LEGAL

Privacy Policy

How Walkaching collects, uses, shares, protects, and deletes your information, including health and fitness data and account deletion.

Effective Date: October 6, 2026
Last Updated: October 16, 2026

Walkaching (“Walkaching,” “we,” “us”) respects your privacy. This Privacy Policy explains what information we collect through the Walkaching mobile app, the website at walkaching.com, and related services (the “Service”), how we use it, who can see it, how long we keep it, and the choices you have. It should be read together with our Terms and Conditions.

1. Information We Collect

We collect the information you give us and the information the app needs to run your account.

Account information: your name, email address, and a password (we only keep a salted, one-way hash of it, never the password itself).
Username / display name: the name shown to other users in challenges and leaderboards.
Profile photo: optional, where the feature is available.
Authentication information: sign-in sessions and tokens, and, if you choose to sign in with Google or Apple, the account identifier and email address they share with us. We never receive your Google or Apple password.
Referral information: your referral code and who invited you or whom you invited.
Date of birth / age: Walkaching does not currently ask for your date of birth. You confirm that you meet the minimum age described in Section 18. If we add an age check in the future we will tell you here first.

2. Fitness and Activity Information

With your permission, Walkaching reads fitness information from Apple Health (iPhone) or Health Connect (Android). We only read this information; we never write to it. It includes:

Step count and walking activity, including the dates and times of each recorded period;
Distance, calories, and active minutes where your device provides them;
Which app or device recorded the steps;
Your challenge participation and challenge progress based on those steps.

Reading this information is optional, but challenges and leaderboards cannot work without it. See Section 8 for how we treat health and fitness data.

3. Device and Technical Information

When you use the app or website our servers receive and record technical information, such as:

Device type and model, operating system and version, and app version;
An app-generated device identifier and a cryptographic key used to sign requests, so we can tell genuine requests from tampered ones;
IP address, time zone, and request timestamps;
Diagnostics, errors, and crash information that reach our servers;
Security logs, such as failed sign-ins, rejected or repeated requests, and fraud signals.

The app does not currently include third-party advertising or analytics software.

4. Challenge and Usage Information

We keep records of how you use Walkaching, including:

Challenges you create or join, and your results and rankings;
Leaderboard entries and the steps counted toward them;
Rewards, prizes, achievements, and badges;
Your Walkaching Coins activity (see Section 5);
Notifications we send you, and your notification settings;
Account activity such as sign-ups, sign-ins, and support requests you send us.

5. Walkaching Coins

Walkaching Coins are virtual units used inside the Service (see our Terms and Conditions). We record, for each account:

Your coin balance, coins earned, and coins spent;
Challenge entry transactions and refunds;
Prizes, rewards, signup, referral, and Beta bonuses;
Administrative adjustments and corrections;
Your full transaction history, with dates and references to the related challenge.

These records are kept as an append-only ledger so balances can be audited and disputes resolved. Some of them must be kept even after an account is deleted (see Sections 14 and 15).

6. Payment Information

Walkaching does not currently sell coins and does not currently offer cash-in, cash-out, or redemption. If we add website-based or in-app payments, cash-in, cash-out, redemption, or similar features, those transactions may be handled by third-party payment providers, such as app stores, e-wallets, or banks. They collect and process your payment details under their own terms and privacy policies. Walkaching does not store complete payment card numbers. We would receive only limited information, such as a transaction reference, amount, status, and a partial identifier, so we can credit coins and keep records.

7. How Information Is Used

We use your information to:

Create your account and authenticate you;
Track steps and calculate challenge progress, rankings, and leaderboards;
Run challenges, determine winners, and pay rewards;
Manage your coin balance and transaction history;
Prevent fraud and cheating, and keep the Service and its users secure;
Send service messages, such as verification codes, security notices, and challenge updates;
Provide customer support and respond to your requests;
Understand how the Service is used and improve it;
Comply with legal obligations and enforce our Terms.

8. Health and Fitness Data

We do not sell health or fitness information to advertisers or anyone else.
We do not use health or fitness information for targeted advertising or to build advertising profiles.
We use it only to run the Service: counting steps, challenges, leaderboards, rewards, anti-cheating, and security.
You can revoke the permission at any time in your device settings (Apple Health on iPhone, or Health Connect on Android). Features that depend on it, including step counting and challenges, may stop working after you revoke it.
Deleting your account deletes the step and activity records we hold for you (see Section 15).

9. Location

Walkaching does not ask for, and does not collect, your device’s GPS or precise location, and the app does not request location permission. Our servers may infer an approximate location (such as country or region) from your IP address for security, fraud prevention, and legal compliance. Your time-zone setting is used to group your steps into days.

10. Application Permissions

The permissions the app actually uses are:

Health / fitness (Apple Health on iPhone, Health Connect on Android): to read your steps and related activity. On Android this includes reading steps, reading health data in the background so steps can sync, and the physical activity permission.
Photos: only when you choose to add a picture to a challenge or prize. The app receives just the photos you pick.
Internet access: to talk to our servers.
Notifications: notifications are currently shown inside the app. If we add push notifications we will ask for your permission first.

The app does not use your camera, microphone, contacts, or location.

12. Public Challenges and Leaderboards

Walkaching is a social service. Depending on the challenge, other users may see your display name, profile picture, ranking, steps or challenge score, challenge progress, results, and rewards or achievements. Participants of a challenge can see who else joined. Challenge hosts can see the participants of their challenge. Do not use a display name that you do not want others to see.

You can also use Walkaching as a guest before signing up. A guest account is linked to a random identifier created by the app on your device; it has no email address or password. Guests choose a display name, and their steps, badges and Free challenge entries are stored like any other account’s. Other users see a guest’s display name, ranking and steps in the challenges they join. If you sign up, the guest account becomes your account and keeps that progress. If you log in to a different existing account instead, or choose “Delete Guest Data”, the guest account and its personal data are deleted.

13. Data Security

We use reasonable technical and organizational safeguards, including encrypted connections (HTTPS), hashed passwords, signed and rate-limited API requests, encryption of our database at rest, access controls limited to the staff who need them, and logging and monitoring. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private.

14. Data Retention

We keep information only as long as reasonably necessary for the purposes in this policy. While your account is active we keep your account, activity, and challenge history. Some records are kept longer where needed for legal, security, fraud-prevention, accounting and financial, and dispute-resolution reasons, such as the coin ledger and security logs. After an account is permanently deleted, the rules in Section 15 apply. Encrypted backups of our systems may hold deleted data for a short time until they expire.

15. Account Deletion

You can ask us to delete your account at any time: in the app go to Profile → Delete Account, or on the website open My account and choose Delete account. For your security we ask for your password to confirm. Step-by-step instructions are on our Delete Account page.

How deletion works

30-day grace period. Your account is not erased immediately. It is marked “pending deletion” and scheduled for permanent deletion 30 days after your request. You are signed out everywhere.
You can cancel. During the 30 days, sign in to Walkaching and choose Cancel Account Deletion. Signing in alone does not cancel it. If you cancel, your account and coins are exactly as you left them.
Nothing is lost during the grace period. Your coins are not touched until permanent deletion.

What happens at permanent deletion

All remaining Walkaching Coins are forfeited, including earned coins, challenge rewards, promotional and signup coins, Beta coins, and any other virtual balance. Forfeited coins cannot be restored or transferred, and a new account does not inherit them.
Your profile, name, display name, picture, and sign-in details are deleted or anonymized.
Your step, health, and activity records, notifications, achievements, sign-in sessions, and push settings are deleted.
Your challenge history and rankings may remain in challenges other people took part in, shown as “Deleted user” and no longer linked to your name, so that results stay accurate for everyone.
Your email address is released, so you may register again with it, and the new account starts fresh. We keep only a one-way cryptographic hash of the old address, for fraud prevention and dispute handling.

What we may keep

We keep, in anonymized form where possible, records we are required or permitted to keep: transaction and coin ledger records, challenge results and settlements, referral records, fraud-prevention and security logs, and administrative audit records, for accounting, security, dispute, and legal-compliance purposes.

Limits

We cannot delete an account while you host a challenge that has not finished; please cancel or finish it first. If you are still in a paid challenge that has not been settled, permanent deletion waits until it is settled. If you only signed in with Google or Apple and never set a password, first use “Forgot password” to create one, so we can confirm it is you.

16. User Privacy Rights

Depending on where you live, you may have the right to:

Be informed about how your information is processed (this policy);
Access the personal information we hold about you;
Correct inaccurate or incomplete information (most details can be edited in the app);
Object to certain processing, or withdraw consent you have given;
Request erasure or blocking of your information (see Section 15);
Receive your information in a commonly used format (data portability);
Claim compensation for damages caused by inaccurate, unlawful, or unauthorized use of your data;
Lodge a complaint with the data protection authority in your country.

To exercise a right, email admin@walkaching.com from the address on your account. We may ask you to verify your identity first, and we aim to respond within a reasonable time, normally within 30 days. We may decline a request where the law allows, for example when we must keep a record.

17. Philippines Data Privacy

Walkaching processes personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and the applicable requirements and guidance of the National Privacy Commission (NPC). We process personal information on the basis of your consent, to perform our agreement with you, to comply with legal obligations, and for our legitimate interests in running a secure and fair Service. Under the Act you have the rights listed in Section 16, and you may complain to the NPC (privacy.gov.ph). Questions about data protection can be sent to the contact in Section 26.

18. Children’s Privacy

Walkaching is not directed to children under 13, and we do not knowingly collect personal information from them. You must meet the minimum age requirement in our Terms and Conditions. Where the law requires a parent or legal guardian to consent for a younger user, that consent must be obtained first. If you believe a child has given us personal information without the required consent, contact us and we will delete it.

19. Walkaching Beta Program

Walkaching Beta runs on the same real Walkaching accounts, backend, and infrastructure as the live service. Your account is a real account.
Beta features and data may be experimental and may change or contain errors.
We may give Beta users Beta coins for testing.
Beta-generated application data, such as challenges, step records, results, and balances created during Beta, may be reset when Beta ends.
Accounts that are meant to continue after Beta may be kept.
Beta coins, rewards, and results should not be treated as permanent unless we explicitly say so.

20. International Processing

Our servers and database are hosted in Singapore, and some of our service providers (such as our content delivery and email providers) may process information in other countries. When information is processed outside the Philippines we take steps to protect it, such as using providers with appropriate security commitments and contracts, as required by applicable law.

21. Third-Party Services

We rely on these kinds of services, which process information on our behalf:

Amazon Web Services: cloud hosting and database in Singapore, and email delivery.
Cloudflare: domain name service, content delivery, and website security for walkaching.com.
Zoho Mail: the mailbox that receives messages sent to our support address.
Google and Apple: only if you choose to sign in with them, and for the Apple Health, Health Connect, Google Play, and App Store services of your device.

These providers have their own privacy policies. We may add or change providers, and will update this policy if the change affects how your information is handled.

22. Cookies, Local Storage, and Session Storage

Website: when you log in on walkaching.com we keep your sign-in session in your browser’s local storage so you stay signed in. We do not use advertising or analytics cookies. Cloudflare may set technical cookies or tokens that it needs to deliver and secure the website.
App: your sign-in tokens are kept in your device’s secure storage, and the app keeps preferences and a short queue of step records on your device until they sync.

You can clear this data by logging out, clearing your browser data, or uninstalling the app.

23. Notifications

We send in-app notifications about challenges, your wallet, achievements, and important service updates, and you can adjust the types in the app. We send service emails, such as verification codes, password resets, security alerts, and account-deletion notices. We do not send marketing or promotional messages unless you have agreed to receive them, and you can opt out. If we add push notifications we will ask for your permission first.

24. Automated Anti-Cheating and Fraud Detection

To keep challenges fair, we use automated checks on step data, device signals, and account behavior, such as unrealistic step patterns, duplicate submissions, manipulated timestamps, and duplicate accounts. These checks can flag activity, hold a prize while it is reviewed, remove invalid steps, or disqualify a participant. A person can review decisions on request: contact support if you think a result is wrong.

25. Privacy Policy Updates

We may update this policy. We will change the “Last Updated” date, and for material changes we will notify you in the app, on the website, or by email. Continuing to use Walkaching after an update means you accept the updated policy, where the law allows.

26. Contact Information

Walkaching
Privacy Contact / Data Protection Inquiry
Email: admin@walkaching.com
Website: walkaching.com

← Back to walkaching.com