THE TRAIL NOTES
Privacy
What stays on your phone, what you share, and how to delete it.
Last updated October 3, 2026
Your walk stays on your device
With your permission, Walking Tokos reads daily step counts and wheelchair pushes from Apple Health to run the game. It does not write to Apple Health. Counts, your walking journal, and your local creature save are stored on your device. Walking Tokos does not send raw Health samples or daily counts to its account or purchase services.
Accounts and Friends
Accounts use Sign in with Apple. Apple and Supabase process your Apple account identifier and sign-in credentials; Apple may also supply your email address or a private relay address. The service assigns a Walker alias. We store an encrypted Apple provider token to revoke access when you delete your account.
If you choose to share with Friends, we store your selected toko's appearance, its weight, your Trainer level and your creature collection, including forms and stars. Accepted friends can view them. A creature's growth, decline, weight and your Trainer level can reflect your walking activity, even though friends do not receive your step counts. The service also stores invitations, friend connections, and mute and block preferences. It does not offer public profiles, chat, or user-written names.
League and notifications
If you join League, your phone sends a derived indication of which recent days qualified, without step counts or your personal baseline. The service stores those dates, your device time zone (to settle League weeks), weekly cohorts and League badges. Leaving League deletes your League participation and qualifying dates. If you walk in a party with friends, the friends in that party see which days this week you qualified (yes or no), never step counts. Postcards you send to a friend carry a place name from the game and the date, kept for 30 days. Walk Day shows how many League walkers qualified that day, as a count with no names.
Friends activity includes growth, decline, evolutions, rare finds, nudges and gifts. Notification delivery uses Expo and Apple push services, which process device push tokens and the notification message, including internal account identifiers the app uses to open the right screen. Notifications are optional. Mute and block preferences apply to future delivery; a message already accepted by a push service cannot be recalled. Local Toko notifications and home and lock-screen widgets use creature information stored on your device.
Purchases
Apple processes payments. RevenueCat verifies purchase and subscription information for your Walking Tokos account. Purchase services process transaction identifiers, products, subscription periods, refund status, and technical device and app information needed to manage purchases. We store your purchased pebble balance, verified Trail Pass period, and item delivery records. We do not receive your payment card details. Apple Health data is not sent to RevenueCat.
Service providers and use
Supabase hosts account, Friends, and purchase-delivery records in the United States. Apple provides sign-in and payment services. RevenueCat provides purchase verification. Expo and Apple deliver push notifications. Netlify hosts this support website. Information is used to provide these features, protect accounts, prevent duplicate delivery and fraud, and handle support. Walking Tokos does not sell your Health information or use it for advertising. This site has no analytics, advertising, or tracking cookies.
Storage and deletion
Local progress remains on your device when you sign out or delete an online account. Uninstalling the app removes its local app storage; device backups are controlled through your Apple settings. Deleting your online account removes its profile, Friends connections, invitations, purchase balance, delivery records, push tokens, activity and League records, and requests deletion of its RevenueCat customer record after Apple access is revoked. Temporary provider failures leave deletion pending for automatic retry.
We retain a minimal one-way hash of each verified Apple pebble transaction, its product, amount, and refund state without the deleted account identifier to prevent the same purchase being credited again. A minimal opaque social-item operation receipt and random recovery token remain without the deleted account identifier, so an interrupted gift or Guard Badge can recover its outcome. Activity is retained for up to 30 days, inactive push registrations for up to 30 days, and League results and qualifying dates for up to 52 weeks while you remain joined. Apple separately retains its purchase records. Support correspondence may be retained to resolve the request and meet applicable obligations.
Your choices
You can change Health access in Apple's privacy settings, turn off notifications, leave League, stop sharing, remove or block friends, and request account deletion. You can contact us about access, correction, or deletion of your online account information. We verify account ownership before handling a request.