PokeWalk Privacy Policy

Effective October 23, 2026. Contact: pokewalk@bryanweis.com

1. What we collect

PokeWalk collects data only when you sign in to a PokeWalk account. If you never sign in, everything stays on your phone.

Walking and running distance (Apple Health)

PokeWalk asks to read your walking and running distance from Apple Health. The Health samples themselves are read on your phone and are not uploaded. The game turns that distance into EXP, gold and item finds, and keeps running distance totals and the distance counted each day inside your game save. When you are signed in, the game save, including those distance totals, is uploaded to your account as a backup. PokeWalk never writes anything to Apple Health.

Account identifier

When you sign in with Apple or your phone number, we receive an identifier for your account from that sign-in method. It is stored with our authentication provider and is used only to sign you in.

Email address

PokeWalk does not ask for your email address. Sign in with Apple is used without requesting your name or email address, and signing in with your phone number uses only the number.

Phone number

If you sign in with your phone number, we store the number with your account and use it to text you a sign-in code. Phone sign-in works with a mobile number that can receive text messages.

Username

You choose a username. It is stored with your account to identify you in the game. If a later update adds friends, it is the name your friends see (see section 6).

Game save

Your pets, items, resources (gold, wood and stone), settings and progress are stored as one game save per account so that it can be backed up and restored. As described above, the save contains distance totals that came from Apple Health.

PokeWalk Unlimited purchase identifiers

If you buy PokeWalk Unlimited and are signed in, we store the transaction identifiers Apple provides so that the purchase is linked to your account.

Device verification keys

PokeWalk uses Apple's App Attest to check that requests come from the real PokeWalk app. We store an App Attest key identifier and public key for your device. They are not linked to your account.

Server logs

Our servers keep logs that include your IP address and timestamps, for security and to prevent abuse. Rate limits are enforced using one-way hashes, not readable identifiers. Logs are not linked to your account.

2. What stays on your phone

• Health samples: read from Apple Health on your phone when the game needs them.
• Motion & Fitness activity: used on your phone to notice that you have started walking. It is never stored or sent.
• Location: used only as a wake-up, so the app can notice that a walk may be starting. Your location is never stored and never leaves your phone.
• Notifications: walk alerts and recaps are scheduled on your phone. PokeWalk does not send push notifications from a server.

3. How we use data

We use data to run the game, to back up and restore your save, to keep accounts secure and to prevent abuse. We do not use data for advertising, we do not sell it and we do not build profiles of you.

4. Service providers and other parties

We use the service providers below to run PokeWalk. Each one processes data only on PokeWalk's behalf to provide its service and may not use that data for anything else. This is why using them is not sharing your data with other companies.

Supabase (hosting and database)

Supabase hosts our database and server functions. It stores your account, username, game save and sign-in records, and runs the sign-in and save functions. The servers are in the United States.

Twilio (SMS sign-in codes)

Twilio Verify sends the text message with your sign-in code if you sign in with your phone number. It receives your phone number and the code, and nothing else.

Other parties

Apple (Sign in with Apple, App Attest and payments) handles sign-in and payments under its own privacy policy. PokeWalk sends Apple no Health data. GitHub stores our encrypted nightly database backups on PokeWalk's behalf; the backups are encrypted before they are stored.

5. Purchases

Apple processes all payments. PokeWalk receives transaction identifiers so that PokeWalk Unlimited can be linked to your account. We never see your card details.

6. Future friend features (opt-in)

Friend features are not part of the current version. They are described here so that a later update will not need a change to this policy. If a later update adds friends, your username and the stats you choose to share (distance, gold and EXP) will be visible only to friends you accept. Sharing will be off unless you turn it on. Nothing changes for players who do not opt in.

7. Retention and deletion

We keep your data while your account exists. In the app, go to Settings and choose Delete account. This removes your account, username and cloud save from the live database immediately and revokes Sign in with Apple. Encrypted backups roll off within 30 days. Without an account, all of your data stays on your phone and is removed when you delete the app.

8. Your choices

• Change your username in the app (a short waiting period applies between changes).
• Delete your account from Settings, as described above.
• Turn off Health, Motion & Fitness, location or notification access at any time in iOS Settings. The game keeps working, but may not be able to count walks.
• Email pokewalk@bryanweis.com to ask what we hold about you or to ask for deletion.

9. Children

PokeWalk is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, email us and we will delete it.

10. Security

Data is sent over HTTPS. Database rows are protected so that each account can read only its own data. Device attestation checks that requests come from the real app, and our database backups are encrypted. No system is perfectly secure, but we work to protect your data.

11. Changes and contact

If we change this policy we will post the new version here and update the effective date. For questions, email pokewalk@bryanweis.com.