Privacy policy
Walking Quest turns your daily walking into progress along a route between two cities. To do that, your daily step counts leave your phone and are stored on our servers. This page says exactly what we hold, what we don't, and who else is involved.
Health and fitness data
With your permission, the app reads your daily step count and, where your phone has recorded one, your daily walking distance from Apple Health (iOS) or Health Connect (Android). We read one total per day — never individual workouts, heart rate, sleep, or anything else in your health record.
Those daily totals are sent to and stored on our servers, one row per day, alongside the figures we derive from them: your lifetime step total, today's steps, your best day, your current streak and your total distance. We store them because your challenge progress, your streaks and the standings your friends see all have to be computed and compared somewhere that isn't your phone. We keep a log of the sync updates we apply, so a miscounted day can be traced.
Your height and weight are different. If you enter them, they stay in encrypted storage on your own device. They are never sent to us and never stored by us — if an older version of the app still sends them, our servers discard them without recording them anywhere.
Account and profile
When you sign in we receive an account identifier from Firebase Authentication — your Apple ID on iOS, your Google Account on Android — along with the email address that provider releases to us. We never see your Apple or Google password. We also store the display name you choose, your daily step goal and its history, the challenges you create, join or complete (including their invite codes), whether your steps come from your health app or are entered manually, and the time zone and language your device reports — the last two so reminders arrive at the right hour and in the right language.
Your display name, initials and lifetime step total are visible to other people in challenges you join. Your email address, step history and profile details are not.
Analytics and diagnostics
We use Firebase Analytics to see which screens and features get used — things like screen views, challenge actions and subscription-page steps. These events are tagged with a one-way hash of your account identifier, not your email or name, and never carry your step counts or body measurements. Firebase itself also collects standard information such as device model, OS version, app version and language.
The Android app additionally uses Sentry for crash reports. A crash report carries a hashed account identifier and technical details about the failure — no health data. The iOS app does not currently send crash reports to us.
Notifications
If you turn on reminders, your device registers a push token with Firebase Cloud Messaging so we can send them. You can turn notifications off in the app or in your phone's settings at any time.
What we never do
We never sell your data and never share your health data with advertisers or data brokers. Walking Quest does no cross-app or cross-site tracking, carries no advertising SDKs, and never asks your phone for your location, contacts, photos, microphone or messages.
Who else processes your data
Google (Firebase Authentication, Cloud Firestore, Realtime Database, Analytics and Cloud Messaging) hosts our infrastructure and processes the data described above. RevenueCat processes your subscription status. Sentry processes Android crash reports. Each acts as our processor under contract, and none of them receives your data for their own advertising.
Cookies on this website
This site sets no advertising or tracking cookies. It is a static marketing site — nothing on it reads your app data.
In-app purchases
PRO is billed through the app store you installed from, and payment processing is entirely out of our hands:
On iOS, Apple's In-App Purchase system processes the payment and handles your card details directly — we never see or store them. See Apple's privacy policy for how they handle payment data.
On Android, Google Play's billing system processes the payment and handles your card details directly — we never see or store them. See Google's privacy policy for how they handle payment data.
Either way, we only receive confirmation from our subscription vendor (RevenueCat) that a subscription is active, so we can unlock PRO features on your account.
Delete your account
Delete your account any time from Profile in the app — your profile, your stored daily step history and your challenge participation are removed within 30 days. If you can't access the app, you can request deletion from the web instead using our contact form; include the email, Apple ID, or Google account tied to your account and we'll confirm once it's done.
