Privacy | last updated 23 September 2026
Your shifts, tips, hours and notes never leave your phone. There is no account, no login, and no server of ours for them to go to. We could not read your earnings if we wanted to.
Walked is made by Offutt Works LLC, an Indiana limited liability company. Contact details are at the bottom of this page.
Everything you enter - money, hours, workplaces, notes - is stored only on your device, never transmitted to us and never shared. It is encrypted where it sits, sealed with a key held in your phone's own secure storage (the iOS Keychain or the Android Keystore), so it stays unreadable to anything that reaches the raw storage. The key never leaves the device, so even a copy of the file taken somewhere else could not be read - not by another phone, not by a backup service, not by us. You can require a fingerprint, face or passcode to open the app, under Settings.
Backups are yours to make and keep: an export is handed to your phone's own share sheet and goes wherever you send it - your Drive, your iCloud, your email - and we never see it. Deleting the app deletes the data with it, so export first if you want to keep it.
If we ever add an optional cloud-backup destination, it will be off by default, encrypted on your phone before it's sent anywhere, and it will go only to your own iCloud or Google Drive - never a Walked server. This page will describe exactly what changes before that ships.
When the app opens, it asks our update service whether a newer version of the app's code is available. That request necessarily includes:
| Sent | Why |
|---|---|
| App / project id | Which app is asking. |
| Version and runtime version | Whether you already have the newest code. |
| Platform | iOS or Android build. |
| Channel and update ids | Which release track you're on, and which update is currently running, so a rollout can be staged and pulled back if it's broken. |
| Install id | A random identifier created on install, so an update can be rolled out gradually and pulled back if it's broken. |
| A bounded error message, only if a previous update failed to start | Lets the update system diagnose its own failure. It is capped in length and describes the update system itself, not your shift data. |
It never includes a shift, a total, a note, your name, your email, or your location. Like any request to any server, it does reach Expo from your phone's IP address, which we cannot avoid and would rather say than leave you to find out.
That install id is why our app-store listing does not claim "no data collected." It is a random string with nothing attached to it, and it would be easy to tick the box and hope nobody looked - but it is technically an identifier, so we say so. This service is provided by Expo (expo.dev), whose own privacy policy governs it.
No advertising, no third-party ad trackers, no cross-app tracking, and no analytics SDK watching how you use the app. No data is sold or shared with anyone for any purpose beyond what this page describes. This is not a plan to introduce them later - an app that knows what you earn and sells ads against it has a second customer, and it isn't you.
The one exception: when you buy Walked Plus, RevenueCat, our billing provider, receives your purchase and receipt information and an anonymous app-user id assigned by the app store - never your shift data. RevenueCat uses that anonymous record for fraud prevention and its own dashboard reporting. See RevenueCat's privacy policy for how it's handled on their end.
The site is static pages. It sets no cookies and runs no analytics or advertising scripts.
Fonts are loaded from Google Fonts, which means your browser requests those font files from Google and Google receives your IP address as part of that request. That is the only third-party request on this site.
Our hosting provider keeps ordinary server logs, as all web hosting does.
Right now that form does not store anything anywhere. It opens your own mail app with a message pre-written, and you decide whether to send it. If you do, we have your email in an inbox - used once, to tell you the app launched, and never passed to anyone else.
Ask us to delete it at any time at hello@walkedapp.com and it's gone.
That's also true of support email generally: we keep it only as long as needed to help you, and delete it on request.
If that form is ever changed to submit addresses directly to a server, this section gets rewritten before that ships - not after.
Walked isn't directed at children under 13, and it doesn't knowingly collect anything from them - or, in practice, from anyone.
If this policy changes, the date at the top changes with it. If a change ever means the app starts sending something it doesn't send today, that will be said in the app itself, not buried on this page.
hello@walkedapp.com. A real person reads it.