Privacy policy

Who we are

Walked It is made by an independent developer in New Zealand, publishing as App Maker Network. For anything in this policy, email benmarshnz@gmail.com.

If you never sign in

Everything the app records stays on your phone: walk logs, GPS tracks, coverage progress, diary notes, photos, ratings, plans and settings. None of it is sent to us. Your location is read by the app to colour in the route while you walk, and that processing happens entirely on the device.

The app does download things from our hosting: offline map packs, trail images, and community summaries such as average ratings. Those are ordinary web requests, so like any download they include your device's IP address. We attach no account, no identifier and no tracking to them, and we do not use them to work out who you are.

If you sign in

Signing in is optional and exists so your diary can survive a lost or replaced phone, and so your ratings can count toward community averages. When you sign in, the app backs up the following to our server:

• walk logs and their coverage records
• GPS tracks from your live walks
• diary notes
• photo metadata: captions, tags, dates and a file fingerprint. The photo files themselves are never uploaded by sync.
• ratings you have given trails
• wishlist entries and planned walks
• badges you have earned

We use this data to store your backup and to compute anonymous community averages for trail ratings. Nothing else. We do not sell it, share it with advertisers, or use it to build a profile of you.

Signing in and your email address

There are two ways to sign in and neither uses a password. With Google Sign-In we receive your Google account email address. With email sign-in, you type your address and we send you a six-digit code; the code is single use and expires after 15 minutes. Either way, your email address is stored with your account and is used only to sign you in and to match your backup to you. Sign-in emails are delivered through Resend, an email delivery service, which processes the address for that purpose.

Shared photos

A photo leaves your phone only when you tick the box "Others can see this photo" on that photo. Before upload, the app strips the photo's embedded metadata (such as the camera's location tag) and scales it down. Every shared photo is reviewed by a human before any other walker can see it, and approved photos appear anonymously: other people see the photo and roughly when it was taken, never your name or account. You can withdraw a shared photo at any time by unticking the box, and withdrawal removes it for everyone. Anyone can report a community photo from inside the app, and reports are reviewed by a person.

Feedback

The in-app feedback form sends exactly what it shows you: your message, an optional email address if you want a reply, and a short context block (app version, Android version, device model) that you can see and edit before sending. It arrives with the developer as an email and is kept only as long as it is useful for fixing the problem.

No ads, no analytics, no trackers

The app contains no advertising, no analytics library and no crash-reporting or tracking software of any kind. We cannot see how you use the app. Google Play itself gathers basic crash statistics from Android devices; that happens between your device and Google under Google's own policies and is not something we add or can switch off.

Where your data lives and how it is protected

Account data and backups are stored on Cloudflare's platform, which is also where our map hosting lives. All traffic between the app and the server is encrypted in transit with HTTPS. Pending shared photos sit in a private store that is not publicly readable; only approved photos are published, under anonymous file names.

Keeping and deleting your data

We keep your synced data for as long as your account exists. You can delete your account and everything on the server, including any shared photos, in two ways:

• in the app, under Settings, Account, Delete account
• on the web at appmakernetwork.com/walkedit/delete-account, which works even if you no longer have the app

Deletion is immediate and covers every record we hold for you. The diary on your phone is yours and stays put; remove it by clearing the app's storage or uninstalling.

Children

Walked It is suitable for a general audience and collects no personal information from signed-out use. Accounts require an email address, so we ask that children use the app signed out or under a parent's guidance.

Your rights

Under the New Zealand Privacy Act 2020, and similar laws elsewhere, you can ask us what personal information we hold about you, ask for corrections, and ask for deletion. For a signed-out user the honest answer is that we hold nothing. For a signed-in user, the deletion tools above remove everything, and any other request can go to the email address below.

Map and elevation data

Trail and map data comes from OpenStreetMap contributors, available under the Open Database Licence (ODbL). Hillshade and contour layers are derived from elevation data that is Crown copyright, Land Information New Zealand and the New Zealand Government, with additional elevation data courtesy of the U.S. Geological Survey. Full notices are in the app under Settings, About, Map data and licences. This section is about attribution, not about you: none of that data involves any personal information.

Changes to this policy

If the app's data handling changes, this page changes first and the date at the top moves. We will not quietly widen what we collect.

Contact

Questions, requests, or anything unclear: benmarshnz@gmail.com. See also the terms of use.