Who we are
WFit is a walking and fitness app. It is published by Ivana Zafirovski (WalkersCNFT) and developed by Anchor Flow LLC, 8206 Louisiana Blvd NE Ste A #9221, Albuquerque, NM 87113, USA. In this policy "WFit", "we" and "us" means both. We are responsible for the personal data described here. WFit runs on the Walkers platform, which holds your account, step history and level.
Questions or requests about your data: support@wfitapp.xyz.
At a glance
Not to anyone, not ever.
No ad networks, no tracking across other apps or websites.
Health data is never used for advertising or marketing.
One button in the app removes your account and data.
What we collect
We only collect what the app needs to work. Things marked "if you allow" are off until you give permission, and you can turn them off again in the app or in your phone's settings.
| Data | Why we need it | Where it is stored |
|---|---|---|
| Account details: email address, name, password (stored hashed), and the Apple or Google account email if you sign in with one | To create your account and sign you in | Walkers servers |
| Profile: picture you choose, body weight, referral code, who invited you | To show your profile and leaderboard entry, estimate calories, and credit invites | Walkers servers; a copy of your name and picture on WFit servers for leaderboards |
| Steps and motion (if you allow) | To count your steps, distance and daily progress | Walkers servers, linked to your account |
| Precise location (if you allow) | To measure walks and sports you start and draw their route on a map | Your phone (the detailed route) and Walkers servers (about one point a minute) |
| Health data from Apple Health or Health Connect (if you allow): steps, workouts, heart rate, active calories, distance | So steps and workouts from your watch count in WFit, without counting anything twice | Daily step totals on Walkers servers; workouts and heart rate on WFit servers |
| Activity, meal, water and padel logs, padel friends, and names you type for guest players | To show your history, work out daily XP, and keep padel scores and rankings | WFit servers. Padel results are visible to the players in that match and to your padel friends |
| Messages to the AI coach, with today's activity (only after you agree) | To generate the coach's reply | Sent to our AI provider to answer; chat history is kept on your phone |
| X (Twitter) username and ID (only if you connect X) | To check community challenges you take part in | Walkers servers |
| Notification token (if you allow notifications) | To tell you about new challenges, announcements and padel results | WFit servers |
| Error reports and diagnostic logs: app version, phone model, what the app was doing when something failed | To find and fix bugs. Warnings and errors are sent automatically; a full log only when you send one from Diagnostics | WFit servers and our team's private support channel. No health readings or messages |
The camera is only used to scan a sign-in QR code; no picture is taken or stored. Photos are only read when you pick a profile picture yourself.
How we use it
- To provide the app: your account, step counting, sessions, maps, XP, leaderboards, challenges, padel and the coach. (Legal basis in the EU/UK: performing our contract with you.)
- With your permission: location, motion, health data, notifications and the AI coach. (Legal basis: consent, which you can withdraw at any time.)
- To keep it working and fair: fixing bugs, preventing cheating and abuse. (Legal basis: our legitimate interest in a working, fair app.)
- To meet legal obligations when the law requires it.
We do not use your data for advertising, we do not sell it, and we do not make automated decisions that have legal or similarly significant effects on you.
Health data
WFit reads Apple Health (iPhone) or Health Connect (Android) only if you allow it. You can take that permission back at any time in your phone's settings, or turn Health Sync off in the app.
- What we read: step counts, completed workouts (type, duration, distance, calories), heart rate recorded during them, active calories and distance.
- What we never read: medical records, conditions, medications, lab results, sleep, reproductive or any other health data.
- We never write anything to Apple Health or Health Connect.
- Health data is never used for advertising, marketing or data mining, never sold, never shared with data brokers, and never stored in iCloud.
- It is only shared with the service providers listed below that are needed to run the features you use.
Location
WFit reads your precise location while a walk or sport session you started is running, including when the screen is locked, so the distance and route stay accurate. On iPhone the system shows a location indicator while this happens; on Android a notification. Stopping the session stops tracking. When you open the app it may also read the last location your phone already knows. WFit does not track where you go the rest of the time.
AI coach
The coach is powered by OpenRouter, a third-party AI service, and the AI model provider it routes to. Before your first message the app asks you to agree. After that, each message you send goes to them together with today's activity (steps, distance, calories, water, streak and recent sessions) and your first name, so the reply can be about you. It is not used to train AI models. The coach gives general fitness tips, not medical advice.
Who we share it with
We share personal data only with the service providers that run parts of the app for us, only what each one needs, and under terms that require them to protect it at least as well as we do:
| Provider | What they do | What they receive |
|---|---|---|
| Walkers platform | Account, steps, level, points, challenges | Account, profile, steps, location points, X connection |
| Cloud hosting providers | Run the WFit and Walkers servers and databases | Everything stored on our servers |
| OpenRouter and its AI model provider | AI coach replies | Coach messages, first name, today's activity |
| Expo, Apple Push Notification service, Firebase Cloud Messaging | Deliver notifications | Notification token and message text |
| Google Maps | Draws maps | The map area being shown |
| Apple, Google | Sign in with Apple / Google, if you use them | Handled under their own privacy policies |
| X (Twitter) | Checks challenge actions, if you connect X | Your X account authorisation |
| Discord (private team channel) | Where error reports reach our team | Error reports and diagnostic logs |
We may also disclose data if the law requires it, to protect people's safety, or as part of a merger or sale of the business, in which case this policy continues to apply.
How long we keep it
- Account, profile, steps, logs, padel data: until you delete them or delete your account.
- Error reports: 14 days on our servers; copies in our support channel are deleted within 90 days. Diagnostic logs on your phone keep only the latest entries.
- AI coach history: on your phone only, until you clear it or remove the app.
- Server backups: overwritten within 90 days, so deleted data leaves backups within that time.
- Not linked to anyone: after you delete your account, step history already counted in community totals may remain with nothing that identifies you.
Deleting your account
In the app: Me → Account Settings → Delete Account. Your account and everything linked to it (login, profile, picture, logs, XP history, padel matches, connected accounts, settings) is deleted straight away and you are signed out. Without the app, see how to delete your account.
Security
All data travels over encrypted connections (HTTPS). Passwords are stored hashed, never in plain text. Access to our servers and databases is limited to the people who run them. No system is perfectly secure, but we work to protect your data and will tell you, and the authorities where required, if a breach affects you.
Your rights and choices
- See and get a copy of your data, in a portable format.
- Correct it: most of it is editable in the app.
- Delete it: see above.
- Withdraw consent at any time: turn off location, motion, health or notification permissions in your phone's settings, or Notifications in Me → Account Settings. The rest of the app keeps working.
- Object or restrict how we use it, and complain to your data protection authority.
- California residents: you have the right to know, delete and correct, and to not be discriminated against for using them. We do not sell or share personal information for cross-context behavioural advertising.
Email support@wfitapp.xyz to use any of these rights. We reply within 30 days, and may ask you to confirm the request comes from your account's email address.
International transfers
Our servers and some providers are outside your country, including in the United States. When data is transferred we rely on appropriate safeguards such as Standard Contractual Clauses.
Children
WFit is not intended for children under 13 (or the minimum age in your country) and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
Changes
If this policy changes in a way that affects you, we will tell you in the app before it applies and update the date at the top of this page.
Contact
WFit, published by Ivana Zafirovski (WalkersCNFT) and developed by Anchor Flow LLC
8206 Louisiana Blvd NE Ste A #9221, Albuquerque, NM 87113, USA
support@wfitapp.xyz