Privacy Policy

Last updated: October 2026

Witchwalk ("we", "our", or "us") respects your privacy. This Privacy Policy explains what information the Witchwalk mobile app (the "App") and this website use and how they are handled.

The short version: the App has no account. Your cottage and your steps stay on your phone: no step or other health data ever leaves it. The App sends us anonymous usage statistics, which you can turn off in Settings, and anonymous crash reports. If you buy something in the App, Apple or Google handles the payment. If you came from one of our ads, Meta may learn that the ad led to an install or a purchase; the App only shares your phone's advertising identifier if you allow tracking when your phone asks. None of it includes your steps.

This policy is written to match our App Store privacy label and Google Play Data Safety disclosures.

1. This Website

a. Beta waitlist

If you join the waitlist, we store the email address you submit, along with basic sign-up details (the date, the site or ad that referred you, and your browser type) so we can understand where interest comes from. We use your email only to contact you about the Witchwalk beta. We don't sell it or share it with anyone else, and you can ask us to delete it at any time at privacy@witchwalk.app.

b. Measurement

This website uses Meta's pixel and Conversions API to measure whether our ads lead to signups. When you submit the waitlist form, we may send Meta a hashed version of your email and standard browser details for that purpose. No health or step data ever reaches this website or Meta. How the App measures ads is described in section 2f.

2. Information the App Uses

a. Step Count (Required)

Witchwalk is a walking game: your real-world steps make time pass in your cottage. With your permission, the App reads your daily step count from Apple Health (iOS) or Health Connect (Android).

• Step data is read and used on your device only, to advance the game.
• It is never uploaded, shared, sold, or sent to us or anyone else, and it is never part of the usage statistics, crash reports or ad measurement described below.
• It is not linked to your identity. We do not know who you are.

The App only reads step count. It never writes health data, and it does not read workouts, heart rate, location, or any other health or fitness data.

On iPhone, the permission prompt explains it in these words:

"Witchwalk reads your daily step count from Apple Health to let time pass in your cottage. Your steps power the game and never leave your device."

On Android, the App asks for the single Health Connect permission "Read steps" for the same reason.

You can revoke access at any time (iOS: Settings > Health > Data Access & Devices > Witchwalk; Android: Health Connect > App permissions). The game simply stops advancing time until access is granted again. Nothing is deleted.

Important clarifications:

• Step data is not used for advertising.
• Step data is not sold.
• Step data is not shared with data brokers or any third party.
• Step data is not used for personalization or marketing.

b. Photos (Optional)

You can take photos of your cottage inside the game. They are stored inside the App on your device. If you press Save on a photo, the App adds that one picture to your photo library. This access is add-only: Witchwalk never browses, reads back, or uploads your library. On Android 13 and newer, saving needs no photo permission at all.

c. Crash Reports

If the App crashes or hits an error, it sends a crash report to Sentry, the service we use to find and fix bugs. A report holds what went wrong in the App's code, the App version, and basic device facts (phone model, operating system version). It never includes your steps, your photos, your name or any account, and it is not linked to you or used for tracking or advertising. Reports are kept only as long as Sentry's retention period, then deleted.

d. Usage Statistics (Optional, on by default)

To learn what players enjoy and where the game could be better, the App sends anonymous usage statistics to PostHog, the analytics service we use. They record what happens in the game, such as opening the App, reaching each card of the first-time tutorial, the night moving on, a visitor arriving for the first time, a curio bought or placed, a treat set out, gifts collected and which menus are opened, plus the App version, the phone's model and operating system, and its language and time zone. They never include your steps or any other health data, in any form. They are tied to a random ID created on your phone, not to your name, email or any account, and we have no way to know who you are. We do not collect your location, and we do not use these statistics for advertising.

You can turn them off at any time in Settings > Share anonymous usage. The change takes effect immediately and nothing more is sent.

e. Purchases

The App may offer optional in-app purchases. Payments are handled entirely by Apple (App Store) or Google (Google Play); we never see your card or payment details. We use RevenueCat to check your purchases with the store so the App can unlock what you bought and restore it on a new phone. RevenueCat receives the store's receipt for each purchase and a random App user ID created on your phone; it does not receive your name or email from us.

f. Ad Measurement

We advertise Witchwalk on Meta (Facebook and Instagram). To learn which ads lead people to install the App and to buy something in it, the App includes Meta's software development kit, which tells Meta when the App is installed and opened, and about purchases. RevenueCat may also tell Meta about purchases for the same reason.

• On iPhone, the App only shares your phone's advertising identifier (IDFA) with Meta if you choose "Allow" when your phone asks whether Witchwalk may track you. If you don't allow it, or are never asked, no advertising identifier is shared, and Meta receives only the install, open and purchase events without it.
• On Android, Meta's software reads your phone's advertising ID unless you have deleted it or opted out in your phone's settings (Settings > Privacy > Ads, or Google > Ads).

None of this includes your steps, your photos or anything you do in your garden. You can change your answer at any time (iPhone: Settings > Privacy & Security > Tracking).

g. Downloads

The App downloads its updates and some of its pictures from our own servers (including cdn.witchwalk.app). Like any download, the request carries standard technical data such as your IP address and device type. We use it only to deliver the files and do not link it to you.

h. What We Do Not Collect

• No account information: no email, no name, no login, no profile.
• No location, camera, microphone, or contacts access.
• No step data or any other health data ever leaves your phone.
• No advertising shown inside the App.

3. Data Sharing

We do not sell your data. Your cottage, your photos and your steps never leave your device. We use these services to run the App, and each processes data only for the purposes above: Sentry (crash reports), PostHog (usage statistics), RevenueCat (purchase checks), and Apple or Google (payments and app delivery). Meta receives install, open and purchase events, and your advertising identifier only as described in section 2f, to measure our ads. The only other data we hold is the waitlist email described in section 1, which is never sold or shared.

4. Data Storage and Deletion

Your cottage, creatures, photos, and progress are stored on your device only. Your phone's own backup (iCloud on iPhone, Google backup on Android) may include them, under your Apple or Google account, not ours.

There is no account to delete, because there is no account. Deleting the App deletes all of its data from your device immediately and permanently. Usage statistics are kept by PostHog only for its retention period, then deleted, and are not linked to your name; because they are tied only to a random ID on your phone, we cannot find yours unless you send us that ID, but you can turn them off at any time in Settings. Purchase records are kept by Apple or Google, and by RevenueCat for as long as needed to restore your purchases. To have your waitlist email removed, or for any request about data held by our services, email privacy@witchwalk.app.

5. Security

The App sends data only over encrypted connections. Your steps and your cottage stay on your device, protected by your phone's own security.

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, or delete personal data a company holds about you. The App has no account and we do not know who you are. You stay in control on your device: you can turn off usage statistics in Settings, decline or withdraw tracking permission, revoke step access at any time, and delete the App to remove everything stored on your phone. Write to privacy@witchwalk.app for any request and we will answer within 30 days.

7. Children's Privacy

Witchwalk is suitable for all ages but is not directed at children under 13. The App does not knowingly collect personal data from children. It has no account, no chat, and no user-generated content sharing, and it shows no advertising. If you believe a child has given us personal data, write to privacy@witchwalk.app and we will delete what we can find.

8. Changes to This Policy

We may update this Privacy Policy as the App changes. We will update the date above and, for material changes, tell you in the App or on our website before they take effect.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, contact privacy@witchwalk.app.