wayloop

Privacy policy

In force from 31 October 2026

Everyone who uses wayloop has an Account. You make it with Sign in with Apple, or with an email address and a password. This page says what wayloop keeps, what leaves your iPhone, who receives it, and how to have it removed.

Who is responsible

wayloop is made by Adam Norén, Sweden, who is the controller of the personal data described here. Write to wayloop@adamnoren.se about anything on this page.

What your iPhone reads

What stays on your iPhone

Your Account

The welcome ends with Sign in with Apple, or with an email address and a password you choose, before your first Route. wayloop cannot be used until you have an Account.

Apple gives wayloop an identifier, your name if you share it, and an email address, which can be Apple's private relay address. With an email address and a password, wayloop has the address you typed, and the password only in a scrambled form that cannot be read back. wayloop keeps your first name and your whole last name. Others see only your first name and the initial of your last name: see Finding people and Friend requests. The email stays with the sign-in record. It is used only to send the code that confirms the address when the Account is made, and a code to choose a new password when you ask for one. With Sign in with Apple, wayloop also keeps a token from Apple. It is used only to disconnect your Apple ID from wayloop when you delete the Account.

Your Account is known by an identifier of its own, a random string with no name in it. RevenueCat and PostHog know your Account by it, never by your name or email.

Your Account is signed in on one iPhone at a time. When you sign in on another iPhone, your backup comes back there, and the iPhone you used before is signed out, at the latest within an hour. An Activity running on it then finishes first and stays on that iPhone.

How wayloop learns from your backup

wayloop reads the backups of the people who use it to make wayloop better. It reads them for four things only: to draw Routes that fit the time or steps you ask for, to make the map and the painting of streets more accurate, to make Activities record better, and to see how wayloop is used, such as how often people walk and whether they come back. It reads them under each Account's identifier, never with a name or an email address. It does not use them to decide anything about you, to show you ads, or to build a profile of you for anyone else. This happens only at Supabase, where the backups are kept. Nothing from your backup goes to PostHog.

wayloop does this on a legitimate interest: making wayloop better. You can object. Turn off Help improve wayloop under Settings → Privacy, and your backup is left out from then on. The switch is on until you turn it off. Before anything of yours is read, the app tells you this once, with the switch beside it. To see how wayloop weighed this against your privacy, write to wayloop and you get a copy.

Your steps, Cadence, Stride, height and weight can say something about your health. The law protects health data more strictly, and a legitimate interest is not enough to read it. So wayloop does not read them to make wayloop better.

Your backup is never sold, never given to anyone for their own use, and never used for ads. It is deleted with your Account.

Health data

Your steps, Cadence and Stride, your height and weight, and the step count and weight from Apple Health can say something about your health. The law protects health data more strictly. wayloop keeps them in your backup, and shows your weekly steps on the Leaderboards you chose, only with your explicit consent. The app asks for it, and you can take it back in Settings. Without it, they stay on your iPhone. wayloop never reads them to make wayloop better, never uses them for ads and never gives them to anyone.

Your Health days are the amounts of steps, distance, time and kcal from Apple Health or Health Connect for each day. Your phone keeps them, whatever you answer. They go to your backup on wayloop's server only if you tap I agree on the screen that asks. That is a separate explicit consent, and it covers these amounts only. The app asks after you connect, or when you first make your own Milestone in a Health total, and you can open it in Settings under Apple Health. wayloop keeps them so they come back on a new phone. Nobody else sees them, and wayloop does not use them to make wayloop better. If you say no, nothing in the app is held back, and a new phone reads what Health still holds. Your answer and when you gave it are kept with your Account, and the next Account on a phone is asked for itself.

To take it back, turn off Keep Health days in my Backup in Settings under Apple Health. The days are deleted from the server at the next backup and stay on your phone, and reading goes on. Disconnect on the same page stops reading and writing, and deletes the days on your phone and in your backup. Your own Milestones stay and count the walks you record. iOS keeps its permission until you change it in the Health app, and Health Connect until you change it in its settings.

Walks from Garmin

You can connect your Garmin account in Settings. Then a walk, run or hike you record on a Garmin watch can be added to wayloop with one tap. Nothing comes from Garmin before you connect, and nothing you recorded before then.

Your name and photo

Other people see your first name and the initial of your last name, and a profile photo if you choose one. Which people is said under What other people see.

Finding people and Friend requests

You can ask someone to be Friends with Ask to be friends on their row. They can say yes, or tap Not now, which only takes your ask off their list. You are not told that they did not answer. You can take your ask back with Take back. An ask ends after 30 days, and then you can ask again. You can have at most 20 asks waiting at a time.

Notifications from the server

wayloop's server sends four kinds of notification, and no others: someone asks to be Friends with you, says yes to your ask, invites you to a Challenge, or a walk from Garmin is ready to add. They go through Expo's push service, which passes them on to Apple, and Apple shows them on your iPhone.

For this, your iPhone gives wayloop a push token: an address Apple makes so that notifications can reach wayloop on this iPhone. wayloop keeps it with your Account and a random identifier for this install. For each notification, Expo receives the push token and the words to show, in your language, with the name of the person it is about as you would see it. Never a photo.

The push token is sent only if you have allowed notifications for wayloop in iOS. Turn off Friends and Challenges and Walks from Garmin under Notifications in Settings, and wayloop removes the token from the server, so nothing is sent. With only Walks from Garmin on, the token is kept only while Garmin is connected. Each switch stops only its own kind. The token is also removed when you sign out or delete your Account.

Which features you use, if you say yes

Early in the welcome, wayloop asks whether you will share which features you use. Nothing is counted before you answer, and nothing if you tap Not now. The Share usage switch under Settings → Privacy changes your answer at any time. Turn it off, and nothing more is sent from that moment. Turn it on, and counting starts from then; nothing from before is sent.

After a yes, the app tells PostHog when it is installed or updated, when you open or leave it, and when you open one of its screens, sign in, plan a Route or ask for another, are asked to subscribe or invite friends and what you choose, send an invite or have a friend open one, buy or restore wayloop+, start or save an Activity, paint for the first time, start or answer a Challenge, open a Leaderboard, make a share card, add your paint to Everyone's map, connect or disconnect Garmin, see a walk from Garmin offered, add it or turn it down, tap a notification about one, turn those notifications on or off, turn adding Garmin walks on their own on or off, see that offered, or try any of this with Garmin and it does not work.

Each of these says what happened and when, and at most: the Mode, the kind of Goal, whether the Route is a Loop, the distance rounded to the kilometre (to 5 km from 10 km up), whether an Activity painted and a broad band for how much of it was New streets, whether it was followed on the phone alone or on your watch too, how many friends have opened your invites, whether Routes were unlocked by invites or by paying, and which plan you chose and how the purchase went. For Garmin it also says whether a walk was added on its own, what came of a tap on a notification, where adding on their own was changed, and why something did not work, in fixed words: never the walk, the place or the device. PostHog is also told whether you came to wayloop by a friend's invite link, by typing an invite code, or neither, but never whose invite it was. A screen is named by its kind, never by what is on it. PostHog adds details of the app and the iPhone (app version, iOS version, model, screen size, language and time zone) and random identifiers for the install and for each session. It also receives the IP address each one comes from, from which it works out a rough place: country, region, town and the town's approximate coordinates.

None of it holds your position, a Route or the line of an Activity, a street, a Place, anything from your Privacy zone, your name or your email. Nothing of your screen is recorded, and no advertising identifier is used.

It is linked to your Account, so wayloop can see whether people come back and what they use, across launches and iPhones. PostHog receives it on wayloop's behalf and keeps it in the EU for 1 year. When you delete your Account, wayloop asks PostHog to erase everything it holds under your Account, once a day until PostHog has. The Account itself is deleted at once either way.

After a yes, wayloop also lets RevenueCat ask Apple whether you installed wayloop from one of wayloop's own ads in App Store search, and if so, which ad and which search word. Apple answers without an advertising identifier and without following you across other apps or sites, and it answers only in the first 24 hours after the install. RevenueCat keeps the answer with your Account's identifier, so wayloop can see which ads bring people who stay. Turn Share usage off, and Apple is not asked again.

Whatever you answer, RevenueCat tells PostHog about your purchases, linked to your Account: which product, its price, the store, when it was bought and when it runs out, and any renewal, cancellation or refund. It lets wayloop see how many of the people asked to subscribe do. It is kept, and erased, as above.

Feedback

When an Activity ends you can rate it and say what worked, and send its log with that; from Help you can send a recent Activity's log when you write to wayloop. Only what you send leaves your iPhone: the rating and words, the kind of Activity, when it began, the City, its length and moving time, the app version, and the log if you leave its switch on. A log holds where you walked, so it is sent only when you choose to send it. wayloop reads it to find out what went wrong and to make the app record better. It is linked to your Account and nobody else sees it. A log is kept for 30 days; your rating and words until you delete your Account.

What else leaves your iPhone

What other people see

This website

wayloop counts each visit to this page, with the distance on the ruler, a random identifier for that page load and the site you came from. It is used to see how people find wayloop and what they try. Before the app was out, this page also asked for an email address. Those addresses were used once, on 13 October 2026, to say that the app was out, and were then deleted. PostHog loads only if you say yes when the site asks. Until then nothing of PostHog's is loaded and no cookie is set. What wayloop records above is the same whatever you answer. After a yes, PostHog sets its own cookie, which holds a random identifier for this browser, and receives the pages you open, how far you scroll, what you click, the site you came from, the kind of device and browser, and your IP address, from which it works out a rough place: country, region, town and the town's approximate coordinates. wayloop uses it to see how people find the site and what they do on it. Nothing of your screen is recorded. PostHog keeps the records in the EU for 1 year. Your answer is kept in this browser; to change it, . Vercel, which serves the site, keeps ordinary server logs with IP addresses for a short time.

An invite link opens a page on this website. wayloop counts each time that page is shown and each tap on its App Store button. A count holds the invite code, the language of the page, whether it was an iPhone, an Android phone or a computer, and whether the page was opened inside another app. The page sets no cookie, and wayloop keeps no IP address with the count.

Who receives data

WhoWhat forWhatWhere
SupabaseDatabase, sign-in and photosEverything under "Your Account", "Your name and photo" and "Finding people and Friend requests", the push token, a copy of your purchases from RevenueCat, website visit counts, invite page counts, the feedback and logs you send, and walks from Garmin waiting to be addedEU (Stockholm)
AppleSign in with Apple, payments, Apple HealthAs Apple's own policy saysApple
ResendSending the codes that confirm an address or reset a password, each Report to wayloop, and once, the email that said the app was outThe email address you type in, and the code; for a Report, the name as it was seen and the photo; for that one email, the address left on this websiteEU and USA
OpenAIChecking a photo or a name before anyone else sees itThe photo, or the name as others would see itOutside the EU
RevenueCatKnowing who has wayloop+Your Account's identifier, purchases, country, device model, iOS version, and the wayloop ad you came from, after a yes to Share usageUSA
ExpoApp updates, and sending notificationsApp updates: the app's version and an identifier for this install, from the IP address that asks. Sending notifications: the push token for this iPhone and the name in the notification, with the rest of its wordsUSA
SentryCrashes, errors and how fast the app opensCrashes and errors with their messages, timings, device model, iOS and app version, the screens, taps, log lines and server addresses just before (which hold your Account's identifier); not the IP addressEU (Frankfurt)
PostHogCounting which features are used in the app and visits to this website, each after a yes; purchases, from RevenueCatApp: your Account's identifier, what you did and when, app and device details, purchases. Website: a random cookie identifier, pages opened, scrolls and clicks, the site you came from, device and browser kind. Both: the IP address and the rough place worked out from itEU (Frankfurt)
VercelServing this website, building the map of your area, passing the app's photos, names and Reports on to the check and the database, handing notifications to Expo, and receiving walks from GarminServer logs; the place a Route starts from and the words you search for; photos, names, notifications and walks from Garmin only while they passEU and USA
Komoot (Photon)Finding a place you search forThe words you type, sent by wayloop's website, never with your IP address or AccountEU (Germany)
GarminSending the activities you record on a Garmin watch, after you connect itYour Garmin user identifier, and wayloop's requests for the keys to your AccountUSA
Hetznerwayloop's own map serverThe area around a place, asked for by wayloop's website, never with your position, your IP address or your AccountEU (Finland)

They work on wayloop's behalf under data processing agreements. Where data goes to the USA, it does so under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Supabase, PostHog, Sentry and Resend keep wayloop's data in the EU, but they are American companies, and their staff in the USA may reach it, for example for support; the same safeguards cover that. OpenAI receives photos and names through OpenAI Ireland, under its data processing addendum and the standard contractual clauses, and checks them outside the EU. You can ask wayloop for a copy of these safeguards.

The map of your area is built when you need it. Your iPhone sends wayloop's website the place a Route starts from, and the words you type when you search for a place. The website asks OpenStreetMap services for the streets of the area around it, without your position, your IP address or your Account.

Why wayloop may do this

How long it is kept

Your choices and your rights

Children

wayloop is not made for children under 13 and does not knowingly collect their data. In some EU countries, a child under 14, 15 or 16 needs a parent's consent for some of what is described here. There, wayloop is only for people old enough to agree on their own. If you believe a child has signed in, write and the Account is removed.

Changes

When this page changes, the date at the top changes with it. A change that matters, such as a new recipient or a new kind of data, is also said in the app before it takes effect.

This policy is also published in Swedish. The two say the same and carry the same weight.