Hardcore Walk
Legal & app information

Privacy policy

What Hardcore Walk processes, why we need it, and the choices you have.

Updated 16 October 2026

Who we are

Hardcore Walk ("the app", "we") is published by Kanatago AS. Our registered office is Eilert Sundts gate 43, 0355 Oslo, Norway (organisation number 936932282). Contact: [email protected]. This policy covers the Hardcore Walk mobile app and hardcorewalk.com.

Data we process

  • Steps and health data. With your permission the app reads your daily step count from Apple HealthKit or Android Health Connect. We never write health data. Your daily step totals are synced to our server to resolve your walking goals and position in rounds.
  • Account identifiers. You start with an anonymous account (a random ID). If you sign in with Apple or Google, we store the identifier (and, if shared, email address and name) that provider gives us, linked to the same account. Sign in with Apple may provide a private relay email address instead of your personal email address.
  • Profile and gameplay. We store your display name, chosen character, timezone, walking goals, round membership and invitations, progress, results and round history, and preferences. Your game position is based on walking progress. We do not collect your GPS location.
  • Safety and moderation. We store blocks, reports about messages, profiles and drawings, moderation decisions and related notices to enforce our community rules. Shared drawings and reports may be reviewed by authorised people. Moderation emails can include account and content identifiers, timestamps, the game camp and a copy of the drawing.
  • Chat messages. Messages you send in the world are stored with your display name and shown to nearby players. Messages may be hidden by our moderation systems or after user reports.
  • Drawings and reactions. Draft drawings, including strokes, pressure values, layers and draft names, are saved on your device. When you publish, we store the drawing with your account, display name, game camp, publication time and visibility choices. We also store reactions, reports and, for gallery entries, image copies and admission records. We use these to display and manage the shared content you choose to publish.
  • Purchases. Apple or Google handles payment. We and RevenueCat process your app account ID, product and transaction identifiers, purchase dates, purchase and refund status, unlocks, and credit balances and use. RevenueCat also processes store receipts or purchase tokens and technical information such as device platform, app version, locale and service connection information. We use this to verify and deliver purchases, restore eligible items, prevent fraud, handle support and understand purchase activity. We do not receive your full payment card details.
  • Push tokens. If you allow notifications, we store a device push token to deliver chat and round notifications.
  • Backend technical data. Our backend provider processes request information such as IP addresses, timestamps, requested endpoints, and error or security logs to operate and protect the service.
  • Usage analytics (only if you allow it). The app asks during setup whether you allow anonymous usage data, and you can change your answer at any time in Settings, then Help & about. Until you allow it, nothing is sent. If you allow it, the app sends PostHog a random device ID created for analytics, the screens you open, the features you use (for example joining a round, starting a walk, posting a drawing or buying an item, and whether it worked), app errors and crashes, and technical information such as app version, device model, operating system, language and screen size. It is not linked to your account ID, display name or sign-in, and it never includes chat messages, drawings, tunes, ribbon messages, step counts or other health data. IP addresses are discarded and not stored. We use it to understand how the app is used and to find and fix problems. Turning it off stops sending and resets the device ID.
  • Support email. If you email support we keep the correspondence.

Health Connect (Android) and HealthKit (iOS)

On Android, Hardcore Walk requests read-only access to Steps in Health Connect. On iOS, it reads step counts from Apple HealthKit. We do not request other health record types or write to either health service. The app calculates daily step totals on your device and sends those totals, their dates, and your account ID to our Supabase backend to calculate walking progress, goals and round results. It can re-read recent days to catch up on delayed steps. We do not upload individual Health Connect step records or their source metadata.

Health Connect and HealthKit data, including derived walking progress, is used only to provide these game features. It is not used for advertising or marketing, sold, transferred to data brokers, or used for credit, lending or insurance decisions. Our service providers process it to operate the app; other players see the game information described below.

You can decline health access and explore the app, or revoke access at any time in Health Connect or Apple Health settings. Revocation stops future reads but does not erase previously synced totals. To erase those totals or withdraw consent to their continued processing, request deletion of your health data at [email protected] or delete your account. Without step access, automatic walking progress will not update. Deleting your account does not delete the original records in your device's health service.

Sharing with other players

Other participants can see your display name, character, walking goal, game position and progress, and messages in the round. This can reveal information about your walking activity. Proximity chat is a game feature, not a confidential conversation or a measure of your physical location. Do not post information you want to keep private. Notifications may include message text and appear on the recipient's lock screen, depending on their device settings.

Published drawings and reactions are shared through the game. If you opt into gallery sharing, qualifying drawings can be shown to all gallery users beyond the original camp, together with your display name. You can withdraw gallery visibility in the app or contact support. Hiding a drawing does not delete the archive, and an already issued image link can remain readable for up to five minutes. Other players may keep their own copies.

What we do not do

  • No advertising, no tracking across other companies' apps or websites for advertising, and no sale of personal data. We use purchase reporting to understand sales and refunds, not to build advertising profiles.
  • We share data only as described in this policy: to provide the social game features you use, operate the service with our providers, or comply with a legal obligation.

Service providers and stores

  • Supabase (database, authentication, serverless functions and drawing storage) hosts our backend and stores the data above.
  • Expo, Apple and Google deliver push notifications. Expo and the platform push service receive the device push token and notification payload, which can include chat text and round updates. Apple and Google also provide sign-in when you choose it, subject to their own privacy policies.
  • RevenueCat processes account identifiers, purchase information and related technical data on our behalf to validate and manage purchases and provide purchase reporting. We do not send it step counts, health records, chat messages or drawings.
  • Apple and Google process payments and keep store purchase records under their own terms and privacy policies. They provide purchase and refund information to RevenueCat and us. See Apple's privacy policy and Google's privacy policy.
  • PostHog (PostHog Inc., EU Cloud) receives the usage analytics described above, only if you allow it, and stores it on our behalf so we can analyse app use and errors.
  • Resend and our email providers deliver and store moderation alerts and support correspondence for authorised staff. Drawing alerts can include the drawing itself and the moderation information described above.

Security and international transfers

Our Supabase database is hosted in Stockholm, Sweden, within the EEA. Data is encrypted when sent to our servers and when stored in the database. Account-based access controls restrict access to stored data; authorised administrators can access data when needed for support, security and moderation.

Usage analytics are stored in PostHog's EU Cloud in Frankfurt, Germany.

Our infrastructure, purchase, email, sign-in and notification providers may also process data outside the EEA, including in the United States. The data processing agreements of Supabase and RevenueCat provide contractual transfer safeguards, including Standard Contractual Clauses where applicable. Contact us for information about the safeguards applicable to your data or to request a copy.

Retention & deletion

Account and gameplay data is kept while your account exists to preserve your progress and provide the service, unless you request earlier erasure of particular data. Delete your account any time in the app: Settings, then Delete account. Once deletion succeeds, your account is permanently removed from the active service: your profile, round history, step totals, messages, blocks, reports, and push tokens and backend purchase records are erased. The gallery archive and provider records described below are handled separately. See account deletion for details, including how to request deletion without the app. You can also revoke Health access at any time in iOS Settings / Health Connect.

Camp drawings remain while displayed and are normally cleaned up 30 days after removal or replacement, unless admitted to the gallery archive. Gallery copies are kept for the life of the gallery archive, including after camp replacement or account deletion. Account deletion removes the artist account link and replaces the displayed name with a generic name; identifying details inside the artwork itself are not automatically removed. Withdrawal of gallery visibility hides the work but leaves the archive. To request erasure of artwork or personal information within it, contact support with a drawing reference. We assess these requests under applicable data protection rights. Drafts stored on your device are separate from server data and are not automatically erased by a server account deletion; remove local app data if you also want to erase those copies.

Purchase records are used while needed to provide paid access, reconcile purchases and refunds, and resolve disputes. Deleting an account currently removes our backend purchase records but does not automatically delete the customer record held by RevenueCat. Contact us to request erasure of those records; we handle the request with our provider, subject to any lawful retention need. Apple and Google retain their own transaction records under their policies and legal obligations. Deleting an account does not request a store refund.

Usage analytics are kept for up to 12 months and then deleted. Because they are not linked to your account, we cannot find them from your account. Turning analytics off in Settings stops collection and starts a new device ID if you turn it on again; contact us if you want past data from your device deleted.

Data erased from our active backend expires from its backups, including manual database exports, within 30 days. This does not mean that separately retained gallery or provider records are erased at the same time. Operational logs are retained for up to 30 days. Support correspondence and moderation emails, including drawing attachments, deletion requests and moderation appeals, are deleted within 12 months after the request is resolved. Deleting the app account does not automatically delete that correspondence; you can request earlier erasure. If specific records must be retained to meet a legal obligation or establish, exercise or defend a legal claim, access is restricted and they are deleted when that need ends. We use backups to recover from service failures. If we restore a backup, we reapply account deletions so deleted accounts stay deleted.

Website privacy

This website does not use analytics, advertising cookies, or tracking scripts. Fonts and artwork are served from this website. Your browser sends technical information, such as your IP address and requested page, to the hosting provider to deliver the site.

Kanatago AS is the data controller. We process account, profile, gameplay, chat, drawing and reaction data, and purchase data needed to deliver and restore paid access, to perform the service you request (GDPR Article 6(1)(b)). For health data, including daily step totals and derived walking activity, we rely on your consent (Article 6(1)(a)) and explicit consent for special-category data (Article 9(2)(a)). Optional gallery sharing is based on consent (Article 6(1)(a)); you can withdraw it in the app or through support. Keeping a hidden archive to preserve shared artwork relies on our legitimate interest in maintaining the gallery, subject to your right to object or request erasure. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

Usage analytics rely on your consent (Article 6(1)(a)), given in the app. You can withdraw it at any time in Settings, then Help & about. Withdrawing does not affect processing before that.

We rely on legitimate interests (Article 6(1)(f)) for moderation, blocks and reports, preventing abuse and purchase fraud, service security, handling support requests and purchase reporting: our interests are protecting players, operating a safe, reliable service and understanding sales and refunds. You can object to processing based on legitimate interests. Where processing is required by law, we rely on Article 6(1)(c).

Your rights

You may request access, correction, or erasure of your data at [email protected]. If you are in the EEA/UK, you have rights under the GDPR. We normally respond to a rights request within one month. If a lawful extension is needed, we explain why within that month.

You may also request a portable copy of your data, restriction of processing, or object where applicable. You may complain to your local data protection authority, including Datatilsynet in Norway. Contact us to exercise these rights.

Children

The app is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect data from them.

Changes

We will post any changes to this policy on this page and update the date above. We will bring material changes to your attention and request fresh consent where required. Our Terms of Use describe the rules for using the app.