Privacy Policy

Introduction

Walk Buddy ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the Walk Buddy mobile application (the "App").

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

1. Information We Collect

1.1 Health and Fitness Data

Step Count Data

• Daily step counts from Apple HealthKit
• Historical step data for trend analysis
• Date and time of step activity

Important: We access this data directly from HealthKit on your device. Health data is stored locally on your device only and is never transmitted to our servers.

1.2 User-Provided Information

Onboarding and Preferences

• Your virtual pet's name
• Daily step goal (default: 5,000 steps)
• Preferred notification time
• Notification preferences
• Activity level and fitness goals

1.3 Usage and Analytics Data

App Usage Information

• Features and screens accessed
• Time spent in the App
• Frequency of App opens
• Button clicks and user interactions
• Onboarding completion status
• Virtual pet lifecycle events (birth, milestones, death, revival)

Device Information

• Device model and manufacturer
• Operating system version (iOS version)
• App version
• Device language and region settings
• Device identifiers (for analytics purposes)
• Screen resolution
• Time zone

1.4 Subscription and Payment Data

• Subscription status (active, expired, trial)
• Subscription tier (e.g., "Buddy Insurance")
• Purchase dates and renewal dates
• Product IDs and entitlements

Important: Payment information (credit card numbers, billing addresses) is collected and processed entirely by Apple through the App Store. We never have access to your payment details.

1.5 Information We Do NOT Collect

We do not collect:

• Your name, email address, or phone number (unless you provide it for support)
• Precise geolocation data
• Photos or camera access
• Contacts or calendar information
• Biometric data beyond step counts
• Social media information
• Browsing history or web activity
• Audio or video recordings

2. How We Collect Information

2.1 Directly From You

• Information you provide during onboarding
• Settings and preferences you configure
• Support inquiries and feedback

2.2 Automatically When You Use the App

• Usage data collected through Mixpanel analytics SDK
• Performance and error data
• Device information

2.3 From Apple HealthKit

• Step count data (with your explicit permission)
• Only when you grant HealthKit permissions

3. How We Use Your Information

3.1 To Provide Core App Functionality

• Display your daily step count
• Calculate progress toward your step goal
• Manage your virtual pet's health status based on activity
• Track pet lifecycle (age, milestones)
• Send daily reminder notifications

3.2 To Personalize Your Experience

• Customize notification timing based on your preferences
• Remember your pet's name and settings
• Maintain your step goal preferences
• Track your personal milestones and achievements

3.3 What We DO NOT Do With Your Data

We do not:

• Sell your personal information to third parties
• Use your health data for advertising
• Share your step count data with anyone
• Track you across other apps or websites
• Use your data for purposes unrelated to the App
• Create detailed user profiles for marketing

4. Data Storage and Security

4.1 Where Your Data is Stored

On Your Device (Local Storage)

• All health data (step counts) from HealthKit
• Your pet's information (name, birth date, milestones)
• User preferences and settings
• App state and progress

Important: Your health data never leaves your device. It is stored locally and is not transmitted to any servers.

4.2 Data Security Measures

We implement industry-standard security measures:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest (iOS encryption)
• Secure API communications
• Regular security updates
• Limited employee access to systems
• Authentication and authorization controls

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.2 Third-Party Service Providers

We share limited data with trusted third-party services that help us operate the App:

6. Your Privacy Rights

6.1 Access and Control Over Your Data

Access Your Data

• All your data is stored locally on your device
• You can view your step data through the App
• You can access your preferences in the Settings menu

Modify Your Data

• Update your notification preferences anytime
• Change your pet's name in settings
• Adjust your step goal
• Modify notification timing

Delete Your Data

• Delete all local data by uninstalling the App
• This will permanently remove your pet and all progress
• Health data in HealthKit remains under your control through iOS Health app

6.2 HealthKit Data Rights

Control Your Health Data

• Revoke HealthKit permissions anytime through iOS Settings
• Delete health data through the iOS Health app
• View and manage HealthKit sources and access

Note: Revoking HealthKit access will prevent the App from functioning properly, as step tracking is core to the experience.

7. Health Data and HealthKit

7.1 What Health Data We Access

Step Count Only

• We only request access to step count data from HealthKit
• We do not access other health metrics (heart rate, blood pressure, etc.)
• We request read-only access (write access only in development builds for debugging)

7.2 Health Data is NOT:

• Transmitted to our servers or the cloud
• Shared with third parties (including Mixpanel, RevenueCat)
• Used for advertising or marketing
• Combined with other data for profiling
• Sold or monetized in any way

7.3 No Medical Use

• The App is not a medical device
• Step count data is for informational and motivational purposes only
• Do not rely on the App for medical decisions
• Always consult healthcare professionals for medical advice

8. Third-Party Services

8.1 Mixpanel Analytics

An analytics platform that helps us understand how users interact with the App.

What Data is Shared:

• Device information (model, OS version, app version)
• Usage events (button clicks, screen views, feature usage)
• Performance metrics (load times, errors)

What is NOT Shared:

• Health data (step counts)
• Your pet's name
• Personal identifying information

8.2 RevenueCat

A subscription management platform that processes in-app purchases.

What Data is Shared:

• Device identifier (for subscription validation)
• Subscription status and purchase history
• Product IDs and entitlements

9. Children's Privacy

9.1 Age Restrictions

Minimum Age: 13 Years

• The App is not intended for children under 13
• We do not knowingly collect data from children under 13
• If you are between 13-18, you must have parental consent to use the App

9.2 COPPA Compliance

• We comply with the Children's Online Privacy Protection Act (COPPA)
• We do not knowingly collect personal information from children under 13
• We do not target advertising to children

9.3 Parental Rights

If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately at [email protected] and we will delete the information within 30 days.

10. Data Retention

10.1 How Long We Keep Your Data

Local Data (On Your Device)

• Retained until you delete the App
• Immediately deleted when you uninstall

Analytics Data (Mixpanel)

• Retained for up to 5 years
• Used for trend analysis and improvements
• Can be deleted upon request

Subscription Data (RevenueCat)

• Retained for the duration of your subscription plus 7 years
• Required for accounting, tax compliance, and fraud prevention
• Can be anonymized upon request (except where legally required)

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, new features or functionality, legal or regulatory requirements, or industry best practices.

11.1 How We Notify You

When we make material changes:

• We will update the "Last Updated" date at the top
• We will display a notice within the App
• We may send you a push notification
• For significant changes, we may require you to review and accept the new policy

Your continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the App and delete it.

12. State-Specific Privacy Rights

12.1 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Categories of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of sale of personal information (We do not sell data)
• Right to Correct: Request correction of inaccurate personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

12.2 Other States

If your state has enacted consumer privacy laws (Virginia, Colorado, Connecticut, Utah), you may have similar rights. Contact us to exercise your rights.

13. Health Information Notice

13.1 Special Protections for Health Data

Your step count data from HealthKit is considered health information and receives special protection:

• Never Transmitted: Health data stays on your device
• Never Sold: We will never sell or monetize your health data
• Never Shared: We do not share health data with third parties
• User Controlled: You control access through iOS Settings
• Purpose Limited: Used only for app functionality

13.2 No PHI Under HIPAA

The App is not a covered entity under HIPAA (Health Insurance Portability and Accountability Act). Your health data is protected by Apple's HealthKit privacy protections, this Privacy Policy, and applicable state and federal consumer privacy laws.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14.1 Response Time

We aim to respond to privacy inquiries within:

• 30 days for general questions
• 45 days for formal data rights requests (may be extended to 90 days for complex requests)