Privacy Policy for Walk Analytics

1. Scope

This policy explains how the Walk Analytics mobile apps for iOS and Android and the walk.analyticszone.app website handle information. Walk Analytics is a wellness and sports-analysis product, not a medical device.

The controller is ArnoHealth S.L., Gran Via de les Corts Catalanes 699, 2-2, 08013 Barcelona, Spain. Contact: [email protected].

2. Data processed on your device

With your permission, Walk Analytics reads walking workout information from Apple HealthKit on iOS or Health Connect on Android. Depending on what your device provides, this can include exercise sessions, dates and times, duration, distance, speed or pace, heart rate, energy, cadence, steps, splits and route information.

The app uses these records to show workout history, pace and split analysis, training load, trends and best efforts. Platform-health records and the app's main analysis database are processed and stored locally on your device. Walk Analytics requests read-only access and does not sell this information or use it for advertising.

You can change Apple Health or Health Connect permissions in your device settings. Removing permission stops future access but does not automatically delete records already stored in the app's local database.

Exports are generated locally. If you choose to share an exported file, you decide which app or service receives it.

3. Optional Garmin connection

Garmin sync is optional. If you connect it, Walk Analytics uses a backend service to complete Garmin authorization and retrieve the workouts you request. The rest of the app remains available without connecting Garmin. The service may process:

• a random per-installation identifier generated by Walk Analytics;
• Garmin account and authorization identifiers and OAuth tokens;
• connection status, synchronization cursors and technical timestamps;
• walking workout fields such as activity identifier, date, duration, distance, heart rate, energy and splits; and
• route points when available.

This information is used only to provide Garmin connection, import, deduplication and route delivery. It is not used for advertising and is not sold. Backend requests use encrypted transport.

Disconnecting Garmin stops the active connection and clears its authorization state, but it does not currently guarantee immediate deletion of every imported workout, cache, infrastructure log or backup copy held by the service. Uninstalling the app does not request server deletion. You can also revoke authorization in Garmin account settings. To request access to or deletion of active application-managed Garmin data, email [email protected]; never send passwords or security codes.

4. Purchases

Subscriptions and other purchases are processed by Apple or Google. Walk Analytics receives product, transaction and entitlement information needed to unlock access, but does not receive your full payment-card details. Apple's or Google's privacy terms apply to their processing.

5. Website and contact

The website is delivered through Cloudflare. Standard web requests can include an IP address, browser and device information, requested pages, timestamps and security information. This website data is separate from the workout data stored by the mobile app.

If you use the contact form, the name, email address, subject, message and technical anti-spam information you submit are sent through Web3Forms so that we can answer you. Do not include health records, passwords or security codes in the form.

6. Legal bases, retention, providers and transfers

Device health permissions and optional Garmin processing are based on your choice and consent. We use purchase and entitlement information to provide the service you request. Contact requests are handled to answer your request and on our legitimate interest in providing support. Security logs are processed on our legitimate interest in protecting the service.

Local app data remains until cleared or uninstalled, subject to the operating system and backups you control. Garmin connection and imported service data may remain until deletion is completed following a verified request. Removing health permissions, disconnecting Garmin or uninstalling the app are not equivalent to deleting every server record. Ordinary Google Cloud logs have a 30-day retention setting and mandatory cloud audit logs have a 400-day retention setting; these may contain request IP addresses, technical identifiers, timestamps and errors. Backup copies are not individually erased by an app disconnect request and remain until the provider's backup rotation. Support correspondence is retained as needed to resolve the request and related legal obligations or disputes.

The Garmin API runs on Google Cloud Run in Belgium, with active PostgreSQL records hosted by Supabase in the United Kingdom. Cloudflare serves the website, Google Fonts may receive your IP address and browser request to display web fonts, and Web3Forms delivers contact forms. These providers may use infrastructure or support teams outside the EEA. Their service-specific data-processing and transfer terms apply. Apple, Google and Garmin also process information under their own terms.

7. Your choices and rights

• Revoke Apple Health or Health Connect access in device settings.
• Disconnect Garmin from Walk Analytics and from your Garmin account settings.
• Delete local app data using the operating system's clear-data option where available or by uninstalling the app.
• Request access to or deletion of application-managed Garmin server data by contacting us.
• Choose whether and where to share files you export from the app.

Where applicable, you may request access, correction, deletion, restriction, objection and portability, and withdraw consent at any time without affecting earlier lawful processing. You may also complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

We may ask for enough information to match and verify a request. We will not ask for your Garmin password, Apple ID password, Google password, MFA code or recovery code.

8. Children

Walk Analytics is not directed to children under the minimum age required to consent to data processing in their country. If you believe a child has provided information through optional Garmin sync or the website, contact us so we can investigate and delete it where required.

9. Security and changes

We use reasonable technical and organizational safeguards, but no storage or transmission system is completely secure. We may update this policy when features, providers or legal requirements change. The date above identifies the current version.

10. Contact

ArnoHealth S.L., Gran Via de les Corts Catalanes 699, 2-2, 08013 Barcelona, Spain. For privacy questions or requests, email [email protected] or visit https://walk.analyticszone.app.