Privacy Policy
Weitlauf is an app for iOS and Android. An avatar walks across a map of Germany from your home town to a destination, powered by the steps your phone already counts. In short: no GPS tracking, no ads, no analytics. Only daily totals of your walking distance leave your device.
1. Controller
Alexander Dehn
Holzmarktstraße 75
10179 Berlin, Germany
Email: mail@alexanderdehn.com
2. Data we process
2.1 Health data (steps and walking distance)
With your consent the app reads your step count and walking and running distance from Apple Health (iOS) or Health Connect (Android) and turns them into daily totals on the device. Only these daily totals (date and metres) are sent to our server; no individual samples and no other health data. The app does not write to Apple Health or Health Connect. Legal basis: your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR). You can withdraw it at any time in Settings → Health data consent or in Apple Health / Health Connect.
2.2 Account and profile
On first launch the app creates an anonymous account. We store the display name you choose (optional), your home town as a municipality (centre coordinates and postcode, not your address), stride length and optionally height, your avatar and purchased avatar items, the time of your health data consent and your friend code. If you secure your account with Apple or Google, we receive an identifier and, if shared, your email address. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
2.3 Journeys, progress and collectibles
For each journey we store start, destination, the planned route, distance walked, reached waypoints and collected places. Routes run between town centres or sights, never from your location.
2.4 Friends
Friends you add see your display name, avatar, home town and active journeys with progress.
In a challenge, everyone invited or taking part sees your display name, avatar and progress on the challenge route, even if they are not your friends.
2.5 Notifications
For push messages we store a Firebase Cloud Messaging device token. Progress notices are created locally on the device.
2.6 Purchases
Purchases go through the App Store or Google Play; we receive no payment data. RevenueCat, Inc. (USA) manages purchases and receives your pseudonymous user ID, receipts and technical device data.
2.7 What we don't do
No location permission, no GPS, no advertising, no analytics or tracking tools.
3. Services
- Google Firebase (Google Ireland Limited): account, database and server functions in region europe-west3 (Frankfurt), push messages. Access by Google LLC (USA) cannot be ruled out; covered by the EU-US Data Privacy Framework and standard contractual clauses.
- Sign in with Apple / Google, if you secure your account.
- OpenFreeMap (map tiles; your IP address). Map data © OpenStreetMap contributors, ODbL.
- Photon by komoot GmbH (place search; search term and IP address).
- openrouteservice by HeiGIT gGmbH (walking routes, requested by our server; coordinates of start, destination and stops only), with FOSSGIS e.V. as fallback when it is unavailable.
- Wikimedia Foundation (texts and images from Wikipedia, Wikidata, Commons; your IP address).
- RevenueCat, Apple and Google for purchases.
4. Retention and deletion
We keep your data while your account exists. Settings → Delete account deletes everything at once: profile, journeys, daily totals, collectibles, friendships, your entries in challenges and the account itself. See also Delete your account.
5. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and you may lodge a complaint with a supervisory authority. Contact us at the email address above.
6. Children
Weitlauf is not directed at children under 16.