Privacy · last updated 5 September 2026
Your shifts, tips, hours and notes never leave your phone. There is no account, no login, and no server of ours for them to go to. We could not read your earnings if we wanted to.
Everything you enter — money, hours, workplaces, notes — is stored only on your device, never transmitted to us and never shared. It is encrypted where it sits, sealed with a key held in your phone's own secure storage (the iOS Keychain or the Android Keystore), so it stays unreadable to anything that reaches the raw storage. The key never leaves the device, so even a copy of the file taken somewhere else could not be read — not by another phone, not by a backup service, not by us. You can require a fingerprint, face or passcode to open the app, under Settings.
Backups are yours to make and keep: an export is handed to your phone's own share sheet and goes wherever you send it — your Drive, your iCloud, your email — and we never see it. Deleting the app deletes the data with it, so export first if you want to keep it.
When the app opens, it asks our update service whether a newer version of the app's code is available. That request necessarily includes:
| Sent | Why |
|---|---|
| App / project id | Which app is asking. |
| Version | Whether you already have the newest code. |
| Platform | iOS or Android build. |
| Install id | A random identifier created on install, so an update can be rolled out gradually and pulled back if it's broken. |
It never includes a shift, a total, a note, your name, your email, or your location. Like any request to any server, it does reach Expo from your phone's IP address, which we cannot avoid and would rather say than leave you to find out.
That install id is why our app-store listing does not claim "no data collected." It is a random string with nothing attached to it, and it would be easy to tick the box and hope nobody looked — but it is technically an identifier, so we say so. This service is provided by Expo (expo.dev), whose own privacy policy governs it.
There are none. No analytics SDK, no advertising, no third-party trackers, no cross-app tracking, and no data sold or shared with anyone for any purpose. This is not a plan to introduce them later — an app that knows what you earn and sells ads against it has a second customer, and it isn't you.
The site is static pages. It sets no cookies and runs no analytics or advertising scripts.
Fonts are loaded from Google Fonts, which means your browser requests those font files from Google and Google receives your IP address as part of that request. That is the only third-party request on this site.
Our hosting provider keeps ordinary server logs, as all web hosting does.
Right now that form does not store anything anywhere. It opens your own mail app with a message pre-written, and you decide whether to send it. If you do, we have your email in an inbox — used once, to tell you the app launched, and never passed to anyone else.
Ask us to delete it at any time at hello@walkedapp.com and it's gone.
If that form is ever changed to submit addresses directly to a server, this section gets rewritten before that ships — not after.
Walked isn't directed at children under 13, and it doesn't knowingly collect anything from them — or, in practice, from anyone.
If this policy changes, the date at the top changes with it. If a change ever means the app starts sending something it doesn't send today, that will be said in the app itself, not buried on this page.
hello@walkedapp.com. A real person reads it.