WalkTo Privacy Policy

Effective date: October 31, 2026
App: WalkTo (WalkTo: Travel Journal & Map on Google Play)
Developer: homesapp
Contact: dannyhilariosuarez@gmail.com

WalkTo is a travel journal for the days you're out: you add each place you go as a step, with photos, on your own or with the people you travel with. This policy explains what WalkTo collects, why, who can see it, and the choices you have. It covers the WalkTo apps for iPhone and Android and the WalkTo website.

We wrote this to match exactly what the app does. If something here stops being true, we will update this policy before the change ships.

The short version

• You sign in with Google, or with an email address and a password. We keep your name and email address, the username you choose, and your profile picture if you use Google.
• We store the trips you create or join, the places you say you'd go to or skip, which places your trip marks as visited, and the photos you choose to add.
• WalkTo uses your phone's location. Your location never leaves your phone. WalkTo asks for location only when you tap What's nearby. If you allow it, the app also notes where you are each time you open a trip that's happening, so it can ask "Did you stop here?" about places you stayed. If you turn on the travel tracker by setting location to Allow all the time, WalkTo also notes where you are every few minutes, even when the app is closed, to track your route, suggest spots you might want to remember, and remind you to start a trip when you're far from home. Home is worked out on your phone from where it spends the night. All of these readings are kept only on your phone and are never sent to us. Trip readings are cleared when the trip is done, and turning the tracker off in Settings clears the rest.
• Photos have their location removed before they are uploaded. Phone cameras hide GPS coordinates inside photo files; WalkTo strips them on your device first, so they never reach our servers.
• Your trip details, votes and photos are visible only to people on the same trip.
• No ads, no third-party analytics or tracking SDKs, and we do not sell or rent your data.

What we collect

Your account

When you sign in with Google, we receive and store:

• your name
• your email address
• a link to your Google profile picture
• an account identifier that links your sign-in to your WalkTo data

We never see your Google password.

When you create an account with an email address instead, we store your name, the username you choose and your email address. Your password is kept in a scrambled (hashed) form by our sign-in provider, so we cannot read it.

We use these to sign you in and to show your name and initial to the people on your trips.

What you add to a trip

• Trips: the destination you type, check-in and check-out dates, and your device's time zone (so "today" means today where you are when working out whether a trip is upcoming, happening now or completed).
• Decisions: for each place on a trip, on each day, whether you said "I'd go" or "Skip".
• Visited: which places on the trip have been marked visited, and who marked them.
• Photos (Moments): photos you choose to add to a place, and who added them. Location data embedded in a photo is removed on your device before upload. Photos are only accessed when you tap Add photo and choose the camera or your library; WalkTo asks for camera or photo library permission at that moment and never reads your library in the background.

Location

WalkTo accesses your device's location (precise or approximate, whichever you allow) for these features only:

• What's nearby: when you tap What's nearby on a trip, one reading shows which suggested places are close to you.
• Did you stop here?: while a trip is happening and you have allowed location, a reading each time you open that trip lets WalkTo ask about places you stayed a while. A place becomes a step only if you tap Add it.
• Travel tracker (background location, optional, off by default): if you turn it on and set location to Allow all the time, WalkTo reads your approximate location every few minutes, even when the app is closed or not in use, to notice places you stayed on an open trip and to remind you to start a trip when you're away from home.

Before Android asks for permission, WalkTo shows a screen explaining this and you choose whether to continue. Location readings are processed and stored only on your phone. They are never sent to our servers, never shared with anyone, and never used for advertising. Trip readings are cleared when the trip is done; turning the tracker off in Me, then Settings, then Travel tracker, clears the rest. You can also remove location access at any time in your phone's settings.

Place information

To show places near your destination, WalkTo sends the destination text you entered (for example, "Providence, RI") from our servers to Google Places, and stores the results (place names, addresses, map coordinates of the businesses, and Google photo references) for up to 30 days so the same destination is not looked up again. This is information about businesses, not about you.

Destination photos

To show a photo of your destination on a trip, WalkTo sends the destination name from our servers to Unsplash and stores which Unsplash photo was chosen, so every trip to the same place uses the same photo. Nothing about you is sent.

Notifications

If you allow notifications, we store a push token for your device (an identifier that lets us send notifications to it), linked to your account, and your notification settings. We use it only to tell you about your trips: someone joining, places your group agrees on, new moments, and reminders around your trip dates. The token is removed when you sign out on that device, and when the device stops accepting notifications.

How the website is used

On the WalkTo website we record a few events against your account, with the time they happened: when you open WalkTo, when the offer to install it is shown, accepted or dismissed, and when it is installed. Each one notes which version of the offer you saw, where it appeared, and whether you were on Android, iPhone or a computer. We use these only to learn whether the install offer helps. They are kept in our own database and are not sent to any analytics company.

Stored on your device

• Your sign-in session, so you stay signed in.
• Votes you make while offline, until they are sent.
• Whether WalkTo has already asked you about notifications, and your device's push token.
• Whether you have been offered the installed version of WalkTo, so you are not asked again too soon.
• If the travel tracker is on: recent location readings, where your phone spends the night, and the day it last reminded you to start a trip.

What we do not collect

• Your location on our servers: it is read and kept on your phone only (see Location above)
• Your contacts, calendar, messages, or browsing activity
• Advertising identifiers, third-party analytics, or crash-tracking data
• Payment information

How we use it

Only to run WalkTo: signing you in, saving your trips, working out which places your group agrees on, showing photos to your trip, and keeping the service secure. We do not use your data for advertising or profiling, and we do not use it to train AI models.

Who can see your information

• People on the same trip can see your name and profile initial, your votes on that trip's places, which places are marked visited, and the photos added to that trip. Anyone who has a trip's invite link can join that trip, so share invite links only with people you're traveling with.
• Nobody else. Access is enforced by the database itself: each request only returns data from trips you belong to. Photos are kept in private storage and are shown through links that expire after an hour.

Service providers

We use a small number of providers to run WalkTo. They process data on our behalf and only to provide their service:

• Supabase hosts our database, sign-in and photo storage (United States).
• Google provides Sign in with Google and Google Places data. When WalkTo shows a Google photo of a business, your device loads that image from Google's servers, which means Google receives your device's IP address, as with any image on the web.
• Vercel hosts the WalkTo website, and receives your device's IP address when you load it, as any web host does.
• Expo builds and distributes the app and delivers push notifications to it. Notification text (for example, "Maya joined your Providence trip") passes through Expo's push service, and through Google (Android) or Apple (iOS) to reach your device. On the website, it passes through your browser's own push service instead.
• Unsplash provides destination photos. When WalkTo shows one, your device loads the image from Unsplash's servers, which means Unsplash receives your device's IP address, as with any image on the web.

When you tap Walk or Drive, WalkTo opens Apple Maps or Google Maps with directions to the place. From then on, that maps app's own privacy policy applies, including its use of your location to give you directions.

We will disclose information if required by law, or to protect the safety of our users or the public.

How long we keep it

• Your account and trip data are kept while your account exists.
• Photos are kept until the person who added them deletes them, the trip is deleted, or the account is deleted.
• Cached place information is refreshed or removed after 30 days.
• When you delete your account, your profile, your votes, the photos you added and the events recorded against your account are deleted from our systems within 30 days, except where we must keep something to meet a legal obligation. Trips you created stay available to the other people on them, without your name attached, and visited marks you made stay without your name.

Your choices and rights

• Photos: you can delete any photo you added, at any time, from the trip's picks.
• Visited: anyone on a trip can mark or unmark a place as visited.
• Permissions: you can turn location, camera or photo library access off at any time in your device settings, and the travel tracker off in Me, then Settings.
• Notifications: you can turn group activity or trip reminders off in WalkTo's Profile settings, or turn all WalkTo notifications off in your device settings.
• Access, correction and deletion: you can ask for a copy of your data or ask us to correct it by emailing dannyhilariosuarez@gmail.com. You can delete your account and its data yourself in the app (Me, then Settings, then Delete my account) or at walkto.io/delete-account, or by emailing us.

Depending on where you live (for example the EU, the UK, or California), you may have additional rights, such as objecting to processing or complaining to a data protection authority. We honor these requests regardless of where you live.

Children

WalkTo is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Security

Data is encrypted in transit. Access to trip data is restricted at the database level to the people on each trip, and photo storage is private. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects you.

Changes

If we change this policy, we will update the effective date above, and for significant changes we will tell you in the app before they take effect.

Contact

Questions or requests: dannyhilariosuarez@gmail.com
homesapp, developer of WalkTo