Privacy Policy for Hardcore Walk

Last updated: 2026-07-18

Who we are

Hardcore Walk ("the app", "we") is published by Kanatago AS. Contact: [email protected]. This policy covers the Hardcore Walk mobile app and hardcorewalk.com.

Data we process

• Steps and health data. With your permission the app reads your daily step count from Apple HealthKit or Android Health Connect. We never write health data. Your daily step totals are synced to our server to resolve your walking goals and position in rounds.
• Account identifiers. You start with an anonymous account (a random ID). If you sign in with Apple or Google, we store the identifier (and, if shared, email address and name) that provider gives us, linked to the same account.
• Chat messages. Messages you send in the world are stored with your display name and shown to nearby players. Messages may be hidden by our moderation systems or after user reports.
• Push tokens. If you allow notifications, we store a device push token to deliver chat and round notifications.
• Support email. If you email support we keep the correspondence.

What we do NOT do

• No advertising, no ad tracking, no sale of data, no analytics profiles.
• We do not share your data with third parties except the processors below.

Processors

• Supabase (database, authentication, serverless functions) hosts our backend and stores the data above.
• Apple / Google provide sign-in and deliver push notifications (via Expo's push service).

Retention & deletion

Data is kept while your account exists. Delete your account any time in the app: Settings, then Delete account. Deletion is immediate and permanent: your profile, round history, step totals, messages, blocks, reports, and push tokens are erased. See account-deletion.html for details. You can also revoke Health access at any time in iOS Settings / Health Connect.

Your rights

You may request access, correction, or erasure of your data at [email protected]. If you are in the EEA/UK, you have rights under the GDPR; our lawful basis is performance of the service you request (Art. 6(1)(b)) and consent for health data (Art. 9(2)(a)), which you may withdraw at any time.

Children

The app is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect data from them.

Changes

We will post any changes to this policy on this page and update the date above.