WalkFarm

With your permission, WalkFarm reads your step counts from Apple Health or Health Connect to display walking history and award farm energy. Raw step counts and detailed walking history stay on your device and in backups you choose to export. In versions with gifts, the app sends the calendar dates on which you reached at least 10,000 steps to WalkFarm’s service, linked to your game account, to award one gift per qualifying day and prevent duplicate rewards. These qualifying dates reveal that you met the walking goal; your friends do not see the dates or your step counts. Walking and health information is not sold, used for advertising, or shared with data brokers. WalkFarm does not write or change your health records. Health access is optional; you can revoke it in your device’s health settings.

Farm progress and preferences are stored locally. If you enable automatic backup, WalkFarm uploads an encrypted copy of your game progress, appearance, energy, earned gems, upgrades, and gem-pouch recovery credential to its hosted service. These automatic saves exclude raw step counts and detailed walking history; game progress can include gift eligibility dates and gift records. The service stores the encrypted copy, its revision and save time, and an identifier linked to your gem pouch. Your recovery code is needed to decrypt it. Optional Game Center or Google Play Games sign-in saves that recovery code privately through Apple’s or Google’s saved-game service so you can recover your farm on another device. Game profile identifiers are used on your device to associate the correct saved-game connection; WalkFarm does not upload your profile name to its server. You can also export a password-protected backup file, which may include your on-device walking history and gem-pouch credential. Anyone with a recovery code, or both an exported file and its password, can restore the associated data, so keep them private.

In versions with friends and gifts, WalkFarm stores a random player identifier, your chosen farmer name, invitation link, friends and blocked-player relationships, and a view of your farm, including its layout, crops, decorations, house, and farmer appearance. A real name is not required; please choose a nickname and avoid putting contact information in it. Friendships begin when another player opens an invitation. The app does not read your phone’s address book. Friends can see your chosen name and shared farm and exchange gifts. WalkFarm stores gifts earned, sent, received, and opened, their sender and recipient identifiers, and energy and gem rewards to deliver presents and prevent duplicate claims.

Friends can say hi with a preset greeting or, from version 2.0, a short message of their own of up to 100 characters. WalkFarm stores each greeting or message with its sender and recipient identifiers and send time, and deletes it after one week; unfriending, blocking, or deleting either account removes it sooner. Before a written message is delivered, its text is checked for links, contact details, and unkind words. A message that does not pass is neither delivered nor stored. You can also paint a short message on your farm’s welcome sign; friends see it only after it passes the same kind of check.

Proposed farmer names, welcome-sign messages, and written messages are sent to OpenAI’s moderation service to check for inappropriate content. Each request contains only the text being checked and a short fixed label, not who wrote it or who it is for, your walking data, farm, or account credential. See OpenAI’s privacy policy. If you report a player, WalkFarm stores the reporting and reported player identifiers, reported name, selected reason, report time, and review status for safety review. Reports are not shown to the reported player. If you flag a friend’s written message, it is hidden from your mailbox and WalkFarm stores its text, the sender’s identifier and name, and when it was sent and flagged, for safety review; the sender is not told who flagged it. A reviewer can stop a player from writing their own messages. You can report, block, or unfriend from the menu while visiting a friend’s farm. Blocking prevents further visits, invitations, and gifts between the two accounts; an already received gift can remain redeemable with its sender hidden.

The phone app asks every player for their birth month and year once, before the farm opens. WalkFarm keeps only whether the player is under 13 or 13 and older, on the device and with the game account; the birth month and year themselves are not stored or sent.

For players under 13, ad requests ask Google to treat the player as child-directed and under the age of consent; farmer names must be a single word rather than a full name; the player cannot write their own messages, and friends’ written messages reach them as a preset greeting; and their welcome sign always says WELCOME. Once an account is identified as under 13, a later answer does not change it. A parent or guardian can ask us to review or delete a child’s information by emailing farmer@walk.farm.

If you allow gift notifications, WalkFarm stores a device notification token, a random installation identifier, your app version’s platform and notification environment, and its connection to your game account. Apple Push Notification service or Google Firebase Cloud Messaging receives the token and gift alert to deliver the notification. Alerts contain a generic gift message and gift identifier, not your name, farm, or walking information. Firebase Analytics is not enabled for this feature. You can turn notifications off in your phone’s settings; deleting your WalkFarm account removes its registered notification tokens and pending alerts.

Invitation links include a random friend invitation identifier. On Android, Google Play’s install referrer can pass that identifier to the installed game. On iPhone, the invitation App Clip keeps the identifier in storage shared only with WalkFarm so it can continue after installation. This handoff does not read your clipboard or address book.

When you connect a gem pouch for purchases or automatic backup, the app sends a random wallet credential over an encrypted connection. The server stores its digest as a wallet identifier, together with gem balances, purchase verification records, and permanent upgrades. Apple or Google processes payments; WalkFarm does not receive your payment-card number. Purchase records are used to verify payments, prevent duplicate credits, restore the pouch, and handle refunds. Your health information is never included in these requests.

If you contact support, we receive the email address and information you send and use them to respond to your request. If you send feedback from the app, WalkFarm stores your message, its category, and your app version and platform. When you allow the WalkFarm team to reply, the feedback is linked to your game account so a reply can arrive as a letter in your mailbox. If the app runs into an error, it sends an anonymous error report containing the error message, technical details, app version, and platform, without your account, farm, or walking data. Hosting providers process connection information, such as IP addresses, to deliver and protect the website and any enabled shop service. Mobile versions with ads enabled offer optional Google AdMob rewarded ads for extra walking energy. You keep your original walking energy if you skip or close an ad. Google’s advertising SDK may collect your IP address (including approximate location), device or app identifiers, ad views and interactions, crash logs, and performance diagnostics for advertising, ad measurement, analytics, fraud prevention, security, and compliance. WalkFarm requests non-personalized ads and does not send step counts, qualifying walking dates, health records, friend lists, farmer names, farm saves, or gem-pouch credentials to AdMob. Non-personalized ads can still use identifiers and connection data for delivery, measurement, and fraud prevention. Connections to WalkFarm and Google’s advertising services use encryption in transit. Where available, manage your choices in the app’s Settings under Ad privacy choices. See Google’s privacy policy. Earlier versions with ads disabled do not show ads. On Android, Google Play Games Services automatically collects game-service usage and diagnostic information to improve its SDK and service stability. Google also manages your game profile under its policies. You can delete your Google game profile or its data for WalkFarm through Google Play Games settings or Google My Account. WalkFarm does not send your step counts or walking history to those services.

Local farm data remains until you delete it or remove the app. The service keeps wallet and transaction information while the pouch exists, and the latest encrypted cloud save while automatic backup is enabled. Turning off and deleting cloud backup removes the server copy while preserving your local farm and pouch. The in-app farm and pouch deletion flow removes its balance, receipt records, upgrades, cloud save, social profile, age group, qualifying walking dates, gift records, greetings and messages, and reports and flags by or about that account from the live service, and removes its friendship and block references from other accounts. Greetings and written messages are deleted after one week, and letters from the WalkFarm team after 30 days. Flagged messages and player reports are kept for safety review and removed when an account they involve is deleted; deleting your account also unlinks feedback you sent. Social records otherwise remain while the account exists; unfriending does not delete the whole account or gift history. Game-account recovery can be disconnected separately in backup settings; a remaining game-service recovery code cannot restore a deleted server copy. A minimal marker containing the wallet credential’s digest and deletion time remains to prevent deleted wallets from being recreated by old backups or delayed purchases. Apple and Google keep their own store records under their policies. Exported backups remain wherever you saved them until you delete those files.

You can decline health access, revoke it later, export your progress, or request deletion below. Contact farmer@walk.farm with privacy questions or requests concerning your information. We may ask for enough information to verify ownership before taking action. Any changes to this policy will be posted here with an updated effective date.