The data controller for your personal data is:
AppJuice di Carlo Di Giuseppe
Milan, Italy
Email: privacy@appjuice.it
For any privacy-related request, contact us at the address above.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, username, display name, avatar, bio, city, country, gender | Provided by you at registration or when editing your profile |
| Health & activity data | Daily step count, estimated distance, estimated calories | Apple HealthKit (only with your explicit permission) |
| Social data | Posts, comments, messages, follow relationships, group memberships | Generated by your activity in the app |
| Challenge & competition data | Challenge participation, rankings, achievements, trophies | Generated by your activity in the app |
| Technical data | Device type, OS version, app version, IP address, session tokens | Automatically collected during use |
| Communications | Feedback submissions, support requests | Provided by you voluntarily |
| Processing purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing your account | Art. 6(1)(b) — performance of a contract |
| Providing leaderboards, challenges, social features | Art. 6(1)(b) — performance of a contract |
| Processing health/step data | Art. 9(2)(a) — explicit consent (HealthKit permission prompt) |
| Sending transactional emails (confirmations, GDPR requests) | Art. 6(1)(b) — performance of a contract |
| Security, fraud prevention, debugging | Art. 6(1)(f) — legitimate interests |
| Complying with legal obligations | Art. 6(1)(c) — legal obligation |
We do not use your data to serve advertising, sell data to third parties, or build advertising profiles.
We share your data only with the following trusted sub-processors, under appropriate data processing agreements:
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, edge functions | EU (AWS Frankfurt) / USA |
| Resend, Inc. | Transactional email delivery | USA |
| Apple Inc. | HealthKit data source; App Store distribution; Apple Sign In | USA |
| Google LLC | Google Sign In (optional) | USA |
For transfers to the USA we rely on Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. We will never sell your personal data.
We may also disclose data if required by applicable law, a court order, or to protect the rights, property, or safety of WalkRace, its users, or the public.
We keep your personal data for as long as your account is active or as needed to provide the service. Specifically:
When you delete your account, all personal data is permanently erased within 24 hours of the scheduled deletion date.
As a data subject under the GDPR you have the following rights:
Obtain a copy of all personal data we hold about you.
Correct inaccurate or incomplete personal data.
Request permanent deletion of your account and all associated data.
Ask us to restrict processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format (JSON).
Object to processing based on legitimate interests.
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.
WalkRace integrates with Apple HealthKit to read your step count. In compliance with Apple's requirements and the GDPR:
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
No method of transmission over the internet or electronic storage is 100% secure. If you discover a security vulnerability, please report it responsibly to privacy@appjuice.it.
WalkRace is intended for users aged 16 or older. We do not knowingly collect personal data from children under 16. If we become aware that a user is under 16, we will delete their account and associated data promptly. If you believe a child has registered, contact us at privacy@appjuice.it.
The WalkRace mobile application does not use cookies. Session tokens are stored securely in the device's keychain and are used solely to authenticate your requests to our API. We do not use third-party advertising or analytics SDKs that track you across other apps or websites.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice at least 14 days before the new policy takes effect. The "Last updated" date at the top of this page always reflects the most recent version. Continued use of WalkRace after the effective date constitutes acceptance of the updated policy.
For any questions, requests, or complaints regarding this Privacy Policy or our data practices:
AppJuice di Carlo Di Giuseppe
Milan, Italy
Email: privacy@appjuice.it
We aim to respond to all enquiries within 30 days.