Privacy Policy

Walkable is a walking and navigation app, so it needs your device's location to work. We use your location to show where you are on the map, guide you along a route, help you discover nearby places, and guide you back if you go off track.

Your location is used while you're using the app to provide these walking and navigation features. You can turn off location access at any time in your device settings — some features simply won't work without it.

Walkable has one optional feature that uses your location while the app is closed: Auto Walk Detection. It is off by default, and turning it on in Settings is the only thing that makes Walkable request Android's background location permission. You are shown a plain-language explanation before any system permission prompt appears.

When it is enabled, Walkable uses physical activity information from your phone to recognise when you start and stop walking. After a walk is detected, Walkable accesses your location in the background to measure distance and record your route, even when the app is closed. A notification is shown for as long as it is recording, exactly as for a walk you start by tapping.

Between walks, Walkable holds no location access at all — no GPS, no background service, and no periodic check of where you are. Detection is done by your phone's own activity-recognition service. Automatically recorded walks are stored on your device like any other walk, and are never uploaded unless you choose to back them up or share them. You can disable Auto Walk Detection at any time in Settings, which stops all of it immediately.

Your walking companion can hold a conversation, and the reply is written by an AI model that is not on your phone. It is on by default, and Settings → Talk with your companion switches it off — with it off nothing is sent, your companion is still there, and everything already said stays on the phone.

A request happens when you send a message, and at most once a day when your companion speaks first. Whether it has anything worth saying is decided on the phone — most often the answer is nothing — and only the phrasing is asked for online. You can switch that off too, with Don’t say hello on opening.

What the request contains:

• the text of your message;
• the name your companion calls you by — what you asked to be called, or the display name from your local profile if you set one;
• what your companion remembers about you: facts it kept from earlier conversations, threads it means to ask after, and the last few messages either of you sent;
• your walking totals as plain numbers — walks taken together, total kilometres, days you looked after it, and how long ago the last walk was. Not the walk you are on, and not any individual walk;
• the language you read the app in;
• the same random installation id the in-app help uses — not an account, not taken from your phone’s hardware, and there so the service can be rate-limited against abuse.

What it never contains: your coordinates, the shape of any route you walked, the places you pinned, your photos, videos or voice notes, your walk-by-walk history, or an email address. A total in kilometres is a number, not a location.

The request goes to a server we operate, which passes it to an AI model running on Cloudflare’s infrastructure and returns the reply. It is not sent to an advertising network, not sold, and not used to build a profile of you. The conversation itself is kept on your phone. Our own code stores nothing of it on any server beyond the counter that limits how many messages a day one installation may send. The request does pass through Cloudflare, whose own logging is Cloudflare’s; we would rather describe only what Walkable does than make a promise on another company’s behalf.

Erasing it: Forget our conversations, in the chat’s own menu, deletes every message and everything your companion remembers about you, and keeps your companion. Settings → Delete my Walkable data removes it as well. Holding a message down offers Report this message, which hides it and sends that message and the reason you chose to us, so a person can look at it; reports are kept, because a report is a request to look at something.

Your companion is not a person and does not give medical advice, and it is instructed never to claim otherwise. If something you write suggests you may be in danger, Walkable answers with help-line information instead of a chat reply — a check that also runs on the phone, so it works with no signal and sends nothing extra.

We aim to collect as little as possible. Walkable contains no advertising, analytics or crash-reporting SDK, so we receive nothing about how you use the app: what reaches us is what you deliberately send. That means a message you write to in-app help or by email, a message to your companion and the report if you report one of its replies, and a Community post if you make one on this website.

• To provide walking, routing, and navigation features.
• To keep the app reliable and to fix bugs.
• To understand and respond to feedback you send us.

• We do not sell your personal data — not to advertisers, not to data brokers, not to anyone.
• We don't show ads or build advertising profiles about you.
• We don't share your personal data except where needed to run the app or where required by law.

Everything above is about the app. This site collects a little too, and it is worth being precise about what.

We measure visits using Vercel Web Analytics, which tells us how many people came, which pages they read, roughly where in the world they were (country level, from the network connection — never a precise location), and what kind of device and browser they used. It sets no cookies, does not follow you to other sites, and does not build a profile of you. We look at it to learn which countries are asking for offline maps. We also count a few coarse interactions — such as a Google Play button click or reaching halfway through a page — so we can tell whether the site helped, rather than treating every departure as a failure. These event counts contain no name, email address, precise location, walking data or advertising identifier. We also measure page loading speed, so we can tell when the site has become slow.

This site stores a few small things in your browser: the colour theme you picked, the language you picked, a random id for the support chat, and — if you use the Community — a random browser id and the display name you choose. None of these identify you, none are advertising cookies, and clearing your browser data removes them.

The Community is separate from the private Walkable app. You do not need an account, email address or password to participate. When you submit a story, suggestion, question or reply, we receive the text, the broad place you optionally provide, the display name you choose, and a random browser id used to prevent repeated reactions and reduce abuse. Your email address is never requested or shown publicly.

New posts and replies are held for moderation before they appear. We retain published community content while it remains useful, along with reports needed to keep the space safe. You can ask us to remove a post or reply by emailing Automat4ed@gmail.com. Please do not publish exact addresses, live locations, medical information or anything you would not want a stranger to read.

Walkable relies on trusted services to function, such as map and location providers on your device. These providers may process location data to deliver maps and positioning. We encourage you to review the privacy policies of your device and its map provider.

Cloud backup is off until you set it up. When you do, Walkable copies your walks into the private app-data folder of your own Google Drive — a folder only Walkable can reach, not your documents and not your photo library.

What lands there is encrypted on your phone first. Google stores a file it cannot open: not your routes, not your coordinates, not your notes, and — if you switch on Include photos & audio — not your photos, videos or voice notes either. Each media file is sealed on its own and named so that the folder does not reveal which walks contain photographs. Earlier versions of Walkable wrote a readable file; uploads were switched off for a release rather than left running, and turned back on only once they were unreadable to anyone but you.

The backup is locked with a key generated on your phone, which is in turn locked by a recovery key shown to you once, at setup. Walkable never stores or transmits that recovery key — not on the phone, not in your Drive, and not on any server, because no server of ours is involved in this at all. You can replace it at any time, and you can delete the backup at any time. If you lose the recovery key, your backup can never be opened — not by you, not by us, not by Google, and not in response to any legal demand. That is the same fact as “nobody else can read it”, said in the direction that costs something.

The Walkable app requires no account, no sign-up, no email address and no password. Your walking history remains private to your device; it is not turned into a social profile or uploaded to the Community. The website Community is an optional, separate place for public notes and does not connect to your app identity.

On your device. Walkable does not expire, rotate or automatically delete your walking data. Your walks, media, pins, reminders, goals, learned rhythm, profile and settings remain on your phone indefinitely, until one of these happens:

• you delete individual walks, or use Settings → Delete my Walkable data;
• you clear Walkable’s storage in Android Settings;
• you uninstall Walkable.

On our servers. VorreiX does not retain your personal data, because there is no account and nothing is uploaded by default. Route-planning requests are processed to return a route and are not used to build a profile. Weather lookups use coordinates rounded to about a kilometre and are not retained. Live-sharing sessions and route transfers are short-lived and expire by themselves. Support messages are kept only as long as needed to answer you. Conversations with your companion are answered and not stored by us — what we keep is the counter that limits how many messages a day one installation may send, and any report you file about a reply. Community posts and replies are retained while published, and reports are retained as needed for moderation. A Google Drive backup, if you set one up, is retained in your Google account, encrypted, under your control, until you delete it.

On your phone, immediately. Settings → Delete my Walkable data permanently removes, from that phone: every walk with its route, distance and times; photos, videos and voice notes saved on your walks; your saved places and reminders; your goals, streaks and learned walking rhythm; your local profile name and picture; your companion, your conversation with it and everything it remembered about you; and your Walkable settings. This cannot be undone — there is no server copy to restore from.

It deliberately does not touch your Google Drive backup, so that removing data from a phone never silently reaches into your Google account; delete that separately under Cloud backup. It also leaves downloaded offline map data, which contains nothing about you.

Uninstalling or clearing storage removes everything Walkable has stored on that device. Walkable also opts out of Android’s automatic backup and of device-to-device transfer, so nothing is copied into Google’s system backup or carried over when you set up a new phone. A Google Drive backup survives uninstalling, because it is in your Google account rather than on the phone — delete it in the app first if you want it gone.

Submitting a deletion request. Because there is no Walkable account and no server-side copy of your walking history, there is normally nothing for us to delete on your behalf — deletion happens on your device, immediately, using the control above. To ask about data we do control (for example a support message you sent us), or for written confirmation of the above, email Automat4ed@gmail.com with the subject Walkable Data Deletion Request, telling us what you would like removed. We respond within 30 days. We may be unable to identify data as yours if it was never linked to an identifier, which is the ordinary consequence of an app that does not track you.

You're in control. You can revoke location permission in your device settings, delete your data at any time from Settings, and stop using the app whenever you like.

Walkable is not directed at children under 13, and we don't knowingly collect personal data from them.

As Walkable grows, this policy may change. We'll update the date at the top when it does. Meaningful changes will be reflected here.

Questions about privacy? Email us at Automat4ed@gmail.com and we'll be happy to help.