Privacy Policy

1. Who we are

walkdeeznuts (the "app") is operated by Walkdeeznuts Inc., registered at Office 4, Sector H-12, Islamabad 44000, Pakistan ("we", "us", "our"). We are the data controller for the personal information described in this policy.

This policy explains what we collect when you use the app, why we collect it, who we share it with, and what control you have over it. It applies to the walkdeeznuts mobile app and this website.

2. What we collect

We deliberately collect as little as we can while still making the app work. In practice that is your location while you are using the app, and a small amount of basic account information.

We do not collect payment card details, contacts, photos, health data, or advertising identifiers, and we do not sell your personal information.

3. Location data

Location is the heart of how the app works and the most sensitive thing we handle, so it gets its own section.

• We ask before we collect it. The app requests location permission from your device, and you can refuse or revoke it at any time in your device settings. If you refuse, matching will not work, but you can still use the rest of the app.
• We collect it while you are available. Location is collected when you mark yourself as free to walk and during an active walk. When you are not available and not walking, the app is not collecting your location.
• Other users see proximity, not a pin. Other walkers are shown an approximate distance and general direction, not your exact coordinates or address.
• Background collection: the app does not collect your location in the background. Location is collected only while the app is open and you are marked available or on a walk. If the app collects location in the background, both Apple and Google require this to be disclosed prominently and justified.
• Retention: we keep location history for 30 days, after which it is deleted or aggregated so it can no longer identify you.

4. Why we use your information

• To create, authenticate and secure your account.
• To match you with nearby people who are also available to walk.
• To suggest a safe, public meeting point and a route.
• To operate safety features — blocking, reporting, and investigating abuse.
• To fix bugs, diagnose crashes and improve the app.
• To respond when you contact support.
• To comply with law and enforce our Terms of Service.

We do not use your information to build advertising profiles, and we do not make decisions with legal or similarly significant effects about you using automated processing alone.

5. Legal bases (UK/EU users)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the app you asked for, including matching and walks.
• Consent — for location access and any optional analytics. You can withdraw consent at any time.
• Legitimate interests — to keep the service secure, prevent abuse, and improve the product, balanced against your rights.
• Legal obligation — where we must retain or disclose information by law.

6. Who we share it with

We share personal information only in these situations:

• With other users — your display name, profile details you have chosen to show, and approximate proximity while you are available to walk.
• With service providers who process data on our behalf under contract, limited to what they need: Supabase (database and authentication), Cloudflare (hosting and content delivery), Mapbox (maps and routing), Sentry (crash reporting), PostHog (product analytics) and Firebase Cloud Messaging (push notifications).
• For legal reasons — where we are required to by law, court order, or to protect the rights, safety or property of our users or the public.
• In a business transfer — if we are involved in a merger, acquisition or sale of assets, your information may transfer, and we will tell you before it becomes subject to a different policy.

We do not sell or rent personal information to third parties.

7. How long we keep it

• Account information — for as long as your account is open.
• Location data — 30 days.
• Usage and crash logs — 12 months.
• Safety reports — 24 months, so that repeat behaviour can be identified.

When you delete your account we delete or anonymise your personal information within 30 days, except where we must keep something to meet a legal obligation or to resolve an outstanding safety report.

8. Your rights

Depending on where you live, you may have the right to:

• access a copy of the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• delete your personal information;
• object to or restrict certain processing;
• withdraw consent at any time, including location permission;
• receive your data in a portable, machine-readable format;
• complain to a data protection authority.

To exercise any of these, email privacy@walkdeeznuts.com. We will respond within the period required by applicable law — generally one month. If you are in the UK you may complain to the Information Commissioner's Office; in the EU, to your local supervisory authority.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we will not discriminate against you for exercising your rights.

9. Deleting your account

You can delete your account and its associated data at any time from Settings → Account → Delete account inside the app. If you no longer have the app installed, use our account deletion page.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls limiting who on our team can reach personal data, and regular review of our providers. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your rights we will notify you and the relevant regulator as the law requires.

11. Children

The app is not intended for children under 18, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact privacy@walkdeeznuts.com and we will delete it.

12. International transfers

We store and process information in the United States and Pakistan. Where we transfer personal information out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

13. Changes to this policy

We may update this policy as the app changes. We will revise the "last updated" date above, and for significant changes we will notify you in the app or by email before they take effect.

14. Contact us

Questions, requests or complaints about privacy:

• Email: privacy@walkdeeznuts.com
• Postal address: Office 4, Sector H-12, Islamabad 44000, Pakistan
• Data protection contact: Privacy Lead, privacy@walkdeeznuts.com