Privacy policy
In force from 31 October 2026
Everyone who uses wayloop has an Account. You make it with Sign in with Apple, or with an email address and a password. This page says what wayloop keeps, what leaves your iPhone, who receives it, and how to have it removed.
- No ads, no advertising identifiers, no tracking across other apps or sites. Nothing is sold.
- Your position is read only while an Activity is running, and then with the phone locked too, or when you tap to find where you are.
- Your Account backs up what is yours in wayloop: your Activities, Coverage, Routes, Places, Home and settings. It is kept in the EU, in Stockholm.
- wayloop reads the backups to make wayloop better, never with your name or email. To object, turn off Help improve wayloop in Settings.
- Your steps, Cadence, Stride, height and weight are never read for that.
- Which features you use is counted only if you say yes. It is linked to your Account, and it never holds your position or a Route.
- Friends and boards see totals, a first name and a photo. Never a Route, never a line on a map.
- Anyone signed in can find you by your @name or your name, unless you turn that off. Your whole last name is never shown.
- Names and photos are checked before anyone else sees them, and anyone can report one.
Who is responsible
wayloop is made by Adam Norén, Sweden, who is the controller of the personal data described here. Write to wayloop@adamnoren.se about anything on this page.
What your iPhone reads
- Position. Read while an Activity is running, to draw the line you walk, paint the streets and time the turn cues. Also read when you tap to find where you are, to start a Route there. While one is running it is read with the phone locked too, so the Activity goes on in your pocket. iOS shows a blue indicator while that happens. It is never read at any other time, and wayloop never asks for the Always permission. The line of each Activity goes into your backup (below).
- Motion. Used to count your steps and measure your Cadence during an Activity. The average Cadence of each Activity goes into your backup.
- Apple Health. Only after you tap Connect Apple Health. On your iPhone, wayloop reads these as far back as Apple Health lets it, and then each day: your step count and your active energy, each if its switch is on; the distance you walk and run; and when walks and runs saved in Apple Health by any app started and ended. If your Daily goal is in kcal, it also reads your active energy for the last eight days. If you have not typed your weight in Settings, it also reads your weight. On an Android phone it reads the same from Health Connect, which lets it go back about 30 days. Where your phone can, Health Connect also asks if wayloop may read older days. If you allow it, wayloop reads as far back as Health Connect holds. If you say no, nothing else changes, and older days show no data. Your phone keeps the amounts day by day: steps, distance, time and kcal. They stay on your phone unless you agree to keep them in your backup, as Health data says. If you are signed in, the days you reached your goal also go to wayloop's server. Your iPhone reads nothing else. It writes a finished Activity as a workout with its distance and, if you allow it, active energy. If Apple Watch can measure the Activity, the watch saves that workout instead of your iPhone. The watch reads today's steps to show your Daily goal. During the Activity it reads your heart rate, the distance and, if you allow it, active energy, and saves them with the workout. Heart rate stays in Apple Health: wayloop keeps only the kcal. Health data is never used for advertising and is never given to anyone for it.
What stays on your iPhone
- Activity logs. For each Activity, wayloop keeps a log on your iPhone of what the phone heard and did: every position with how sure the phone was of it, the step counter's readings, the battery, whether the phone was locked, and what the Activity did, such as a pause or a turn cue. It is there to find out what went wrong when an Activity records badly. The last 20 are kept, and none leaves your iPhone unless you send it: see Feedback.
- Photos on share cards. A share card leaves your iPhone only when you share it yourself. Your profile photo does leave it: see Your name and photo.
- Notifications. Reminders, such as the one for your daily goal, are planned on your iPhone. Three other kinds come from wayloop's server: see Notifications from the server.
- Apple Watch. Turn cues, the state of an Activity and the kcal your watch measured go between your iPhone and your watch, and nowhere else. The workout your watch saves goes to Apple Health, as above.
- The sign-in. Your iPhone keeps you signed in. That stays on the phone, and so does the map of your area.
Your Account
The welcome ends with Sign in with Apple, or with an email address and a password you choose, before your first Route. wayloop cannot be used until you have an Account.
Apple gives wayloop an identifier, your name if you share it, and an email address, which can be Apple's private relay address. With an email address and a password, wayloop has the address you typed, and the password only in a scrambled form that cannot be read back. wayloop keeps your first name and your whole last name. Others see only your first name and the initial of your last name: see Finding people and Friend requests. The email stays with the sign-in record. It is used only to send the code that confirms the address when the Account is made, and a code to choose a new password when you ask for one. With Sign in with Apple, wayloop also keeps a token from Apple. It is used only to disconnect your Apple ID from wayloop when you delete the Account.
Your Account is known by an identifier of its own, a random string with no name in it. RevenueCat and PostHog know your Account by it, never by your name or email.
Your Account is signed in on one iPhone at a time. When you sign in on another iPhone, your backup comes back there, and the iPhone you used before is signed out, at the latest within an hour. An Activity running on it then finishes first and stays on that iPhone.
- Your backup. In the app, only you can see it and change it. wayloop also reads it, as How wayloop learns from your backup says. It holds:
- your Activities: the kind, when each began and ended, the length, New streets, Climb, your average Cadence, the time you spent moving, the time its Route was expected to take and the pace that time was worked out from, the goal you set for the Route, and the line you walked with when you were at each point of it;
- Coverage for each street, with the week it was first painted;
- your saved Routes and Places, and the places you used last;
- Home: where it is, and the address you gave it;
- every choice in Settings, such as your goals, Route preferences, Privacy zone, notifications, the Apple Health switches and your sharing choices, and your height, weight and Stride (see Health data);
- the Stride and pace wayloop learned from your Activities;
- what invites gave you;
- your Health days, only if you agreed to it, and your yes or no with when you gave it (see Health data);
- your latest answer to Share usage, and whether Help improve wayloop is on.
- Weekly totals for Leaderboards: New streets, steps and your share of the City, and the days you reached your goal. If Apple Health is connected, the step total comes from Apple Health. Your steps and the days you reached your goal also count in the comparison on Stats, where each person sees how they stand against everyone. There they are only numbers, with no name, and they count even if you chose Nobody under Leaderboards.
- Your language: the language wayloop writes to you in. It is the language the app speaks on your iPhone, kept so that the notifications and emails wayloop sends you come in it. The app updates it when that language changes.
- Invites and friendships. An invite carries a code made on your iPhone, a random identifier for the install and your Account. That way a friend who opens it is counted and becomes your friend, and nobody redeems their own invite. Friendships are made when you and a friend use an invite, or when one of you asks to be Friends and the other says yes. Either of you can end a friendship. wayloop then keeps when it ended and who ended it, so that an invite sent before it no longer makes you friends, and so that only the one who ended it can ask to be Friends again.
- Challenges you start or join, and the share of that one District you have painted, or, in a Challenge to a distance, the km of New streets you have walked since it began.
- Everyone's map, only if you said yes to adding your paint: which streets you painted and in which week. Never when in the week, never as a Route, and never a street with an end inside your Privacy zone. An Account made with an email address counts there only if two things hold: its address is not at a throwaway-mail service, and no earlier Account has the same inbox. The server works this out from the addresses.
How wayloop learns from your backup
wayloop reads the backups of the people who use it to make wayloop better. It reads them for four things only: to draw Routes that fit the time or steps you ask for, to make the map and the painting of streets more accurate, to make Activities record better, and to see how wayloop is used, such as how often people walk and whether they come back. It reads them under each Account's identifier, never with a name or an email address. It does not use them to decide anything about you, to show you ads, or to build a profile of you for anyone else. This happens only at Supabase, where the backups are kept. Nothing from your backup goes to PostHog.
wayloop does this on a legitimate interest: making wayloop better. You can object. Turn off Help improve wayloop under Settings → Privacy, and your backup is left out from then on. The switch is on until you turn it off. Before anything of yours is read, the app tells you this once, with the switch beside it. To see how wayloop weighed this against your privacy, write to wayloop and you get a copy.
Your steps, Cadence, Stride, height and weight can say something about your health. The law protects health data more strictly, and a legitimate interest is not enough to read it. So wayloop does not read them to make wayloop better.
Your backup is never sold, never given to anyone for their own use, and never used for ads. It is deleted with your Account.
Health data
Your steps, Cadence and Stride, your height and weight, and the step count and weight from Apple Health can say something about your health. The law protects health data more strictly. wayloop keeps them in your backup, and shows your weekly steps on the Leaderboards you chose, only with your explicit consent. The app asks for it, and you can take it back in Settings. Without it, they stay on your iPhone. wayloop never reads them to make wayloop better, never uses them for ads and never gives them to anyone.
Your Health days are the amounts of steps, distance, time and kcal from Apple Health or Health Connect for each day. Your phone keeps them, whatever you answer. They go to your backup on wayloop's server only if you tap I agree on the screen that asks. That is a separate explicit consent, and it covers these amounts only. The app asks after you connect, or when you first make your own Milestone in a Health total, and you can open it in Settings under Apple Health. wayloop keeps them so they come back on a new phone. Nobody else sees them, and wayloop does not use them to make wayloop better. If you say no, nothing in the app is held back, and a new phone reads what Health still holds. Your answer and when you gave it are kept with your Account, and the next Account on a phone is asked for itself.
To take it back, turn off Keep Health days in my Backup in Settings under Apple Health. The days are deleted from the server at the next backup and stay on your phone, and reading goes on. Disconnect on the same page stops reading and writing, and deletes the days on your phone and in your backup. Your own Milestones stay and count the walks you record. iOS keeps its permission until you change it in the Health app, and Health Connect until you change it in its settings.
Walks from Garmin
You can connect your Garmin account in Settings. Then a walk, run or hike you record on a Garmin watch can be added to wayloop with one tap. Nothing comes from Garmin before you connect, and nothing you recorded before then.
- What wayloop receives from Garmin. For each activity you record after connecting: its kind, when it started and ended, its distance, its GPS track and the name of the watch. To know it is yours, wayloop also keeps your Garmin user identifier and the keys Garmin gives for your Account. Garmin also sends numbers such as heart rate, steps and calories with each activity. wayloop drops them as they arrive and never keeps them.
- What it is used for. Only to offer you the walk and, when you tap Add, to make it one of your Activities. It then paints your map and counts toward your own totals and goals, and toward Leaderboards and what Friends see, as an Activity recorded in wayloop does. Others see only totals, never the track. wayloop also uses its start and end times to skip a walk you already have, and its kind to skip one wayloop cannot paint.
- Before you add it. The walk waits on wayloop's server, at Supabase in Stockholm, for 7 days at most. Then it is deleted. A walk you turn down with Not now is deleted too.
- After you add it. It is an Activity like any other, on your iPhone and in your backup, and it says it was recorded on Garmin. It is kept until you delete your Account. Export my data includes it.
- Notifications. If you allow them, the server tells you when a walk is ready, with its kind and distance. This goes through Expo to Apple, or to Google on Android. Turn off Walks from Garmin under Notifications to stop it.
- Who receives it. Vercel, which runs wayloop's website, receives each walk from Garmin and passes it on. Supabase keeps it. Expo and Apple or Google get the words of a notification. To paint it, wayloop's website asks for the streets of the area around the walk from wayloop's own map server at Hetzner in Finland, and from public OpenStreetMap services, never with the track, your Account or your IP address. Nobody else gets it. Garmin data is never sold, never given to anyone for their own use, never used for ads, and never part of what PostHog or Sentry receive.
- When something goes wrong. The website also tells Sentry when something goes wrong with Garmin: what failed, never who it was, which walk, or what Garmin sent.
- No AI. No AI system reads Garmin data. Neither the data nor anything made from it is used to train, test or improve AI. Help improve wayloop leaves out Activities added from Garmin.
- Your control. Disconnect Garmin in Settings at any time, or remove wayloop in Garmin Connect. Either way, wayloop deletes your Garmin keys and every walk still waiting, and gets nothing more from Garmin. Walks you already added stay, as your Activities, until you delete your Account. To get a copy of what wayloop holds from Garmin, or to have it corrected or deleted, write to wayloop@adamnoren.se.
Your name and photo
Other people see your first name and the initial of your last name, and a profile photo if you choose one. Which people is said under What other people see.
- The photo. It is uploaded when you pick it, after your iPhone has made it a square of 320 pixels with no place, time or other details from the camera left in it. It is kept by Supabase at an address of random characters, and shown beside your name wherever your name shows. Remove it in the app, or delete your Account, and it is erased from the server: at once, and at the latest the next day.
- Checked first. Before anyone else sees a photo or a name, wayloop's website sends it to OpenAI's moderation service, which says whether it is, for example, sexual or violent. One it marks is refused, and so is one that could not be checked. If a photo is refused, others see the one before it, or your initial. If a name is refused, they see your initial. You can try again. Until your name has passed, others see only its initial. OpenAI keeps none of it to watch for abuse, and does not train on it.
- Reports. Anyone who sees your name or photo can report it to wayloop. A Report records who made it, whose name or photo it is about, the name as they saw it and a copy of the photo. It is kept where only wayloop can read it, and wayloop is emailed about it. From then on the person who made it no longer sees your name or photo. wayloop acts on a Report within 24 hours, and may clear the photo, reset the name to its initial for good, or delete the Account, as the Terms say.
Finding people and Friend requests
You can ask someone to be Friends with Ask to be friends on their row. They can say yes, or tap Not now, which only takes your ask off their list. You are not told that they did not answer. You can take your ask back with Take back. An ask ends after 30 days, and then you can ask again. You can have at most 20 asks waiting at a time.
- Who can ask you. Someone who sees you on a City's board, someone in a Challenge with you, and someone who found you by search. After a Report, neither of you can ask the other. After a friendship ends, only the one who ended it can ask again.
- What a Friend request keeps. It keeps who asked whom, when, and where they saw each other: on a City's board, in a Challenge, or by search. The person you ask sees your first name, the initial of your last name, your photo and where you saw them. It is kept until it is accepted, taken back, or 30 days pass, and is then deleted. If it is accepted, you become Friends, as with an invite.
- Your whole last name. This has changed. Until now only the initial of your last name reached wayloop's server. Now your iPhone sends your whole last name too: the first time the app opens after the update, or when you type your name in the welcome. It is used only to find you by search, and it is never shown. Others still see your first name and the initial of your last name.
- Your @name. Everyone has one, such as @anna.svensson. wayloop makes it from your name, and adds a number if that one is taken. Nobody else has the same one. You can change it under Settings → Account, and the old one is then free for others. Like your name, it is checked before others see it.
- Who can find you. Anyone signed in can find you by your @name, or by your first and last name. A search result shows your first name, the initial of your last name, your photo and your @name. Search never shows your City. To stop it, turn off People can find you by @name or name under Who can see you. It is on until you turn it off, whatever you chose for the boards. Search never shows you someone you reported, and someone you reported never finds you. wayloop limits how many searches one person can make in a minute, so that nobody can copy out the list.
Notifications from the server
wayloop's server sends four kinds of notification, and no others: someone asks to be Friends with you, says yes to your ask, invites you to a Challenge, or a walk from Garmin is ready to add. They go through Expo's push service, which passes them on to Apple, and Apple shows them on your iPhone.
For this, your iPhone gives wayloop a push token: an address Apple makes so that notifications can reach wayloop on this iPhone. wayloop keeps it with your Account and a random identifier for this install. For each notification, Expo receives the push token and the words to show, in your language, with the name of the person it is about as you would see it. Never a photo.
The push token is sent only if you have allowed notifications for wayloop in iOS. Turn off Friends and Challenges and Walks from Garmin under Notifications in Settings, and wayloop removes the token from the server, so nothing is sent. With only Walks from Garmin on, the token is kept only while Garmin is connected. Each switch stops only its own kind. The token is also removed when you sign out or delete your Account.
Which features you use, if you say yes
Early in the welcome, wayloop asks whether you will share which features you use. Nothing is counted before you answer, and nothing if you tap Not now. The Share usage switch under Settings → Privacy changes your answer at any time. Turn it off, and nothing more is sent from that moment. Turn it on, and counting starts from then; nothing from before is sent.
After a yes, the app tells PostHog when it is installed or updated, when you open or leave it, and when you open one of its screens, sign in, plan a Route or ask for another, are asked to subscribe or invite friends and what you choose, send an invite or have a friend open one, buy or restore wayloop+, start or save an Activity, paint for the first time, start or answer a Challenge, open a Leaderboard, make a share card, add your paint to Everyone's map, connect or disconnect Garmin, see a walk from Garmin offered, add it or turn it down, tap a notification about one, turn those notifications on or off, turn adding Garmin walks on their own on or off, see that offered, or try any of this with Garmin and it does not work.
Each of these says what happened and when, and at most: the Mode, the kind of Goal, whether the Route is a Loop, the distance rounded to the kilometre (to 5 km from 10 km up), whether an Activity painted and a broad band for how much of it was New streets, whether it was followed on the phone alone or on your watch too, how many friends have opened your invites, whether Routes were unlocked by invites or by paying, and which plan you chose and how the purchase went. For Garmin it also says whether a walk was added on its own, what came of a tap on a notification, where adding on their own was changed, and why something did not work, in fixed words: never the walk, the place or the device. PostHog is also told whether you came to wayloop by a friend's invite link, by typing an invite code, or neither, but never whose invite it was. A screen is named by its kind, never by what is on it. PostHog adds details of the app and the iPhone (app version, iOS version, model, screen size, language and time zone) and random identifiers for the install and for each session. It also receives the IP address each one comes from, from which it works out a rough place: country, region, town and the town's approximate coordinates.
None of it holds your position, a Route or the line of an Activity, a street, a Place, anything from your Privacy zone, your name or your email. Nothing of your screen is recorded, and no advertising identifier is used.
It is linked to your Account, so wayloop can see whether people come back and what they use, across launches and iPhones. PostHog receives it on wayloop's behalf and keeps it in the EU for 1 year. When you delete your Account, wayloop asks PostHog to erase everything it holds under your Account, once a day until PostHog has. The Account itself is deleted at once either way.
After a yes, wayloop also lets RevenueCat ask Apple whether you installed wayloop from one of wayloop's own ads in App Store search, and if so, which ad and which search word. Apple answers without an advertising identifier and without following you across other apps or sites, and it answers only in the first 24 hours after the install. RevenueCat keeps the answer with your Account's identifier, so wayloop can see which ads bring people who stay. Turn Share usage off, and Apple is not asked again.
Whatever you answer, RevenueCat tells PostHog about your purchases, linked to your Account: which product, its price, the store, when it was bought and when it runs out, and any renewal, cancellation or refund. It lets wayloop see how many of the people asked to subscribe do. It is kept, and erased, as above.
Feedback
When an Activity ends you can rate it and say what worked, and send its log with that; from Help you can send a recent Activity's log when you write to wayloop. Only what you send leaves your iPhone: the rating and words, the kind of Activity, when it began, the City, its length and moving time, the app version, and the log if you leave its switch on. A log holds where you walked, so it is sent only when you choose to send it. wayloop reads it to find out what went wrong and to make the app record better. It is linked to your Account and nobody else sees it. A log is kept for 30 days; your rating and words until you delete your Account.
What else leaves your iPhone
- Purchases. If you subscribe to wayloop+ or buy Founder, Apple takes the payment; wayloop never sees your card. RevenueCat, which keeps track of who has wayloop+, knows you by your Account's identifier once you have signed in, so a purchase follows you to a new iPhone. It receives which product was bought and when, its renewals, cancellations and refunds, your App Store country, and the device model and iOS version. It does not receive your name, your email or your Apple ID. RevenueCat sends wayloop a copy of each of these events (the product, its price, the store and when), under your Account's identifier, so wayloop can count what is sold. After a yes to Share usage, it also receives which of wayloop's App Store ads you came from, if any.
- How the app opens, and what breaks. Sentry receives how long the app took to open and to show each screen, and every crash and error with its message and where in the code it happened. With it come the device model, iOS version and app version, the screens, taps and log lines just before it, and the addresses the app had just called on the server, but not your IP address. A message says what went wrong in the words of the code or the server, and can hold a name, an invite code or a place. The addresses hold your Account's identifier, and can hold the place a Route starts from, so this is linked to you. It is sent whether or not you share usage.
What other people see
- Friends see your first name and last initial, your photo, your weekly totals and records, and your progress in a Challenge you both joined. They never see your paint. Paint inside your Privacy zone is left off share cards.
- The city board and its Highscores show your first name, last initial and photo to everyone only if you choose Everyone under Leaderboards. Friends only and Nobody are the other two choices.
- In a Challenge everyone in it sees the others' first name, last initial, photo and progress, even those who are not friends with each other.
- In search anyone signed in sees your first name, last initial, photo and @name, unless you turned off People can find you by @name or name. Never your City.
- Everyone's map shows a street only once at least three different people have painted it, and then only as a count. Nobody can see whose paint it is. Saying no takes your paint out at once.
- Nobody but you ever sees a Route, the line of an Activity, a saved Place or your position. A log you send with feedback is read by wayloop alone.
This website
wayloop counts each visit to this page, with the distance on the ruler, a random identifier for that page load and the site you came from. It is used to see how people find wayloop and what they try. Before the app was out, this page also asked for an email address. Those addresses were used once, on 13 October 2026, to say that the app was out, and were then deleted. PostHog loads only if you say yes when the site asks. Until then nothing of PostHog's is loaded and no cookie is set. What wayloop records above is the same whatever you answer. After a yes, PostHog sets its own cookie, which holds a random identifier for this browser, and receives the pages you open, how far you scroll, what you click, the site you came from, the kind of device and browser, and your IP address, from which it works out a rough place: country, region, town and the town's approximate coordinates. wayloop uses it to see how people find the site and what they do on it. Nothing of your screen is recorded. PostHog keeps the records in the EU for 1 year. Your answer is kept in this browser; to change it, . Vercel, which serves the site, keeps ordinary server logs with IP addresses for a short time.
An invite link opens a page on this website. wayloop counts each time that page is shown and each tap on its App Store button. A count holds the invite code, the language of the page, whether it was an iPhone, an Android phone or a computer, and whether the page was opened inside another app. The page sets no cookie, and wayloop keeps no IP address with the count.
Who receives data
| Who | What for | What | Where |
|---|---|---|---|
| Supabase | Database, sign-in and photos | Everything under "Your Account", "Your name and photo" and "Finding people and Friend requests", the push token, a copy of your purchases from RevenueCat, website visit counts, invite page counts, the feedback and logs you send, and walks from Garmin waiting to be added | EU (Stockholm) |
| Apple | Sign in with Apple, payments, Apple Health | As Apple's own policy says | Apple |
| Resend | Sending the codes that confirm an address or reset a password, each Report to wayloop, and once, the email that said the app was out | The email address you type in, and the code; for a Report, the name as it was seen and the photo; for that one email, the address left on this website | EU and USA |
| OpenAI | Checking a photo or a name before anyone else sees it | The photo, or the name as others would see it | Outside the EU |
| RevenueCat | Knowing who has wayloop+ | Your Account's identifier, purchases, country, device model, iOS version, and the wayloop ad you came from, after a yes to Share usage | USA |
| Expo | App updates, and sending notifications | App updates: the app's version and an identifier for this install, from the IP address that asks. Sending notifications: the push token for this iPhone and the name in the notification, with the rest of its words | USA |
| Sentry | Crashes, errors and how fast the app opens | Crashes and errors with their messages, timings, device model, iOS and app version, the screens, taps, log lines and server addresses just before (which hold your Account's identifier); not the IP address | EU (Frankfurt) |
| PostHog | Counting which features are used in the app and visits to this website, each after a yes; purchases, from RevenueCat | App: your Account's identifier, what you did and when, app and device details, purchases. Website: a random cookie identifier, pages opened, scrolls and clicks, the site you came from, device and browser kind. Both: the IP address and the rough place worked out from it | EU (Frankfurt) |
| Vercel | Serving this website, building the map of your area, passing the app's photos, names and Reports on to the check and the database, handing notifications to Expo, and receiving walks from Garmin | Server logs; the place a Route starts from and the words you search for; photos, names, notifications and walks from Garmin only while they pass | EU and USA |
| Komoot (Photon) | Finding a place you search for | The words you type, sent by wayloop's website, never with your IP address or Account | EU (Germany) |
| Garmin | Sending the activities you record on a Garmin watch, after you connect it | Your Garmin user identifier, and wayloop's requests for the keys to your Account | USA |
| Hetzner | wayloop's own map server | The area around a place, asked for by wayloop's website, never with your position, your IP address or your Account | EU (Finland) |
They work on wayloop's behalf under data processing agreements. Where data goes to the USA, it does so under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Supabase, PostHog, Sentry and Resend keep wayloop's data in the EU, but they are American companies, and their staff in the USA may reach it, for example for support; the same safeguards cover that. OpenAI receives photos and names through OpenAI Ireland, under its data processing addendum and the standard contractual clauses, and checks them outside the EU. You can ask wayloop for a copy of these safeguards.
The map of your area is built when you need it. Your iPhone sends wayloop's website the place a Route starts from, and the words you type when you search for a place. The website asks OpenStreetMap services for the streets of the area around it, without your position, your IP address or your Account.
Why wayloop may do this
- To give you what you asked for (contract): your Account and its backup, your position while an Activity is running, your name and photo shown to others, friends, Friend requests and the notifications the server sends about them, Leaderboards, Challenges, invites, wayloop+, and walks from Garmin once you connect it.
- Your consent: Apple Health, notifications planned on your iPhone, adding your paint to Everyone's map, sharing which features you use and which wayloop ad you came from, and PostHog on this website. Each is a switch you can turn off again. Feedback and logs go only when you send them.
- Your explicit consent, for health data: keeping your steps, Cadence, Stride, height and weight in your backup, and your weekly steps on Leaderboards, and keeping your Health days in your backup, as Health data says.
- A legitimate interest in an app that opens quickly and does not crash: the performance, crash and error data Sentry receives. And in knowing how many of the people asked to subscribe do: the purchases RevenueCat tells PostHog about. And in keeping what people see of each other fit to show: the check before a name or photo is shown, and Reports. And in making wayloop better: reading the backups, without health data, as How wayloop learns from your backup says. You can object to this with Help improve wayloop. And in letting people find the friends they know in wayloop: keeping your whole last name and your @name, and showing you in search. You can object to being found with People can find you by @name or name.
- The law: bookkeeping of sales, which Apple carries out as the seller.
How long it is kept
- What is on your iPhone: until you press Delete data on this iPhone, or remove the app.
- Your Account and backup: until you delete the Account in the app. Deleting it deletes the backup, totals, friendships, Friend requests, push tokens, Challenge memberships and paint with it, at once and not on a schedule. Your photo goes at once too, or at the latest the next day.
- Invite codes: for as long as invites unlock something in the app.
- Your photo: until you remove it or delete your Account. It is then erased from the server at once, and at the latest the next day.
- When a friendship ended: until either Account is deleted.
- Friend requests: until they are accepted, taken back, or 30 days pass. They are then deleted.
- Push tokens: until you turn off Friends and Challenges, sign out or delete your Account.
- Walks from Garmin you have not added: 7 days at most, and deleted at once when you turn one down or disconnect Garmin. Your Garmin keys: until you disconnect Garmin or delete your Account.
- Reports: as the record of what was reported and what wayloop did. When an Account is deleted, the Report no longer says it was made by that Account or about it, and the copy of the photo goes with the Account it shows; the name as it was seen stays. It is deleted two years after wayloop acted on the Report.
- Feedback: your rating and words until you delete your Account; a log you sent, 30 days.
- Purchase records at RevenueCat, and wayloop's copy of them: for as long as wayloop+ is sold and the law on bookkeeping asks. When you delete your Account, wayloop's copy is unlinked from you: your Account's identifier in it is swapped for a random one, so the sale still counts but nothing in it points to you. RevenueCat keeps its own record.
- Performance, crash and error data: as long as Sentry's plan keeps it, 30 days today.
- Emails left on this website before the app was out: used once, on 13 October 2026, to say it was out, and then deleted.
- At PostHog, from the app and this website: 1 year. What is linked to your Account goes sooner if you delete the Account.
Your choices and your rights
- In the app: Share usage, Help improve wayloop, Privacy zone, Leaderboards (Friends only, Everyone, Nobody), Remove photo, Add my paint to everyone's map, Apple Health switches, Keep Health days in my Backup, Disconnect under Apple Health, Report name or photo, End friendship and Ask to be friends on another person's row, Take back and Not now on a Friend request, Friends and Challenges under Notifications, People can find you by @name or name under Who can see you, your @name under Settings → Account, Connect Garmin and Disconnect Garmin, Walks from Garmin under Notifications, Export my data, Delete data on this iPhone, Delete account, Sign out.
- In iOS Settings: location, motion, Apple Health, notifications, and Sign in with Apple (Apple ID, Sign-In and Security) to stop using your Apple ID with wayloop.
- To delete your Account and everything stored with it, open Settings in the app, tap your name and tap Delete account. You are asked once, and then it is done: the Account, the backup, your totals, friendships, Friend requests, push tokens, Challenge memberships, paint and photo are gone from the server, this iPhone is emptied, and PostHog is asked to erase what it holds under your Account, and Apple to disconnect your Apple ID from wayloop. Purchase records stay, as above. A subscription is cancelled in your Apple ID settings, not by deleting the Account. If the app is no longer on your iPhone, write to wayloop@adamnoren.se from any address and say which first name and initial the Account carries; it is done within 30 days.
- A copy of your data. Export my data gives you what is on this iPhone. For a copy of everything wayloop holds about you, also on the server, write to wayloop@adamnoren.se.
- Under the GDPR you can ask for a copy of your data, have it corrected or erased, restrict or object to its use, take it with you, and withdraw a consent at any time. wayloop makes no decision about you by machine alone that has a legal or similarly serious effect on you. You can also complain to the Swedish Authority for Privacy Protection (IMY) or to the authority where you live.
Children
wayloop is not made for children under 13 and does not knowingly collect their data. In some EU countries, a child under 14, 15 or 16 needs a parent's consent for some of what is described here. There, wayloop is only for people old enough to agree on their own. If you believe a child has signed in, write and the Account is removed.
Changes
When this page changes, the date at the top changes with it. A change that matters, such as a new recipient or a new kind of data, is also said in the app before it takes effect.
This policy is also published in Swedish. The two say the same and carry the same weight.