Privacy
The short version
- You sign in with Apple on iPhone, or with Google on Android, when you set up Walkito.
- Your plan, your answers, your pain check-ins, your test results and the sessions you finish are saved to your account, so they come back on a new phone or after you reinstall the app.
- Apple Health and Health Connect data stay on your phone and are never uploaded.
- A few services receive data so the app can work: Supabase (your account and plan), PostHog (usage analytics), RevenueCat (purchases), Superwall (subscription screens), Expo (notifications, app updates, speed and crash reports), Apple (sign-in, payments and notifications) Google (sign-in on Android) and Resend (emails).
- No ads, no ad tracking, and we never sell your data.
Your account
Setting up Walkito signs you in with Apple. Apple gives us an identifier, your name and your email address, or a private relay address if you choose to hide yours. The identifier becomes your account on our server. Your first name and your email address are stored with your account.
On Android, setup signs you in with Google instead. Google, like Apple, gives us an identifier and your email address, and they are used the same way.
If Sign in with Apple is not available on your device, the app uses an anonymous account instead. Signing in with an email and password works only for accounts we set up ourselves, for example for App Store review. There is no sign-up with email.
A sign-in key is kept in your iPhone’s Keychain. It survives deleting the app, so a reinstall can find your account again. Delete account removes it.
Your email address
We use your email address to answer you when you contact support, to recognize your account in our own reports, and to send you emails about your plan: reminders, a weekly summary, your test results and, now and then, an offer on Walkito Premium. The emails are written from your own plan and use your first name. Every email has a link to unsubscribe, and you can also write to us. We never share your address with anyone for their own marketing.
What is saved to your account
Everything is saved on your phone first. Then, in the background, it is copied to your account on our server, so it comes back when you sign in on a new phone or after you reinstall the app. That copy holds:
- Your answers and settings: which foot and where it hurts, your foot type, your goal and sport, days a week, session length, reminder time, the equipment you do not have, and your start date.
- Your goals and your progress on each one.
- Your pain check-ins: every pain score you log, when you logged it and where it hurt, and whether you did the morning stretch.
- Your test results: calf raises, arch hold and balance, left and right.
- Your sessions: each week’s plan, the sessions you finish, which exercises you did, skipped or swapped, how the session felt, any pain during it, and exercises you marked as ones you cannot do.
- Your app use: how many times you opened the app each day and for how long.
We also use this copy to see how the plan is being used and whether people reach their goals, so we can improve it.
What stays on your phone
The age, sex, weight and shoe size you give during setup, your settings for the app’s look and language, the exercise videos you have downloaded, and every Apple Health or Health Connect figure. These are kept only in the app’s own storage on the device.
Apple Health
With your permission, Walkito reads step count, walking speed, walking asymmetry, flights climbed, resting heart rate, heart rate, active energy, sleep analysis and workouts. It writes the sessions you finish back to Apple Health as workouts and mindful minutes.
This data is read and summarized on your phone. It is never uploaded, never saved to your account, and never used for advertising, marketing or data mining. We never sell it.
You can withdraw any permission at any time in Settings → Apps → Health → Data Access & Devices → Walkito. The app keeps working, and the parts that relied on that data stop appearing.
Health Connect (Android)
On Android, with your permission, Walkito reads steps, floors climbed, resting heart rate, heart rate, sleep sessions, exercise sessions, distance and active calories burned from Health Connect. It writes the sessions you finish back as exercise sessions.
We use this data only to adjust your plan: how much you moved, slept and ran shapes the day’s session and the hints you see. It is read and summarized on your phone. Health Connect data is never uploaded, never sold, never shared with third parties and never used for advertising. Walkito’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
You can withdraw any permission at any time in the Health Connect app, or in Android Settings → Security & privacy → Privacy → Health Connect → App permissions → Walkito. The app keeps working without it.
What we collect, how and why
Supabase: your account and plan
What: your account, your email address, everything listed under “What is saved to your account”, your notification address (if you turned notifications on), your invite code and which account used which code. Exercise videos are downloaded from Supabase storage.
Why: to run your account, bring your plan back on a new phone, answer support requests, make invites work, and deliver the exercise videos.
PostHog: usage analytics
What: events that say something happened in the app, for example that an onboarding step was shown, a session, check-in or test was finished and whether the session felt easy, OK or hard, a goal was reached, a plan setting was changed (not what to), or the purchase screen was opened. Also the screens you visit, and the answers to a few onboarding questions: where you heard about Walkito, your goal, your sport and how much you run. Your goal, or the name of a goal you reached, can hint at your condition. Your device model, iOS and app version, language and time zone are attached, and PostHog works out an approximate location (country and city) from your IP address. Events are linked to a random ID, the same one RevenueCat uses. Once you sign in, the email address and name Apple or Google gave us are added to it, so we can write to you if you get stuck.
Never sent: pain scores, pain areas, test results, Apple Health readings, age or weight. Nothing on your screen is recorded.
Why: to see where people get stuck and to improve the app.
RevenueCat: purchases
What: a random ID, your App Store purchase and subscription history, the analytics ID above, and where you said you heard about Walkito. On iPhone, also whether you installed Walkito from an Apple Ads search ad and, if so, which campaign and search term, from Apple's AdServices. That needs no tracking permission and uses no advertising identifier.
Why: to know what you have bought and unlock it, and to see which channels lead to purchases.
Expo: notifications, updates, speed and crashes
What: how long the app takes to start and to open each screen, errors and crash reports, the same events PostHog gets, and your device model, iOS and app version, language and a random installation ID. App updates are downloaded from Expo. When someone uses your invite code, the notification that tells you goes through Expo’s push service. Daily reminders are scheduled on your phone and do not go through any server.
Why: to keep the app fast and working, keep it up to date, and deliver invite notifications.
Superwall: subscription screens
What: your account ID, your first name, the goal and sport you picked when you set up your plan, the first step of your plan, the days and minutes you chose, the date of your next progress check, your app language, which subscription screens you saw and what you tapped on them, and whether you already subscribe. Never your pain, your answers about your body, or anything from Apple Health or Health Connect.
Why: to show the subscription screen, address it to you and your plan, and test which version works best. Payments still go through Apple and RevenueCat.
Resend: emails
What: your email address, your first name and the content of each email we send you, which is written from your plan.
Why: to deliver those emails and to tell us whether they arrived.
Apple: sign-in, payments and notifications
Sign in with Apple shares the name and email you choose. Payments are handled by Apple, and we never see your card details. Notifications are delivered through Apple’s push notification service.
Every service above receives your IP address with each request, as any server does.
What we do not do
No advertising, no ad or attribution SDKs, and no advertising identifier. We do not track you across other companies’ apps or websites. We do not sell your data, and we do not share anything you log for anyone else’s use. The services above process it only to provide their service to us.
How long we keep it
- Your account and everything saved to it: until you delete your account.
- Analytics, speed and crash data: up to 12 months.
- Purchase records: kept by Apple and RevenueCat as long as billing, accounting and tax law require.
- What is on your phone: until you delete your account or the app.
Deleting your account
In the app, go to Profile → Delete account. This deletes your account on our server with everything saved to it: your answers and settings, goals, pain check-ins, test results, sessions, app use, email address, notification address and invite code. It then removes the sign-in key and clears the phone. It cannot be undone. You can also write to hello@walkito.site and we will delete it for you.
Deleting the app on its own removes only what is on the phone. Your account stays on our server and comes back when you sign in again.
Delete account does not remove purchase records at RevenueCat, analytics at PostHog, or the speed and crash data Expo holds. To have those deleted, write to the same address. Workouts and mindful minutes Walkito wrote to Apple Health stay there until you delete them in Health. Deleting your account does not cancel a subscription. Only Apple can do that, in Settings → your name → Subscriptions.
Children
Walkito is not for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has used the app, write to hello@walkito.site and we will delete their data.
Your rights
If you are in the EU or the UK, data protection law gives you rights over your personal data. We rely on these legal bases:
- Contract: your account, your saved plan, purchases, invites and notifications, which we need to provide the app you asked for.
- Legitimate interest: analytics and speed and crash data, to understand and improve the app. You can object to this.
- Consent: Apple Health and Health Connect access, which you can withdraw at any time in Settings. That data never leaves your phone.
You can ask to access, correct, delete or receive a copy of your data, and you can object to or ask us to restrict how we use it. Write to hello@walkito.site. You can also complain to your local data protection authority. Some of the services above process data outside your country, including in the United States, under their own safeguards for international transfers.
Website email signups
If you sign up on the website for the printable exercise sheets and the 7-day starter plan, we store your email address, the language you were reading in, which page you signed up on, and a record of the confirmation and each email we sent you.
Why: to send you the sheets and the seven daily emails you asked for, and nothing else.
Processors: Resend (delivers the emails) and Supabase (stores the signup). Both process the data only to provide their service to us.
No account is created. A website signup does not create an app account. The data is separate from any app data.
Unsubscribe: every email has a one-click unsubscribe link. After you unsubscribe, we stop sending and delete your data within 30 days. You can also write to hello@walkito.site.
No cookies, no trackers. The website does not set any cookies and does not load any analytics or tracking script.
AI assistants (ChatGPT and Claude)
Walkito can be used inside ChatGPT and Claude (how it works). When you ask there, the assistant may call one of our tools and send our server the settings it chose: for example the painful area, minutes a day, days a week, equipment and side, and, if you mentioned them, today’s pain or a test result, which decide what is shown. Our server uses them to put together the exercises and the plan, and keeps nothing.
- No messages, names, email addresses, pain values or IP addresses are stored.
- Each call is logged only as the tool’s name, the assistant (ChatGPT or Claude), the plan settings (area, minutes, days, equipment, side), how long it took and whether it worked.
- A plan code (WK-…) holds only the plan’s settings and which assistant made it, nothing about you.
- What you type in ChatGPT or Claude is handled by OpenAI or Anthropic under their own privacy policies.
Not medical advice
Walkito is an exercise program for heel and foot pain. It does not diagnose any condition and it is not a substitute for a clinician.
Changes
If what we collect changes, we update this page and the date at the top.
Contact
Walkito
hello@walkito.site