Privacy Policy for DailyWander

1. Introduction

This Privacy Policy explains how DailyWander ("we", "our", or "the App") collects, uses, and protects your personal information. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

By using DailyWander, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

VANTH Studio
Email: support@dailywander.app
Location: Netherlands

3. Information We Collect

3.1 App Data on Your Devices and in iCloud

• What We Collect: Walk history, saved routes, preferences, daily walk and shuffle counts, and premium status cached on device
• Purpose: To provide app functionality, remember your progress, and enforce free-tier limits
• Storage: Stored on your device. Supported walk history, saved routes, activity summaries, preferences and progress can also synchronize through Apple iCloud when available; see section 3.8 below
• Legal Basis (GDPR): Necessary for contract performance and legitimate interest
• Retention: Local data remains until removed through the app or device storage controls. Synchronized data can remain in iCloud after the app is uninstalled; see sections 3.8 and 6.3

3.2 Location Data

• What We Collect: Your precise location while generating routes or guiding active walks
• Purpose: To create nearby walking routes and provide navigation context
• Storage: Location is processed on your device and used in route requests to DailyWander routing services and mapping providers. A saved walk can contain route coordinates and can synchronize through iCloud; exporting or sharing a route is a separate action
• Legal Basis (GDPR): Consent and necessary for contract performance
• Retention: Location is used for route planning and active walk recording, including background recording when permitted. Saved route history remains on your devices and, when synchronized, in iCloud until you remove it using the applicable controls

3.3 Health and Fitness Data

• What We Collect: Walking distance, active energy, workout routes, and related workout data you choose to read from or write to Apple Health
• Purpose: To track progress, calculate activity metrics, and export completed walks to Apple Health
• Storage: Stored in Apple Health and on your device; we do not store your raw HealthKit data on our own servers
• Legal Basis (GDPR): Explicit consent
• Retention: Controlled by you through Apple Health and iOS privacy settings

3.4 Subscription and Payment Data

• What We Collect: App Store transaction state, subscription status, product purchased, trial status, and pseudonymous identifiers used to reconcile purchase events
• Third Party: Apple (App Store) and RevenueCat
• Purpose: To manage subscriptions, validate receipts, and unlock premium features
• Storage: Processed by Apple and RevenueCat; RevenueCat may receive the PostHog distinct ID so subscription events line up with in-app analytics
• Legal Basis (GDPR): Necessary for contract performance
• Retention: Retained by Apple and RevenueCat according to their privacy policies

3.5 In-App Usage and Analytics Data

• What We Collect: Pseudonymous user ID, screen views, route generation and navigation events, paywall interactions, subscription state, app version, device model, locale, and other product interaction events
• Third Party: PostHog
• Purpose: To understand feature usage, measure conversions, improve reliability, and guide product decisions
• Storage: Processed by PostHog using pseudonymous identifiers; not used for advertising or cross-app tracking
• Legal Basis (GDPR): Legitimate interest
• Retention: Retained by PostHog according to their privacy policy and configured retention settings

3.6 Support Data

• What We Collect: Support chat messages, optional email address, app version, iOS version, device model, and the support context you choose to send us
• Third Party: Crisp
• Purpose: To provide customer support, troubleshoot issues, and respond to feature requests
• Storage: Processed by Crisp over encrypted connections
• Legal Basis (GDPR): Consent and legitimate interest
• Retention: Retained by Crisp according to their privacy policy and your support history

3.7 Website Analytics Data

• What We Collect: If you visit dailywander.app, we may collect aggregate page visit and campaign performance data
• Third Party: Umami
• Purpose: To understand website traffic and which pages help users find the app
• Storage: Processed as website analytics and kept separate from in-app walk history
• Legal Basis (GDPR): Legitimate interest
• Retention: Retained by our website analytics provider according to their privacy policy

3.8 iCloud Synchronization

DailyWander uses Apple CloudKit to keep supported app records in your private iCloud database when iCloud is available for the app and you are signed in to your Apple Account. These records can include completed walks and route coordinates, saved routes, activity summaries, supported preferences, achievements and challenge progress. They are not published as a public route directory.

Some settings and temporary route caches stay on the device. Synchronization depends on connectivity, iCloud availability and compatible app versions, so changes may not appear on every device immediately. Apple Health permissions and Health records are managed separately through Apple Health and iOS.

Uninstalling DailyWander does not by itself delete its iCloud copy. An in-app reset can propagate through synchronization; limited synchronization and deletion state may remain to prevent removed records from reappearing. Apple also provides iCloud storage controls in system settings. An app reset does not cancel an App Store subscription or automatically erase workouts already saved to Apple Health.

4. How We Use Your Information

We use collected information for the following purposes:

• Route Generation and Navigation: Using your location to create personalized walking routes and guide active walks
• Activity Tracking: Recording your walks, progress, and optional Apple Health exports
• Feature Access: Managing free-tier limits, premium subscriptions, and entitlement state
• Support: Responding to support conversations and troubleshooting issues
• Product Improvement: Understanding how features are used so we can improve the app and website

5. Data Sharing and Third Parties

We do NOT sell your personal data. We share data only with the following trusted third parties:

5.1 Apple

• Services: App Store, Apple Maps, HealthKit, Location Services, iCloud and CloudKit
• Data Shared: Payment information, route requests, HealthKit data you explicitly authorize, and supported app records synchronized through your private iCloud database
• Privacy Policy: https://www.apple.com/legal/privacy/

5.2 RevenueCat

• Purpose: Subscription management and receipt validation
• Data Shared: Pseudonymous user ID, subscription status, purchase events, and related entitlement data
• Privacy Policy: https://www.revenuecat.com/privacy/

5.3 PostHog

• Purpose: Product analytics and conversion measurement inside the app
• Data Shared: Pseudonymous identifiers, product interaction events, app/device metadata, and subscription state
• Privacy Policy: https://posthog.com/privacy

5.4 Crisp

• Purpose: Customer support chat
• Data Shared: Support messages, optional email address, and device/app context needed to help you
• Privacy Policy: https://crisp.chat/en/privacy/

5.5 Umami (Website Only)

• Purpose: Aggregate website analytics for dailywander.app
• Data Shared: Website visit and campaign performance data
• Privacy Policy: https://umami.is/privacy

6. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

6.1 Right to Access

You can request a copy of personal data held by our third-party processors. App records are available in the app on your devices. Supported records may also be stored in your private iCloud database when synchronization is available.

6.2 Right to Rectification

You can update or correct data in the app settings or by contacting us for third-party records where applicable.

6.3 Right to Erasure ("Right to be Forgotten")

You can delete your data by:

• Using Settings → Reset All Data in DailyWander to reset saved app records. When iCloud synchronization is available, the reset is propagated to your other compatible devices as they synchronize
• Contacting us to request deletion of data held by our third-party providers where applicable
• Canceling your subscription and requesting deletion where provider retention rules allow

Uninstalling the app removes its local installation but does not by itself erase the iCloud copy or Apple Health records. Manage Health data separately in Apple Health. If another device is offline or cannot synchronize, its view may not reflect an app reset immediately.

6.4 Right to Data Portability

You can export your walk history and routes through the app's export features.

6.5 Right to Object

You can object to data processing by:

• Revoking location permissions in iOS Settings
• Revoking HealthKit permissions in iOS Settings
• Not using the support chat
• Contacting us regarding analytics or support data requests

6.6 Right to Restrict Processing

You can limit data processing by disabling specific permissions or avoiding optional features such as support chat and Apple Health integration.

6.7 Right to Withdraw Consent

You can withdraw consent at any time by:

• Disabling location services in iOS Settings -> Privacy & Security -> Location Services
• Disabling Apple Health access in iOS Settings -> Privacy & Security -> Health

6.8 Right to Lodge a Complaint

If you're in the EU/EEA, you can lodge a complaint with your local data protection authority.

7. Data Security

We implement appropriate security measures to protect your data:

• Local-First Storage: Walk history and preferences are primarily stored on your device
• Encryption: Network requests to third-party providers use HTTPS/TLS encryption
• Limited Processor Access: Third-party services receive only the data needed for subscriptions, support, analytics, or routing
• No Advertising Tracking: We do not use advertising SDKs or cross-app tracking
• Platform Protections: We rely on Apple platform security and the security controls of our service providers

8. Children's Privacy

DailyWander is suitable for all ages. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided personal information through our services, please contact us.

9. International Data Transfers

While the app is available worldwide:

• Most walk history and preferences stay on your device
• Third-party providers such as Apple, RevenueCat, PostHog, Crisp, and Umami may process data outside your country of residence
• Where required, we rely on the safeguards offered by those providers, such as contractual commitments and applicable transfer mechanisms

10. Data Retention

• Local App Data: Retained on your device until you delete the app or clear app data
• Location Data: Used while generating or guiding routes; route history you keep remains on device
• Health Data: Controlled by you through Apple Health
• Subscription Data: Retained by Apple and RevenueCat according to their policies
• Analytics Data: Retained by PostHog according to configured retention settings and their policy
• Support Data: Retained by Crisp according to their policy and your support history
• Website Analytics Data: Retained by Umami according to their policy

11. Cookies and Tracking

• The iOS app does not use browser cookies
• We do not use advertising trackers or cross-app tracking
• We do use pseudonymous product analytics in the app through PostHog
• We do not enable session replay screenshots in the app
• Our website may use privacy-friendly aggregate analytics through Umami

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date
• Displaying an in-app notice (for material changes)
• Requesting renewed consent where required by law

Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Email: support@dailywander.app
Response Time: We aim to respond within 30 days where required by law

14. Legal Basis for Processing (GDPR Summary)

Data Type	Legal Basis
Local App Data	Contract Performance, Legitimate Interest
Location Data	Consent, Contract Performance
Health Data	Explicit Consent
Subscription Data	Contract Performance
In-App Analytics Data	Legitimate Interest
Support Data	Consent, Legitimate Interest
Website Analytics Data	Legitimate Interest

15. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: What personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate for exercising your rights