf, Walkie remains responsible for that processing and for putting in place the contractual, organizational, and technical safeguards required by applicable law.

15 Data retention

Account-associated records — your account, step data, profile and game data, purchase records, push token, and usage events — are retained while your account remains active, and are deleted when you delete your account, except where retention is reasonably necessary to comply with law, resolve disputes, prevent fraud or abuse, enforce our agreements, or maintain the security of the service.

• Inactive anonymous accounts are deleted automatically as described in section 3.
• Health data that stays on your device is never stored by us; it remains in Apple Health or Health Connect under your control.

After you delete your account, a small amount of information that is not linked to your name, handle, or step history is kept: Walkie Pro payment records (product, price, currency and dates) with your account identifier removed, for our financial records; the transaction IDs of refunded purchases, to stop a refunded purchase being credited again; and a summary row per deleted account holding a one-way hash of the account identifier and totals such as the number of purchases and of days with steps, used to count deletions. The details are on the account deletion page.

Operational logs held by our infrastructure provider follow that provider's own platform retention. We do not currently operate a separate, fixed retention schedule on top of those, and we will not state a number here until one exists.

16 Deleting your account and data

You can delete your Walkie account from inside the app on Android or iPhone: Menu › Your data › Delete my walkie and data. Deletion is immediate, permanent, and not reversible: it deletes your account and all of its server-side data — step data, profile and game data, balances, inventory, friends, races, league membership, referral records, push token, and usage events — and the Google or Apple identity linked to it, and revokes Walkie's Sign in with Apple access if you linked it. On Android it also wipes the data the app keeps on your phone.

You can also request deletion by writing to support@getkredo.app. Because accounts have no email address of their own, we may ask you for details from the app that let us identify the right account, such as your handle. If you backed up with Google, writing from that Google account's email address is enough. See Delete your Walkie account for the steps.

17 Security

Traffic between the app and our backend uses HTTPS, and stored records are scoped to their owner by database access rules. We describe the controls we actually operate and do not claim certifications we do not hold. No method of electronic storage or transmission is completely secure, and no service can promise perfect security.

18 Personal data breaches

If Walkie becomes aware of a personal data breach, we will investigate and take reasonable measures to contain and address it. Where notification is required by applicable law, we will notify the National Privacy Commission and the affected data subjects within the period the law requires.

19 Your rights under Philippine data-protection law

If Philippine data-protection law applies to you, you may have the right to:

• be informed about the processing of your personal data;
• object to certain processing, and withdraw consent where processing is based on consent;
• access the personal data Walkie holds about you;
• request correction or rectification of inaccurate personal data;
• request erasure, blocking, or destruction where the legal requirements for that are met;
• obtain or request portability of qualifying personal data;
• seek damages where provided by law; and
• lodge a complaint with the Philippine National Privacy Commission (privacy.gov.ph).

Several of these you can exercise directly at any time:

• change which health data Walkie can read, in iOS Settings or the Health app on iPhone, or in Health Connect on Android;
• edit your display name and profile in the app;
• delete your account and its server-side data in the app.

For anything else — a copy of what we hold, a correction, an objection, or a question about this policy — write to support@getkredo.app. We may need to verify that the account is yours before acting on a request. We will respond within the period required by applicable law, and if we cannot fully grant a request — for example where the law permits or requires us to retain something — we will tell you why.

20 Children's privacy

Walkie is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we learn that personal data has been collected from a child under 13, we will take appropriate steps to delete or otherwise handle that information as required by applicable law. If you believe this has happened, contact support@getkredo.app.

21 Changes to this policy

We may update this Privacy Policy when Walkie's features, providers, processing activities, or legal obligations change. When we do, we will revise the "Last updated" date at the top of this page.

If a change materially affects how we process personal data — a new category of collected data, a new service provider, advertising, or a new purpose — we will provide appropriate notice in the app before the change takes effect, and we will obtain your consent where consent is required. We will not treat continued use of Walkie as consent to a new optional purpose for processing your personal data.

22 Contact

Walkie — support@getkredo.app

Personal Information Controller: Kredo Technologies OPC.

If you believe your rights under the Data Privacy Act have been violated, you may also contact the National Privacy Commission at privacy.gov.ph.