Privacy Policy for Daily Wander

1. Introduction

This Privacy Policy explains how Daily Wander ("we", "our", or "the App") collects, uses, and protects your personal information. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

This policy explains our data practices; it is not a request for consent. Permissions and consent, where required, are handled separately. It covers the iPhone app, its Apple Watch companion, and this website.

2. Data Controller

The data controller responsible for your personal data is:

Joeri Vanthienen, trading as VANTH Studio
Email: support@dailywander.app
Location: Netherlands

3. Information We Collect

3.1 App Data on Your Devices and in iCloud

• What We Collect: Walk history, saved routes, preferences, daily walk and shuffle counts, and premium status cached on device
• Purpose: To provide app functionality, remember your progress, and enforce free-tier limits
• Storage: Stored on your device. Supported walk history, saved routes, activity summaries, preferences and progress can also synchronize through Apple iCloud when available; see section 3.8 below
• Legal Basis (GDPR): Necessary for contract performance and legitimate interest
• Retention: Local data remains until removed through the app or device storage controls. Synchronized data can remain in iCloud after the app is uninstalled; see sections 3.8 and 6.3

3.2 Location Data

• What We Collect: Precise location, selected starting points, route coordinates, and location accuracy while planning routes or recording and guiding walks, including in the background during an active walk when permitted
• Purpose: To generate routes, provide directions and rerouting, record your walk, identify places for your walking history and Wander Passport, and request local weather
• Processing: Daily Wander routing servers receive the coordinates and preferences needed for a request. A rerouting request can include your current position, destination, current route and blocked path segments. External mapping and walking-route calculation providers receive the coordinates needed to calculate routes; Apple provides maps, place lookup and weather. See section 5.6
• Storage: Saved route coordinates and place summaries remain on your devices and can synchronize through your private iCloud database. Routing and security processing is separate from your saved history; see section 3.9. Sharing or exporting a route is a separate action; see section 3.10
• Legal Basis (GDPR): Contract performance for requested route services; consent where required for location access
• Retention: Saved history remains until you delete it using the app or applicable iCloud controls. Service logs and security records are described in section 10

3.3 Health and Fitness Data

• Read Access: With Apple Health permissions, the app can read steps, walking/running distance, active energy, exercise minutes, workouts and workout routes, mindful sessions, heart rate, and date of birth. Date of birth is used on device to calculate age for heart-rate analysis
• Write Access: With permission, the app can save completed walking workouts, route coordinates, distance, steps, active energy and mindful sessions to Apple Health
• Purpose: To display activity progress, goals and walk analysis, calculate heart-rate summaries, and save completed walks to Apple Health. The Apple Watch companion can record workout and heart-rate information when you enable the relevant permissions
• Storage and Sharing: Health records are managed through Apple Health. App activity and walk summaries can also be stored on your devices and synchronized through private iCloud. Walk analytics sent to PostHog include step and calorie totals that can be derived from Apple Health; see section 3.5. These totals are different from a full HealthKit record or raw heart-rate samples
• Legal Basis (GDPR): Consent for optional Health access, including explicit consent where required for health-data processing. An operating-system permission does not by itself authorize unrelated uses of health data
• Controls and Retention: Manage access and Health records in Apple Health and iOS privacy settings. Revoking permission stops future access to the affected Health data; it does not automatically erase summaries already saved in the app, iCloud or analytics. See sections 6 and 10

3.4 Subscription and Payment Data

• What We Collect: App Store transaction state, subscription status, product purchased, trial status, pseudonymous purchase identifiers, and Apple Ads attribution tokens and campaign information when available
• Third Party: Apple (App Store) and RevenueCat
• Purpose: To manage subscriptions, validate receipts, unlock premium features, and measure which Apple Ads campaigns lead to app installs and subscriptions
• Storage: Processed by Apple and RevenueCat. RevenueCat receives an Apple AdServices attribution token to retrieve available campaign attribution, and may receive the PostHog distinct ID so subscription events line up with in-app analytics. We do not receive your full payment-card details
• Legal Basis (GDPR): Contract performance for subscriptions; legitimate interests for campaign measurement, subject to consent where required
• Retention: Retained by Apple and RevenueCat according to their privacy policies

3.5 In-App Usage and Analytics Data

• What We Collect: Pseudonymous user ID, screen views, route generation and navigation events, paywall interactions, subscription state, app version, device model, locale, campaign tags from incoming links, crash/error diagnostics, and feature-flag information
• Walk and Activity Events: Events can include distance, duration, steps, calorie totals, goals, walk completion, ratings, achievements and navigation reliability measurements. Step and calorie totals can come from Apple Health. These events are associated with a pseudonymous identifier; pseudonymous does not mean anonymous
• Third Party: PostHog. The app sends events to PostHog's EU ingestion endpoint
• Purpose: To understand use of walking features, improve activity and navigation features and reliability, measure subscription conversions, and evaluate feature changes
• Storage: Processed by PostHog. Walk events do not upload the complete recorded route trace or raw heart-rate samples as part of the event fields described here. Session replay is disabled
• Legal Basis (GDPR): Legitimate interests in product reliability and usage measurement for ordinary product analytics. Health-derived data requires the additional protections applicable to health data; it is not covered solely by that legitimate-interest basis or by accepting this policy
• Controls and Retention: There is currently no in-app analytics opt-out switch. Contact us to object to processing or request access or deletion. Analytics records follow the configured service retention and applicable deletion requests; resetting app history does not automatically erase records at PostHog

3.6 Support Data

• What We Collect: Support chat messages, optional email address, attachments such as photos you choose to send, app version, iOS version, device model, and support context
• Third Party: Crisp
• Purpose: To provide customer support, troubleshoot issues, and respond to feature requests
• Storage: Processed by Crisp over encrypted connections
• Legal Basis (GDPR): Consent and legitimate interest
• Retention: Retained by Crisp according to their privacy policy and your support history

3.7 Website Analytics Data

• What We Collect: If you visit dailywander.app, we may collect aggregate page visit and campaign performance data
• Third Party: Umami
• Purpose: To understand website traffic and which pages help users find the app
• Storage: Processed as website analytics and kept separate from in-app walk history
• Legal Basis (GDPR): Legitimate interest
• Retention: Retained by our website analytics provider according to their privacy policy

For visits identified by a ChatGPT referral or campaign tag, we keep the public landing-page path and referral method in this tab's session storage. This context expires after 30 minutes without tracked activity and is cleared when the tab session ends. It helps us measure subsequent website actions, including App Store link clicks, without adding a visitor identifier or changing App Store campaign links. This attribution context does not store query strings, shared-route contents or GPX files. You can exclude this browser from website analytics.

3.8 iCloud Synchronization

Daily Wander uses Apple CloudKit to keep supported app records in your private iCloud database when iCloud is available for the app and you are signed in to your Apple Account. These records can include completed walks and route coordinates, saved routes, activity summaries, supported preferences, achievements and challenge progress. They are not published as a public route directory.

Some settings and temporary route caches stay on the device. Synchronization depends on connectivity, iCloud availability and compatible app versions, so changes may not appear on every device immediately. Apple Health permissions and Health records are managed separately through Apple Health and iOS.

Uninstalling Daily Wander does not by itself delete its iCloud copy. An in-app reset can propagate through synchronization; limited synchronization and deletion state may remain to prevent removed records from reappearing. Apple also provides iCloud storage controls in system settings. An app reset does not cancel an App Store subscription or automatically erase workouts already saved to Apple Health.

3.9 Routing Security and Server Logs

Our hosting infrastructure processes network information such as IP address, request URL, time, response status and technical diagnostics to deliver and protect the app and website. Apple App Attest helps verify requests from a genuine app installation. Our routing service stores an installation's attestation key identifier, public key, attestation receipt when provided, verification counters, timestamps, app version and request-quota counters. Temporary security challenges include a client IP address. These records are used for request verification, abuse prevention and service reliability, not as a public walking profile.

We rely on contract performance for delivering requested services and legitimate interests for protecting them from abuse. See section 10 for retention.

3.10 Sharing and Exporting

Sharing is initiated by you. A gifted route link contains encoded route geometry and route details in the URL. The encoding is not encryption: anyone with the link can view or forward the route, including its starting point. Opening the web preview sends that URL to our website and may place it in server logs, browser history, messaging services and link previews. Deleting the original walk does not revoke copies of a link or an exported file.

GPX exports contain route coordinates. Recap images can include your map, places and activity statistics. Review what you share and choose recipients carefully. Processing needed to create the share or export is based on your request for that feature; the receiving service handles its copy under its own terms.

3.11 Apple Watch, Widgets and System Search

The paired Apple Watch companion exchanges route guidance, route geometry, walk status, workout metrics and controls with your iPhone. Widgets and Live Activities display supported progress and walk information on your devices. Saved walk summaries can be indexed for Siri and Spotlight. Their visibility depends on your device and system settings; using these features does not publish your history as a public directory.

4. How We Use Your Information

We use collected information for the following purposes:

• Route Generation and Navigation: Using your location to create personalized walking routes and guide active walks
• Activity Tracking: Recording your walks, progress, and optional Apple Health exports
• Feature Access: Managing free-tier limits, premium subscriptions, and entitlement state
• Support: Responding to support conversations and troubleshooting issues
• Product Improvement: Understanding how features are used so we can improve the app and website

5. Data Sharing and Third Parties

We do not sell personal data or share it for cross-context behavioral advertising. The following providers and recipient categories process data to deliver the features described above. Information you choose to share goes to your selected recipients; disclosures may also be required by law.

5.1 Apple

• Services: App Store, Apple Maps, WeatherKit, HealthKit, Location Services, iCloud, CloudKit, App Attest and Apple AdServices
• Data Shared: App Store purchases, map/place/weather requests, authorized Health data, app attestation and advertising-attribution requests, and supported records in your private iCloud database
• Privacy Policy: https://www.apple.com/legal/privacy/

5.2 RevenueCat

• Purpose: Subscription management, receipt validation and Apple Ads attribution
• Data Shared: Pseudonymous user ID, subscription status, purchase events, entitlement data, PostHog identifier and available Apple Ads attribution tokens and campaign data
• Privacy Policy: https://www.revenuecat.com/privacy/

5.3 PostHog

• Purpose: Product analytics and conversion measurement inside the app
• Data Shared: Pseudonymous identifiers, product and walk/activity events described in section 3.5, diagnostic data, campaign tags, app/device metadata, and subscription state
• Privacy Policy: https://posthog.com/privacy

5.4 Crisp

• Purpose: Customer support chat
• Data Shared: Support messages and attachments you send, optional email address, and device/app context needed to help you
• Privacy Policy: https://crisp.chat/en/privacy/

5.5 Umami (Website Only)

• Purpose: Aggregate website analytics for dailywander.app
• Data Shared: Website visit and campaign performance data
• Privacy Policy: https://umami.is/privacy

5.6 Routing and Hosting Providers

We use server-hosting providers and external geospatial service providers that calculate walking routes using map data. Our current external walking-route calculation provider is based in Germany. Route requests include the coordinates and routing preferences needed to calculate a route, sent through Daily Wander's backend. Hosting providers process network and request information to operate our services. These recipients do not receive your Apple Health records or payment-card details from our routing requests. Contact us for the identity of recipients relevant to your data and information about applicable safeguards.

6. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

6.1 Right to Access

You can request a copy of personal data held by Daily Wander and its service providers, including the recipients of your data. App records are available in the app on your devices. Supported records may also be stored in your private iCloud database when synchronization is available.

6.2 Right to Rectification

You can update or correct data in the app settings or by contacting us for third-party records where applicable.

6.3 Right to Erasure ("Right to be Forgotten")

You can delete your data by:

• Using Settings → Reset All Data in Daily Wander to reset saved app records. When iCloud synchronization is available, the reset is propagated to your other compatible devices as they synchronize
• Contacting us to request deletion of data held by our third-party providers where applicable
• Managing subscription cancellation separately in your Apple Account; cancellation is not a condition for making a data-deletion request

Uninstalling the app removes its local installation but does not by itself erase the iCloud copy or Apple Health records. Manage Health data separately in Apple Health. If another device is offline or cannot synchronize, its view may not reflect an app reset immediately.

6.4 Right to Data Portability

You can use the available sharing and export features, including GPX export with Premium. You can also contact us to exercise a statutory data-access or portability right; those rights do not require a Premium subscription.

6.5 Right to Object

You can object to data processing by:

• Revoking location permissions in iOS Settings
• Revoking HealthKit permissions in iOS Settings
• Not using the support chat
• Contacting us regarding analytics or support data requests

6.6 Right to Restrict Processing

You can limit data processing by disabling specific permissions or avoiding optional features such as support chat and Apple Health integration.

6.7 Right to Withdraw Consent

You can withdraw consent at any time by:

• Disabling location services in iOS Settings -> Privacy & Security -> Location Services
• Disabling Apple Health access in iOS Settings -> Privacy & Security -> Health

6.8 Right to Lodge a Complaint

If you're in the EU/EEA, you can lodge a complaint with your local data protection authority.

7. Data Security

We implement appropriate security measures to protect your data:

• Local-First Storage: Walk history and preferences are primarily stored on your device
• Encryption: Network requests to third-party providers use HTTPS/TLS encryption
• Limited Processor Access: Third-party services receive only the data needed for subscriptions, support, analytics, or routing
• Advertising Measurement: Apple Ads attribution is described in section 3.4; we do not use IDFA-based cross-app tracking or display third-party ads in the app
• Platform Protections: We rely on Apple platform security and the security controls of our service providers

8. Children's Privacy

Daily Wander is intended for people aged 13 or older. Users under 18 need parental or guardian permission under our Terms of Service. An App Store content age rating is not the same as eligibility under these terms. We do not knowingly collect personal data from children under 13. If you believe this has happened, contact support@dailywander.app so we can investigate and arrange deletion where applicable. Where local law requires parental authorization for a child's consent, that requirement also applies.

9. International Data Transfers

While the app is available worldwide:

• Saved app records are held on your devices and can synchronize through private iCloud; the processing described in sections 3 and 5 can also take place on service-provider infrastructure
• Third-party providers such as Apple, RevenueCat, PostHog, Crisp, and Umami may process data outside your country of residence
• Where required, we rely on the safeguards offered by those providers, such as contractual commitments and applicable transfer mechanisms

10. Data Retention

• App and iCloud Records: Kept until removed using the app or applicable storage controls. Uninstalling the app alone does not erase iCloud data. Limited reset, deletion and compatibility state can remain to prevent removed records from returning
• Apple Health: Managed separately in Apple Health. Deleting or resetting Daily Wander does not delete workouts already saved there
• Routing and Website Logs: Retained under operational log rotation and storage limits for reliability and abuse investigation. Our web-server logs normally rotate daily with 14 rotations retained. A shared-route URL can contain route data. This log retention is separate from the history you choose to save
• App Attest: Challenges are valid for five minutes by default and are removed when consumed or during subsequent cleanup. Registered installation keys and verification/quota state persist to validate later requests and prevent abuse; they are not automatically deleted by an app reset. Contact us about deletion of server-held records
• Subscription and Attribution Records: Retained for subscription administration, reconciliation and applicable legal obligations under Apple's and RevenueCat's policies
• Analytics and Support: PostHog and Umami records follow configured service retention; Crisp conversations remain as support history. Applicable access, objection and deletion requests can be made through us. An app reset does not automatically delete these provider records
• Copies You Share: Recipients, messaging services and export destinations control their copies. We cannot revoke a route encoded into a link that has already been shared

Where a fixed period is not specified, retention depends on whether records are still needed for the stated service, support, security or legal purpose and on applicable deletion requests. Contact us for retention information about a particular record or provider.

11. Cookies and Tracking

• The iOS app does not use browser cookies
• We use Apple AdServices attribution through RevenueCat to measure Apple Ads performance, without IDFA-based cross-app tracking
• We do use pseudonymous product analytics in the app through PostHog
• We do not enable session replay screenshots in the app
• Our website may use privacy-friendly aggregate analytics through Umami

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date
• Displaying an in-app notice (for material changes)
• Requesting renewed consent where required by law

An update to this notice does not by itself grant consent to a new use of personal data. Where a change requires consent, that consent must be obtained separately.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Email: support@dailywander.app
Response Time: We aim to respond within 30 days where required by law

14. Legal Basis for Processing (GDPR Summary)

Data Type	Legal Basis
Local App Data	Contract Performance, Legitimate Interest
Location Data	Consent, Contract Performance
Health Data	Explicit Consent
Subscription Data	Contract performance; legitimate interests for campaign measurement, subject to consent where required
In-App Analytics Data	Legitimate interests for ordinary product analytics; additional health-data protections apply to Health-derived metrics (section 3.5)
Support Data	Consent, Legitimate Interest
Website Analytics Data	Legitimate Interest

15. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: What personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate for exercising your rights