Your walks
stay yours.

Motion & Fitness

With your permission, Walk to Shoot uses Core Motion to read step counts recorded by this iPhone. It does not read Apple Health, import Apple Watch totals, track location, or read contacts or advertising identifiers. Permission is optional and can be changed in iOS Settings.

Step counts, refresh history, the settlement time zone and the energy ledger remain on your device. They are not sent with gameplay events or feedback.

Your local save

Local data includes recent step records, earned and spent energy, local best scores, preferences and pending feedback. The save is excluded from cloud backup. Uninstalling may remove it; automatic recovery and cross-device transfer are unavailable. A random service credential may remain in the system Keychain after uninstalling.

Optional gameplay data

Help improve gameplay is off by default. When enabled with a configured online service, the app sends a random installation identifier, assigned flight pattern, game starts and outcomes, mode, return visits and timestamps. We use these to compare flight patterns and improve gameplay. They are linked to that installation, not an account, and contain no steps, energy balance or motion-permission state.

You may separately choose to send a 1–5 enjoyment rating and a difficulty choice. This includes the flight pattern and timestamp. Turning off gameplay sharing stops new automatic gameplay events and removes pending gameplay events. Voluntary feedback remains separately queued until sent, expired or cleared through the deletion control.

Retention and deletion

Pending uploads are kept on the phone for up to 30 days. The service retains raw events for up to 30 days and inactive installation credentials for up to 90 days. Operational backups are rotated daily and normally kept for seven days. If a backup job fails, removal may be delayed. Backups seven days old or older cannot be restored through our recovery process. A deletion record containing a hashed installation identifier and timestamp is retained for up to 30 days to prevent deleted data from returning during recovery.

Use Delete server feedback & gameplay data in Settings to turn off gameplay sharing, clear pending uploads and request deletion. Walking energy and local scores remain. If deletion cannot reach the service, the app tells you and keeps the credential so you can retry. Data in an existing backup expires with that backup; deletion records must be applied before a restored database is used.

Sharing and support

Sharing a Standard result uses the iOS share sheet and happens only when you choose. The shared text contains the flight pattern, score, result, fixed loadout and game rule version. It contains no step counts. The service or person you choose to share with handles that content under their own practices.

If you email support, we receive your email address and anything you choose to include. Please avoid sending passwords or health records. We use your message to handle your request; email data is separate from the app's server-deletion control. Contact us about any related data request.

No advertising tracking

This version has no advertising SDK, paid-acquisition attribution, data sale or cross-app tracking. The support pages use no analytics scripts or cookies. Our app service and support pages run on a Contabo server in the European Union. Cloudflare provides domain-name resolution; app requests go directly to our server over HTTPS. These providers process connection information to deliver their services. We do not enable request access logs for these app and support endpoints, and we do not log step counts, feedback bodies or service credentials. Operational checks record service availability, backup health and storage capacity. Our providers handle their own infrastructure data under their privacy policies.

Contact

For support or privacy questions, contact support@icsr.cc. This app encourages everyday movement through gameplay and makes no medical or health-outcome promises.