Privacy policy

In force from 19 September 2026

wayloop works without an account, and most of what it knows about you never leaves your iPhone. This page says what does leave it, when, and who receives it.

• No ads, no advertising identifiers, no tracking across other apps or sites. Nothing is sold.
• Your position is read only while an Activity is running.
• Without an account, your Activities, Coverage, Routes and Places stay on your iPhone.
• With an account (Sign in with Apple), they are backed up to a server in Stockholm that only you can read.
• Friends and boards see totals and a first name. Never a Route, never a line on a map.

Who is responsible

wayloop is made by Adam Norén, Sweden, who is the controller of the personal data described here. Write to hello@wayloop.app about anything on this page.

What stays on your iPhone

• Position. Read only while an Activity is running, to draw the line you walk, paint the streets and time the turn cues. It is never read when no Activity is running.
• Motion. Used to measure your Cadence during an Activity.
• Apple Health. Only after you tap Connect Apple Health. wayloop reads your step count for the last eight days, and writes a finished Activity as a workout with its distance and, if you allow it, active energy. It reads nothing else. Health data is never used for advertising and is never given to anyone for it.
• Body and stride (height, weight, stride length), your goals and your settings.
• Your profile photo and any photo you put on a share card. A share card leaves your iPhone only when you share it yourself.
• Notifications. They are planned on your iPhone. There is no push server, and no device token is collected.
• Apple Watch. Turn cues and the state of an Activity go between your iPhone and your watch, and nowhere else.

What leaves your iPhone without an account

• Invites. An invite code made on your iPhone and a random identifier for the install, so that a friend opening your link can be counted and nobody redeems their own invite. No name is attached.
• Purchases. If you subscribe to wayloop+ or buy Founder, Apple takes the payment; wayloop never sees your card. RevenueCat, which keeps track of who has wayloop+, receives a random identifier for the install, which product was bought and when, its renewals, cancellations and refunds, your App Store country, and the device model and iOS version. You stay anonymous to RevenueCat: no name, no email, no Apple ID.
• How the app opens, and what breaks. Expo receives how long the app took to open and to show each screen, crashes and errors (the kind of error and where in the code, never its message), with the device model, iOS version, app version and country. It is not linked to you, and no position, name, Route or invite code is in it.

What is stored when you sign in

Signing in is optional and is done with Sign in with Apple. Apple gives wayloop an identifier, your name if you share it, and an email address, which can be Apple's private relay address. wayloop keeps your first name and the initial of your last name; the email stays with the sign-in record and is not used to write to you.

• Your backup, readable and writable by you alone: Activities (kind, start time, length, New streets, Climb and the line you walked), Coverage for each street with the week it was first painted, saved Routes and saved Places (which can include your home), and your sharing choices.
• Weekly totals for Leaderboards: New streets, steps and your share of the City, and the days you reached your goal. If Apple Health is connected, the step total comes from Apple Health.
• Friendships, made only when you and a friend use an invite.
• Challenges you start or join, and the share of that one District you have painted.
• Everyone's map, only if you said yes to adding your paint: which streets you painted and in which week, never when in the week, never as a Route, and never a street with an end inside your Privacy zone.

What other people see

• Friends see your first name and last initial, your weekly totals and records, and your progress in a Challenge you both joined. Paint inside your Privacy zone is left out of what friends see and off share cards.
• The city board shows your first name and last initial to everyone only if you choose Everyone under Leaderboards. Friends only and Nobody are the other two choices.
• Everyone's map shows a street only once at least three different people have painted it, and then only as a count. Nobody can see whose paint it is. Saying no takes your paint out at once.
• Nobody but you ever sees a Route, the line of an Activity, a saved Place or your position.

This website

If you leave your email here, wayloop stores the email, the button you pressed, the distance on the ruler, a random identifier for that page load and the site you came from. It is used to tell you when the app is out and to see whether the idea is worth building. No cookies are set, and there is no analytics script. Vercel, which serves the site, keeps ordinary server logs with IP addresses for a short time.

Who receives data

They work on wayloop's behalf under data processing agreements. Where data goes to the USA, it does so under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Map data comes with the app; no map service sees where you are.

Why wayloop may do this

• To give you what you asked for (contract): the backup, friends, Leaderboards, Challenges, invites and wayloop+.
• Your consent: Apple Health, position, notifications, adding your paint to Everyone's map, and the email you leave on this website. Each is a switch you can turn off again.
• A legitimate interest in an app that opens quickly and does not crash: the performance and crash data, which is not linked to you.
• The law: bookkeeping of sales, which Apple carries out as the seller.

How long it is kept

• What is on your iPhone: until you press Delete all my data, or remove the app.
• Your account and backup: until you delete the account in the app. Deleting the account deletes the backup, totals, friendships, Challenge memberships and paint with it, at once and not on a schedule.
• Invite codes: for as long as invites unlock something in the app.
• Purchase records at RevenueCat: for as long as wayloop+ is sold and the law on bookkeeping asks.
• Performance and crash data: as long as Expo's plan keeps it, 90 days at most today.
• Emails left on this website: until the app is out and you have been told, or until you ask.

Your choices and your rights

• In the app: Privacy zone, Leaderboards (Friends only, Everyone, Nobody), Add my paint to everyone's map, Apple Health switches, Export my data, Delete all my data, Delete account, Sign out.
• In iOS Settings: location, motion, Apple Health, notifications, and Sign in with Apple (Apple ID, Sign-In and Security) to stop using your Apple ID with wayloop.
• To delete your account and everything stored with it, open Settings in the app, tap your name and tap Delete account. You are asked once, and then it is done: the account, the backup, your totals, friendships, Challenge memberships and paint are gone from the server, and this iPhone is emptied. A subscription is cancelled in your Apple ID settings, not by deleting the account. If the app is no longer on your iPhone, write to hello@wayloop.app from any address and say which first name and initial the account carries; it is done within 30 days.
• Under the GDPR you can ask for a copy of your data, have it corrected or erased, restrict or object to its use, take it with you, and withdraw a consent at any time. You can also complain to the Swedish Authority for Privacy Protection (IMY) or to the authority where you live.

Children

wayloop is not made for children under 13 and does not knowingly collect their data. If you believe a child has signed in, write and the account is removed.

Changes

When this page changes, the date at the top changes with it. A change that matters, such as a new recipient or a new kind of data, is also said in the app before it takes effect.