Introduction
Welcome to Walk RPG ("the App", "we", "us"). We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, and how you stay in control.
Walk RPG is offline-first: you can play the whole single-player game without an account and without any data leaving your device. Online features (account, cloud save, friends and co-op raids) are optional and only collect data when you choose to sign in.
Information We Collect
When you use the optional online features, we may process the following:
Account identifiers
A user ID and the email and/or name provided by Sign in with Apple or Google, used to authenticate you.
Player profile
Your chosen nickname and tag, plus your level and experience, shown to your friends.
Game progress
A snapshot of your progress (level, inventory, upgrades) stored in the cloud when you save or enable auto-save.
Social data
Friend requests/relationships and raid rooms you create or join.
Activity / steps
Step and motion data from your device sensors, used as the core game mechanic. Steps are processed on-device.
Usage & diagnostics
Anonymous usage and analytics events to help us improve the game.
Without signing in, all your game data stays on your device and is never transmitted.
How We Use Your Data
- Authentication: to sign you in and keep your session.
- Cloud save: to back up and restore your progress across devices.
- Social features: to power the friends list and co-op raids.
- Gameplay: to convert your steps into in-game progress.
- Improvement: to understand usage and fix problems.
We do not sell your personal data or use it for advertising.
Third-Party Services
We rely on trusted providers that process data on our behalf. Each has its own privacy policy:
- Supabase — backend, authentication and cloud storage for your account and progress.
- Sign in with Apple — login on iOS.
- Google Sign-In — login on Android.
- Google Firebase (Analytics) — anonymous usage analytics.
- Apple App Store / Google Play — app distribution and any in-app purchases. We never receive or store payment details.
Permissions
- Activity Recognition / Motion: to count your steps for gameplay.
- Notifications: to send local notifications about game events.
- Background processing: to keep counting steps while the app is in the background.
Data Storage & Security
Online data is stored on Supabase infrastructure and protected by row-level security so each player can only access their own data. Traffic is encrypted in transit (HTTPS). Local game data remains on your device — we recommend keeping your device protected with a passcode or biometrics.
Data Retention & Deletion
How long we keep your data
We keep the minimum for the feature to work, and only for as long as it is needed.
- Account data (account identifier, player profile, cloud save, friendships) is retained for as long as your account exists. We do not delete active accounts automatically and we do not set an expiry on them, because the cloud save exists precisely so your progress survives changing or losing a device. It is deleted when you delete it — see below.
- Co-op raid data (a raid room and its participant list) is deleted automatically by a scheduled job that runs every 15 minutes. A room that was never started is deleted after 1 hour, a room abandoned mid-fight after 24 hours without combat, and a finished room 1 hour after it ends. Nothing about a raid is kept once the room is gone.
- Sign-in tokens are retained only while your account exists, and only so that deleting your account can also revoke the sign-in with the identity provider. They are deleted with the account.
- Local game data on your device is retained until you uninstall the app or clear its data. It never expires on its own, and it is never sent anywhere unless you sign in and use the optional online features.
We do not keep a separate archive, log or analytics copy of your game data after deletion, and we do not keep data from users who never signed in — playing offline sends us nothing to retain.
How to delete it
- Delete cloud save: remove your saved progress from the cloud at any time in the app's Account screen. Your account stays.
- Delete your account: the Account screen offers "Delete account". This is immediate and permanent: your account identifier, profile, cloud save, friendships and sign-in tokens are erased from our servers in the same request. There is no grace period and no recovery.
- Local data: uninstalling the app or clearing its data removes everything stored on-device.
To request deletion by email, contact us at givoxmobile@gmail.com. You can also use our account deletion page.
Children's Privacy
The App is not directed to children under 13 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
Your Rights
Depending on your region, you may have the right to access, correct, export or delete your personal data. You can exercise most of these directly in the app, or by contacting us.
Changes to This Policy
We may update this policy from time to time. Changes are posted on this page with a new "Last updated" date.
Contact Us
Questions about this policy? Email givoxmobile@gmail.com or visit our Support Page.