Privacy Policy

In short. Walk Flower counts your steps on your iPhone. If you use the social features, your profile and daily step totals are stored on our servers so your friends can see them. We use Google Firebase to run the app and Apple to process payments. We don't sell your data, show ads, or track you across other apps and websites.

This policy covers the Walk Flower app for iPhone and the website walkflower.com (together, the "Service"). Walk Flower is made by Tem Ab, an individual developer based in the United States ("we", "us"). We are responsible for the personal data described here. Questions go to gas.app.developers@gmail.com.

1. Information we collect

Steps and activity

The app reads step counts from your iPhone's motion sensor (Motion & Fitness) and, if you allow it, from Apple Health. From Apple Health we read step count only. We never write to Apple Health and never read any other health data. Your step history is stored on your device.

Your account publishes your daily step totals, the flowers you collected each day, and your streak to our servers so they can appear on your friends' boards. We don't upload minute-by-minute data, routes, or location.

Your account

• Account identifier. When you start using the app, it creates an anonymous account with a random user ID. No name, email address or phone number is needed for it.
• Phone number. If you sign in with your phone, Firebase Authentication sends a verification code by SMS. Your verified number is stored with your private account record.
• Google account. If you sign in with Google, Google shares your name and email address with Firebase Authentication. We use your name only to suggest a display name. We don't copy your email into our database.

Your profile

If you set up a profile, it holds your display name, your @username, an optional profile photo, your card style and short status text, your favorite flowers, and lifetime totals (steps, flowers and active days). Friends, groups, invites and the people you mute are stored with your account.

Purchases and tokens

Payments are handled by Apple. We never see your card details or your Apple ID. When you buy tokens, the app sends us Apple's signed transaction record to verify it. We keep the transaction ID, product, quantity, purchase date and store environment. To check a Premium subscription, the app sends us the signed record of the active subscription. We use it on the spot and don't store it. We keep your token balance, a history of tokens earned and spent, and the cosmetic items you own. Apple tells us when a token purchase is refunded or a refund is reversed.

Notifications

If you allow notifications, we store a push token for your device so we can send account notifications, such as a group invitation. Most reminders are scheduled on your device.

Usage analytics

The release version of the app sends usage events to Google Analytics for Firebase. Examples are opening the app, finishing onboarding, collecting a flower, and starting or completing a purchase. Events are tied to a random install identifier stored on your device. They are not tied to your name, phone number or step counts. Google may also collect technical data such as device model, OS version, app version and approximate location derived from your IP address. The app does not ask for permission to track you, so it can't access your device's advertising identifier.

Support emails

When you write to us from the app, the subject line includes the app version and your user ID so we can find your account. We keep the email and anything you choose to include.

Photos

You choose profile and group photos with the system photo picker, which gives the app only the picture you select. We resize it before uploading. If you save a poster, the app asks for permission to add it to your library. It can't read your library.

2. How we use information

• To run the app: count steps, grow flowers, keep your history, and show your Today and widget screens.
• To run the social features: show your card on friends' and group boards, send and accept invites, and let people find your username.
• To process purchases, credit and debit tokens, provide Premium features, and handle refunds.
• To send notifications you've allowed.
• To understand how the app is used, fix problems and decide what to improve, using aggregate analytics.
• To answer support requests and to prevent abuse and fraud.

We don't use your information for advertising, don't sell it, and don't share it for cross-context behavioral advertising. We don't make automated decisions that have legal or similarly significant effects on you.

If you are in the EU, the UK or a similar jurisdiction, our legal bases are: performance of our contract with you (running the app, social features and purchases), legitimate interests (analytics, security and fraud prevention, support), consent (Apple Health, notifications and photos, which you control in iOS Settings), and legal obligations (purchase records).

3. What other people can see

Walk Flower is social. Please assume the following can be seen by other Walk Flower users:

• Your public profile: display name, @username, profile photo, card style and status text, favorite flowers and lifetime totals.
• Your board entries: daily step totals, the flowers you collected each day, and your streak.

The app shows these to your friends, members of your groups, and people who look up your username. Technically, they can be requested by any signed-in Walk Flower user who knows your user ID or username. Profile photos are served from links that work for anyone who has the link. Don't put anything in your profile you wouldn't want other people to see.

When you share an invite link, anyone who opens it sees your display name and @username (and the group name for a group invite), including on walkflower.com and in link previews. Invitations you send show your name to the person you invite.

Your phone number, the people you've muted, your token balance and purchase history, and your inbox are private to you.

4. Service providers

We use these companies to run the Service. They process data on our behalf under their own terms:

Links you choose to share through other apps, such as Messages, WhatsApp or Instagram, are handled by those apps. We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a transfer of the Service to a new owner, who would be bound by this policy.

Older versions of the app also connected to a server we operate directly, identified only by an anonymous install identifier. Current versions don't use it.

5. International transfers

We and our providers are based in the United States, and your data is processed there. Where the law requires it, transfers rely on our providers' standard contractual clauses or equivalent safeguards.

6. How long we keep data

• Step history on your device stays until you delete the app.
• Account, profile and social data are kept while your account exists.
• Past weekly boards are kept as part of the board history for the weeks you took part in.
• Purchase and token records are kept as long as we need them for accounting, refunds, fraud prevention and legal obligations, including after you delete your profile.
• Google keeps analytics data for up to 14 months.
• Support emails are kept for as long as they're useful for answering you.

7. Deleting your data

In the app, go to Settings → Account Management → Delete profile. This immediately removes your public profile, profile photo, username, invite link and this week's board entry. It also clears your name, phone number, photo, status and push token from your account record, and signs you out.

Some data stays after that: your sign-in record with Firebase Authentication, your token and purchase records, past weeks' board entries (which carry your user ID but not your name), and records of invitations and friendships other people hold. To have all of this erased, email gas.app.developers@gmail.com from the app's Support link. We'll complete the request within 30 days. We'll keep only what we must keep by law.

Deleting the app removes the data stored on your device. Without a phone or Google sign-in, an anonymous account can't be recovered after the app is deleted.

8. Your choices and rights

• Permissions. You can turn off Motion & Fitness, Apple Health, notifications and photo access in iOS Settings at any time. You can also switch Apple Health off in the app.
• Profile. You can edit your name, photo, status and card at any time, and mute or remove friends.
• Access, correction, deletion, portability and objection. Depending on where you live, you may have the right to get a copy of your data, correct it, delete it, receive it in a portable format, restrict or object to its use, and withdraw consent. To use any of these rights, email us. We may ask you to confirm the request from the app so we know the account is yours. If you're in the EU or UK, you can also complain to your local data protection authority.
• California and other US states. We don't sell or share personal information as those terms are defined in US state privacy laws. You can ask what we hold and ask us to delete it. We won't treat you differently for using your rights.

9. Children

Walk Flower is not meant for children under 13, and we don't knowingly collect personal data from them. If you are under the age of digital consent where you live, use the social features only with a parent's or guardian's permission. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

10. Security

Data is sent over encrypted connections. Our database rules limit who can read and write each record, and private records are readable only by their owner. No system is perfectly secure, and we can't guarantee absolute security.

11. walkflower.com

The website uses no cookies and no advertising. It counts visits with Vercel Web Analytics, which sets no cookies and stores no identifier on your device. It records the pages you view, where you came from (the referring site and any campaign tags in the link, such as utm_source), your browser, operating system, device type and country, and whether you tapped a link to the App Store. Visits are grouped using a hash that changes every day, so they can't be linked to you or followed across days or sites. Invite codes are removed from these statistics. Our host, Vercel, also keeps standard server logs, such as IP address, browser and pages requested, to deliver the site and keep it secure. The demo video on the home page is served from Google Cloud Storage. Invite pages store the countdown in your browser's local storage, and the campaign tags of your visit are kept in session storage until you close the tab. Neither leaves your device.

12. Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use your data, we'll let you know in the app before it takes effect.

13. Contact

Tem Ab
gas.app.developers@gmail.com