Last updated: October 18, 2026
Walk Off Friends is a small iPhone app for friendly weekly walking competitions. This policy describes exactly what the app collects and what happens to it. There is nothing hidden: no ads, no trackers, no third-party analytics, no selling of data.
Health data. With your permission, the app reads your walking + running distance and step count from Apple Health. Your daily distance and step totals for the most recent days are uploaded to our server so they can count toward your leaderboards, races, journeys and games. Only daily totals are uploaded — never workouts, routes, locations, or any other Health data. Your distance is shared as described in “Who sees what” below; your step totals are never shown to anyone else.
Display name and walker. The name you choose during onboarding, and the walker figure you pick for yourself. The name can be anything; it does not have to be your real name. We also store your invite code and your app settings (such as miles or kilometers).
Sign in with Apple identifier. We use Sign in with Apple as the only login method. We receive a random, app-specific identifier from Apple to recognize your account, and a token we keep only so we can disconnect Sign in with Apple when you delete your account. We do not receive or store your email address or your real name from Apple.
Hunt photos. The Hunt asks for camera access so you can photograph a find and share it with your friends. Every hunt photo you take is uploaded as a small copy and shown to your connected friends — taking a hunt photo is sharing it; see “Hunt photos are shared” below for exactly what happens. Each shared photo is stored with its optional title, the time you took it, and how far you had walked that week. Hunt photos are never analyzed by any software (ours or anyone else's). The app also asks for add-only access to your photo library so it can save a courtesy copy of each find there; add-only means the app can put photos in, but can never read, browse, or see your library. Both permissions are optional and asked for only when you first use the hunt — declining them changes nothing else about the app.
What you write and play. Anything you create in the app is stored on our server so the games work and the people you play with can see it (exactly who sees what is below):
Notification token. If you allow notifications, your phone registers a push token with us so we can tell you about friend requests and Crossed Letters games. It is removed when you sign out or delete your account.
Server logs. Our server keeps short-lived technical logs: when each request came in, what it asked for, its result and the app version for 30 days; and error messages, a few game events (such as finishing a Mail Delivery level), and the details of any report filed (including a reported title, comment, race note or log entry) for 90 days. They never record your IP address.
Your data is never sold, shared with anyone for their own use, or used for advertising or tracking. The app contains no analytics or tracking tools; the developer occasionally looks at simple counts from our own server (such as how many people synced this week) to run the app and see how much it's used.
The hunt is a game you play with your friends, so every hunt photo is taken to be shared: after the shutter you can add a title, retake, or cancel, and the one way to keep the photo is to share it. The app says so above the shutter and on the button itself. When you share a find, the app uploads a small, compressed copy (with all photo metadata such as location removed) that only your connected friends can see. If you have no signal, the photo waits on your phone and uploads the next time you open the app; until then only you can see it, and you can discard it. There is no public feed and no way for a stranger to see it. Shared copies are short-lived by design: a shared find stays visible to the same friends in the hunt for about three months after you take it, and friends can react and comment there the whole time. Once it passes that window it disappears from everyone's view and is permanently deleted from our servers within days — a shared copy is gone within roughly fourteen weeks of sharing, at most. The full-resolution original never leaves your phone; it stays there as your copy of what you shared. You can unshare a photo at any time from the app — including older ones — which removes it for your friends and from your phone together (any copy you saved to your photo library stays). You can report a friend's photo or comment from the app; reports are recorded and reviewed by the developer, and you can always reach us directly at the contact address below.
Data is stored on Amazon Web Services (DynamoDB, US region) and is transmitted over HTTPS. The app stores its login token in the iOS Keychain on your device. We keep your data for as long as you have an account, apart from the short-lived hunt photos and server logs described above.
Shared hunt photos are stored on AWS (S3, US region) until the deletion described in “Hunt photos are shared” above — within roughly fourteen weeks of sharing, at most. The full-resolution originals stay on your device.
Hunt photos taken with an earlier version of the app that you chose to keep private are the one exception: they stay only on your device, are never uploaded, and you can delete them from the app.
Apart from Amazon Web Services, which hosts our server, the only outside services the app uses are Apple's: Sign in with Apple, Apple's push service (which delivers notifications), Apple Maps (place search, routes and map pictures), and Apple Weather (for a themed week's scenery, fetched for the theme's own place). The app never asks for or uses your location.
Delete your account any time in Settings → Delete Account inside the app (Settings is the gear on the Profile tab). This revokes the app's Sign in with Apple connection and permanently removes from our servers your account and display name, your activity history, trophies and race wins, your friendships and friend requests, your Mail Delivery progress, your notification tokens, every hunt photo you shared, and any race or journey you founded that is still under way (it ends for everyone in it). There is no grace period and no backup copy retained; deletion is immediate and irreversible. Your data in Apple Health is never touched — the app only ever reads from it.
A few things you added to other people's games stay with them, shown without your name:
Hunt photo originals kept inside the app on your phone are deleted with the app if you uninstall it, and copies saved to your photo library are yours and remain there like any other photo.
Questions about this policy or your data: walk-off-friends@frisbeebird.com.
If this policy changes, the updated version will be posted at this URL with a new "last updated" date.