Privacy Policy

Scope

This policy applies to the WalkCalc iOS app, the WalkCalc web sign-in pages, and the backend services used to sync WalkCalc account and shared expense data.

Unified SSO Service

WalkCalc uses a unified account and single sign-on service for sign-in. This shared SSO layer is part of the developer-operated backend architecture used by WalkCalc, not an unrelated third-party advertising, analytics, or tracking provider. The SSO service supports multiple sign-in methods, including Sign in with Apple, GitHub, and local email or phone sign-in where available, and then issues the unified account session used by WalkCalc. The WalkCalc SSO login entry is https://hong97.ltd/sso/login?source=walkcalc.

• Basic account, profile, authentication, linked sign-in method, and security information is managed by the unified SSO service and may be used to authenticate you across developer-operated services that you choose to use.
• WalkCalc-specific ledger data, including groups, participants, expenses, balances, and settlement records, is used to provide WalkCalc and to show collaborative ledger content to members of the same WalkCalc group.
• WalkCalc does not use shared expense ledger data for third-party advertising, does not sell it, and does not share it with unrelated apps for cross-app tracking.

Local-Only Use

WalkCalc can be used without signing in for local ledger features. Local groups, temporary members, expense records, balances, and settlement information created in local mode are stored on your device and are not uploaded to WalkCalc servers.

• Signing in does not automatically upload, merge, sync, or back up local-only groups to your online account.
• Local-only groups remain separate from online shared groups after sign-in unless WalkCalc later provides a clear user-controlled import or sync action and you choose to use it.
• Because local-only groups are kept on your device, they may be lost if you delete the app, erase the device, or remove local app data.

Information We Collect

WalkCalc collects information that is needed to provide account access, shared ledgers, syncing, security, and optional app features.

• Account and profile information: your user ID, display name, email address when provided by your sign-in method, optional avatar, profile fields you choose to add, and sign-in provider identifiers such as Sign in with Apple or GitHub identifiers.
• Authentication information: app access tokens, refresh sessions, login timestamps, and related security metadata used to keep you signed in and protect your account. WalkCalc does not store your Apple ID password, GitHub password, or local password in plain text.
• Shared expense content: groups you create or join, participant names, temporary member names, group ownership, archived-group state, expense and settlement records, amounts, categories, notes, dates, balances, settlement suggestions, and deletion or edit history needed to operate the ledger.
• Local-only ledger content: groups and records created for local-only use are stored on your device and are not collected by the backend service unless you later choose an explicit import or sync option.
• Preferences and app settings: theme selection, default currency marker, language/locale, and similar settings used to personalize the app.
• Device and notification information: app-specific device ID, platform, device model, operating system version, app version, bundle ID, notification environment, and push notification token when notifications are enabled.
• Optional location data: latitude and longitude only when you grant location permission and choose to attach your current location to a new expense record.
• Optional camera access: camera permission is used only to scan a group QR code. WalkCalc does not store photos or videos from QR scanning.
• Technical and security logs: request time, IP address, user agent or device context, endpoint, error status, and similar server logs used to operate, secure, debug, and prevent abuse of the service.
• Support communications: information you include when you contact us, such as your email address, message content, and any troubleshooting details you choose to provide.

Information We Do Not Collect

• WalkCalc does not collect contacts, photo library contents, calendars, reminders, health data, payment card details, financial account credentials, or advertising identifiers.
• WalkCalc does not access location in the background and does not collect location unless you grant permission and use the location attachment feature.
• WalkCalc does not use the camera for face recognition, biometric analysis, or photo storage.
• WalkCalc does not sell personal information and does not use personal information for third-party advertising or cross-app tracking.

How We Use Information

• To create, authenticate, and secure your account.
• To sync groups, participants, expenses, balances, settlement records, and related ledger state across your devices.
• To provide local-only ledger features on your device without requiring an account or server upload.
• To show shared group content to members of the same group.
• To send app-related push notifications when notifications are enabled.
• To provide optional features you choose to use, such as QR code group joining and attaching location to a record.
• To save preferences such as language, theme, and default currency marker.
• To maintain, debug, secure, and improve WalkCalc.
• To prevent fraud, abuse, unauthorized access, and service misuse.
• To comply with applicable legal obligations and respond to valid legal requests.

Sharing

WalkCalc shares information only where needed to provide the service, operate the app, or comply with law.

• Group members: shared expense content, participant names, balances, and settlement records are visible to members of the same group because they are collaborative ledger content.
• Unified SSO service: basic account, profile, authentication, linked sign-in method, and security information may be processed by the developer-operated SSO service so supported sign-in methods such as Sign in with Apple, GitHub, and local email or phone sign-in can result in the same WalkCalc account session. WalkCalc ledger content is not shared with unrelated services for advertising or tracking.
• Service providers: hosting, database, storage, push notification, authentication, and infrastructure providers may process data for us only to operate, secure, and support WalkCalc. We expect service providers to protect user data with the same or equivalent safeguards described in this policy.
• Sign-in providers: when you use Sign in with Apple or GitHub, the sign-in provider processes the authentication request according to its own privacy practices. WalkCalc receives only the account information needed to create or authenticate your WalkCalc account.
• Legal and safety: we may disclose information when required by law, to protect users, to investigate abuse, or to protect the rights, safety, and security of WalkCalc and others.

Tracking and Advertising

WalkCalc does not display third-party advertising, does not use the App Tracking Transparency identifier, and does not track you across apps or websites owned by other companies. WalkCalc does not collect interactions with the app for advertising purposes.

Permissions

• Camera: used only when you choose to scan a group QR code. If you deny camera permission, you can still join groups by manually entering a group code.
• Location: used only when you choose to attach your current location to a new expense record. If you deny location permission, you can still create records without location.
• Notifications: used to send WalkCalc-related updates when enabled. You can disable notifications in iOS Settings at any time.

Retention and Deletion

We keep information for as long as needed to provide WalkCalc, keep shared ledgers consistent, protect the service, resolve disputes, and meet legal obligations.

• You can edit or delete app content where WalkCalc provides those controls, such as expense records and groups.
• Local-only groups are retained on your device until you delete them in the app, delete the app, erase the device, or remove local app data. They are not retained on WalkCalc servers.
• You can delete your account from the app settings. Account deletion permanently removes the unified SSO account used by WalkCalc, active sessions, API tokens, and registered push devices. If you use the same SSO account for other developer-operated services, deleting the account may also remove your access to those services.
• Because WalkCalc groups are collaborative records, account deletion disconnects your account identity from shared ledger history while preserving shared expense records needed by the remaining group members.
• Some limited technical logs, backups, or legal records may remain for a reasonable period where needed for security, fraud prevention, service recovery, or legal compliance.

Your Choices

• You can update profile information from the profile page.
• You can choose whether to grant camera, location, and notification permissions in iOS Settings.
• You can stop sharing new location data by not using the location attachment feature or by revoking location permission.
• You can delete your account in the app settings.
• You can contact us to request help with access, correction, deletion, or privacy questions.

Children

WalkCalc is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to WalkCalc, contact us so we can review and delete it where appropriate.

Security

We use reasonable technical and organizational measures designed to protect WalkCalc data, including encrypted transport, authentication controls, hashed local passwords, and restricted operational access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International Processing

WalkCalc data may be processed in locations where we or our service providers operate. We take steps designed to protect the information described in this policy wherever it is processed.

Changes

We may update this policy as WalkCalc changes. The latest version will be posted on this page, and material changes will be reflected by updating the effective date.

Contact

If you have privacy questions or data requests for WalkCalc, contact us at keith.dh@hotmail.com.