Privacy notice
Version 2026-11-04
Without an account, nothing leaves your device. Walk runs in your browser and keeps your walks there.
With an account (optional), we keep your email address and your walk totals, so they sync between your browsers and reach the AI assistants you connect. Nothing else. No names, no passwords, no location, no IP addresses, no analytics, no ads, no tracking. We never sell or share your data.
Who we are
Walk is run by Omri Lotan, an individual in the United Kingdom, who is the controller of the data described here. Contact: support@omrilotan.com.
What we store, and why
Only when you sign in. Each item is kept only as long as it's needed.
| What | Why | Legal basis | How long |
|---|---|---|---|
| Email address | Your account: we email you sign-in codes. | Contract: providing the account you ask for. | Until you delete your account. |
| Walk totals: start and end time, distance, duration, steps, calories, top speed | Sync between your browsers, and for the assistants you connect. | Your explicit consent, given when you sign in. Exercise data can count as health data. | Until you delete the walk or your account. A deleted walk leaves only an empty marker, for 90 days, so your other browsers delete it too. |
| Daily goal and time zone | Your goal on every device; your days counted in your time zone. | Contract. | Until you delete your account. |
| When you agreed to this notice and the terms, and which version | To show we have your consent. | Legal obligation. | Until you delete your account. |
| Sign-in session (a random token, stored only as a hash) | Keeps you signed in. | Contract. | Until you sign out, or 180 days. |
| Sign-in codes (stored only as hashes) | Signing in. | Contract. | Deleted when used, or after 15 minutes. |
| Abuse counters (your email address or network, stored only as a hash) | Limiting how many sign-in emails can be requested. | Legitimate interest: protecting you and the service from abuse. | At most 24 hours. |
| Assistants you connect: their name, what you allowed, when | Letting them read your walks, and showing you what's connected. | Your consent, given on the approval screen. | Until you disconnect them or delete your account. |
Accounts with nothing synced and no sign-in for two years are deleted automatically. Deleted data stays in the database's automatic backups for up to 30 days, then it's gone. We keep no request logs.
What stays on your device
Your walks, their per-second readings, your settings, the ID of your pad, and a random ID that ties a sign-in code to your browser. These stay in your browser's storage and never reach us. If you sign in, one cookie keeps you signed in. It's strictly necessary, so there's no cookie banner. We use no other cookies.
Who else handles it
- Cloudflare hosts Walk, its database and the sign-in emails, as our processor under its data processing terms. Your account and walks are stored in the European Union. Sign-in emails, and the records of assistants you connect, pass through Cloudflare's global network, with the safeguards its terms provide.
- AI assistants you connect. When you connect one, it reads your synced walks on your behalf. What it does with them is up to its provider and your settings there. You choose whether to connect one, and can disconnect it any time.
Walk loads nothing from other websites: its fonts and icons are served by Walk itself.
Your rights
- See and take your data: in Walk, Menu, Sync and assistants, Download my data.
- Delete it: delete walks, use Reset my data, or Delete account. Deleting the account removes everything above.
- Withdraw consent: sign out and delete your account, or disconnect an assistant. Walk keeps working on your device.
- Correct it, restrict or object: email us.
- Complain: to the UK Information Commissioner's Office (ico.org.uk), or the data protection authority where you live.
Security
Everything travels encrypted. Codes and sessions are stored only as hashes. Sign-in codes work only in the browser that asked for them, and a few times at most.
Children
Accounts are for people aged 16 and over.
Changes
If this notice changes, the version date above changes, and Walk asks for your agreement again the next time you sign in.