Privacy Policy

This Privacy Policy explains how DAJIRAJ INFOTECH PRIVATE LIMITED ("WalkBuzz", "we", "us", or "our") collects, uses, shares, and protects your information when you use the WalkBuzz mobile application, website, and related services (the "Service"). By using WalkBuzz, you agree to this Policy. If you do not agree, please do not use the Service.

We are the data controller of your information. You can reach us at support@walkbuzz.com.

1. Who this applies to

This Policy applies to everyone who uses WalkBuzz, anywhere in the world. Some sections give extra rights depending on where you live (see Region-specific rights). Because WalkBuzz is available globally, your information may be processed in India and other countries (see International transfers).

2. Information we collect

a. Information you give us

Account and profile: your name and email address from your Google or Apple sign-in, or the email address you sign in with directly, your username, and, if you choose to add them, your profile photo, gender, date of birth, height, and weight.
Location (country) and preferences: the country you select (used to decide which rewards we show you and which privacy rules apply to ads, see Region-specific rights), your app language, and your time zone.
Your privacy choices: your answers to the ads and Meta choice and to the leaderboard choice, with the version of the question you saw, where you answered, your device platform, and the time.
Communications: messages, support requests, and problem reports you send us, including any details you include and any images or screenshots you attach.

b. Information we collect automatically

Steps and fitness activity: with your permission, the step count your phone recorded, read from Android Health Connect or Apple Health (HealthKit), together with the times those steps were recorded and which app or device recorded them. We calculate distance and calories from your steps rather than reading them. This is health and fitness data and we treat it as sensitive (see How we handle health and fitness data).
Device and technical data: device model and manufacturer, operating system and version, app version, a device install identifier, push-notification token, notification-permission status, language, and connection data such as IP address.
Advertising identifier: your device's advertising identifier, read by the Google and Meta software in the app as described in Section 5. On iPhone, it is available only once you allow tracking.
Ads you choose to watch: when you watch an ad to unlock something, such as joining a challenge before it starts, Google confirms to our server that the ad was completed. We keep that confirmation and what it unlocked. It holds no details about you beyond your account.
Usage and diagnostics: how you use features (screens viewed, actions taken), and crash and performance diagnostics. We configure analytics so it does not include your name, email, or coin balances.
Referrals: your invite code, and the record of who invited you or who accepted your invite.
Coins, wallet, and rewards: your coin balance and the record of coins collected, pending, confirmed, spent, and redeemed, and your reward and redemption history.

c. Information from third parties

Sign-in providers (Google, Apple): basic profile information you authorise them to share.
Health platforms (Health Connect, HealthKit): the activity data you permit.
Google (ads): the signed confirmation that an ad you chose to watch was completed.
Reward partners: limited information needed to deliver a reward you redeem.

3. How we use your information

We use your information to:

provide the Service: create and run your account, read and validate your steps, calculate and confirm coins, run levels, streaks, challenges, and the wallet, and deliver rewards and redemptions;
show the leaderboard, with you on it only if you choose to be (see Section 4);
show the ads you choose to watch and give you what they unlock, once Google has confirmed each one to our server;
measure our own advertising: if you allow it, learn which of our ads on Facebook and Instagram brought you to WalkBuzz (see Section 5);
personalise your experience, such as which rewards we show you for your country and your language;
keep WalkBuzz fair and secure: detect and prevent fraud, fake steps, multiple accounts, and abuse, and enforce our Terms;
communicate with you: send service messages, and, if you allow notifications, reminders and updates;
improve the Service through analytics and diagnostics;
provide support and respond to your requests;
comply with the law and protect our rights, users, and partners.

Legal bases (where GDPR / UK GDPR applies). We rely on: your consent (for example, access to health and fitness data, notifications, personalised ads and Meta's measurement, and being shown on the leaderboard); performance of our contract with you (to provide the Service, including what an ad you choose to watch unlocks); our legitimate interests (to secure the Service, prevent fraud, and improve WalkBuzz), balanced against your rights; and legal obligations. You can withdraw consent at any time (see Your rights and choices).

4. How we handle health and fitness data

What we read. With your permission, WalkBuzz reads your step count from Android Health Connect or Apple Health. We read step data only: no heart rate, no sleep, no workouts, no location, and nothing else. We never write any data back to Health Connect or Apple Health.

Why we read it. Your steps are the basis of the rewards programme. They determine the coins you collect and the rewards you can redeem, and, only if you choose to be shown, your step totals on the leaderboard. Those are the only purposes we read them for.

What we store. For each day we store your daily step total, a breakdown in fifteen-minute periods, and which app or device recorded each contribution. We keep this so we can show your history, calculate coins correctly, and answer you accurately if you ever ask how a day was counted. For the leaderboard we also keep day, week and month step totals; they are shown only if you choose to be on it.

What we never do. We never sell your health data. We never share it with advertisers, data brokers, or any other third party. No advertising network receives your health data, and ads are never targeted using it. Your steps, goals, streaks, levels, coins, and challenges never go into an ad request or into anything sent to the Google or Meta advertising software in the app. We never use your health data to decide anything about employment or insurance.

The leaderboard. WalkBuzz shows a leaderboard of steps for each day, week and month. You are on it only if you choose to be, when the app asks you or later in Settings, Preferences, Leaderboard privacy. If you are, other walkers can see your short name (your first name and the first letter of your last name), your photo, your level and your step totals on it, including past days, weeks and months. Turning it off removes you from every leaderboard, including past days, weeks and months. We may hide any walker from the leaderboard. No other WalkBuzz feature shows your steps to another walker; community figures are anonymous totals.

Your control. You can withdraw access at any time in Health Connect or Apple Health settings, or in WalkBuzz. Step tracking stops immediately when you do. Deleting your account removes your step history in line with section 8.

Our use of Android Health Connect and Apple Health follows the applicable Google and Apple policies, including their restrictions on using health data only for approved, user-facing purposes. WalkBuzz is registered for the rewards use case.

We do not sell your personal information. We share it only as follows:

Service providers who run WalkBuzz for us, under contract and only as needed, including Supabase (database and backend hosting), Google Firebase (analytics, crash reporting, push notifications, and an emergency fallback channel), and Resend (sending our service emails, which means your email address and the message itself).
Google, for the ads you choose to watch, as described under Advertising below.
Meta, only if you allow it, as described under Meta below.
Other walkers, through the leaderboard, only if you choose to be shown (see Section 4).
Reward and fulfilment partners, to issue a voucher, gift card, or reward you redeem.
For legal reasons, when required by law or valid legal process, or to protect the rights, safety, and security of WalkBuzz, our users, or the public, and to prevent fraud or abuse.
In a business transfer, such as a merger, acquisition, or reorganisation, in which case this Policy continues to apply to your information.

Advertising (Google AdMob). WalkBuzz shows ads only when you choose to watch them, for example to join a challenge before it starts. Google provides these ads and receives your device's advertising identifier (on iPhone, only once you allow tracking), IP address and basic device details to show, measure and protect them. If you allow it, Google may use this to show ads that suit you; if you do not, the ads are not personalised. We never send Google your steps or any other health data, your coins or rewards, or your name, email address or phone number. You can change your choice at any time in Settings, Privacy choices; on iPhone, also in the phone's Settings.

Meta (ads on Facebook and Instagram). If you allow it, WalkBuzz uses Meta's software to share with Meta when the app is installed and opened and when you finish sign-up, with your device's advertising identifier, IP address and basic device details. Meta uses this information, with information from other apps, to measure which of our ads brought people to WalkBuzz and to target and deliver ads. We never send Meta your steps or any other health data, your coins or rewards, or your name, email address or phone number. You can say no, and change your answer at any time in Settings, Privacy choices; on iPhone, also in the phone's Settings. What was already sent stays with Meta under Meta's own privacy policy.

How you choose. On Android, WalkBuzz asks you once whether you allow it. On iPhone, Apple's tracking prompt decides for both Google and Meta. In the European Economic Area, the United Kingdom, and Switzerland, Google's consent form asks first, before any ad loads. We never ask during sign-up. Nothing in WalkBuzz depends on your answer: every feature works either way.

Google's and Meta's own use of this information is governed by their policies: How Google uses information from sites or apps that use its services (https://policies.google.com/technologies/partner-sites) and Meta's Privacy Policy (https://www.facebook.com/privacy/policy/).

6. Third-party services

WalkBuzz relies on third parties, including Google (among them Google AdMob and its consent form), Apple, Meta, Supabase, Firebase, Resend, Android Health Connect, Apple Health (HealthKit), analytics and crash-reporting providers, and reward partners. These services have their own privacy policies, and we encourage you to review them. We are not responsible for services we do not control.

7. Cookies and similar technologies

The WalkBuzz app uses device identifiers and software development kits (SDKs) for analytics, crash reporting, notifications, and the ads you choose to watch (Google AdMob), rather than browser cookies. Meta's SDK starts only if you allow it; until then it sends and collects nothing. Our website sets no cookies and loads no third-party trackers. You can manage advertising identifiers and permissions in your device settings and in WalkBuzz under Settings, Privacy choices.

8. Data retention

We keep your information for as long as your account is active and as long as needed to provide the Service. After account deletion we remove or de-identify your information, except where we must keep certain records for legal, tax, accounting, fraud-prevention, security, or dispute-resolution purposes, and for the periods required by applicable law. Ledger, redemption, and audit records may be retained longer for integrity and compliance.

Your answers to the ads and Meta choice and to the leaderboard choice are kept while your account exists. Leaderboard step totals are kept for about fifteen months. The record of what an ad unlocked is kept with the records of that challenge. Information Google or Meta has received is kept under their own policies.

9. Data security

We use technical and organisational measures to protect your information, including encryption in transit, access controls, server-side authorisation rules, and least-privilege access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond appropriately to incidents.

10. Your rights and choices

Depending on where you live, you may have the right to:

access the information we hold about you and get a copy;
correct inaccurate information (you can edit much of your profile in the app);
delete your account and information (Profile → Settings → Account → Delete Account, or contact support);
object to or restrict certain processing;
withdraw consent (for example, revoke health-data access or turn off notifications in your device settings);
data portability; and
opt out of marketing messages.

You can also, at any time:

change your ads and Meta choice in Profile → Settings → Privacy choices (in the European Economic Area, the United Kingdom, and Switzerland, this opens Google's consent form; on iPhone, the phone's own Settings → Privacy & Security → Tracking also applies);
join or leave the leaderboard in Profile → Settings → Leaderboard privacy.

To exercise these rights, use the in-app controls or email support@walkbuzz.com. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights. If we cannot verify your identity or must keep certain records by law, we will tell you.

11. Region-specific rights

European Economic Area, United Kingdom, and Switzerland (GDPR, UK GDPR, and Swiss data protection law): you have the rights above, may withdraw consent at any time, and may lodge a complaint with your local data-protection supervisory authority. Before any ad loads, Google's consent form, from a Google-certified consent platform, asks for your choices; you can decline every one of them, and change them later in Profile → Settings → Privacy choices. Our legal bases are described in Section 3, and international transfers are covered in Section 13.
United States (including California, CCPA / CPRA): you may request the categories and specific pieces of personal information we collect, request deletion or correction, and opt out of the "sale" or "sharing" of personal information. If the country you chose in WalkBuzz is the United States, or you have not chosen one, Google's ads in WalkBuzz are never personalised, whatever you answer. Meta processes what it receives from WalkBuzz under its Limited Data Use setting, which we turn on for every walker. So we do not sell or share your personal information as those terms are defined, and we do not use or disclose sensitive personal information beyond permitted purposes. You will not be discriminated against for exercising these rights.
India (Digital Personal Data Protection Act, 2023): you may access, correct, update, and erase your personal data, nominate a representative, and raise a grievance with our Grievance Officer (see Contact us). We process your data on the basis of your consent or as otherwise permitted by law.
Other regions: we honour the rights granted by the applicable data-protection laws of your country.

12. Children's privacy

WalkBuzz is not intended for anyone under 18, and our Terms of Service require you to be at least 18 to use the Service. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us their information, contact us and we will delete it and close the account.

13. International data transfers

WalkBuzz is operated from India, and your information may be stored and processed in India and in other countries where we or our service providers operate, which may have different data-protection laws than your country. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses or equivalent measures.

14. Third-party links

The Service may link to third-party websites, stores, or offers that we do not control. This Policy does not apply to them, and we encourage you to read their privacy policies.

15. Changes to this Policy

We may update this Policy from time to time. When we do, we will publish the updated version with a new effective date and, where a material change requires it, ask you to review or accept it in the app. Your continued use of WalkBuzz after the update takes effect means you accept the revised Policy, to the extent permitted by law.

16. Contact us and Grievance Officer

For any question, request, or complaint about your privacy, contact:

DAJIRAJ INFOTECH PRIVATE LIMITED (WalkBuzz), Grievance Officer
Email: support@walkbuzz.com
Address: B-213, RK Iconic, 150 ft Ring Road, Near Ayodhya Circle, Rajkot - 360006, Gujarat, India

We will acknowledge and resolve grievances within the timelines required by applicable law.