1Who we are (data controller)
The controller responsible for your personal data is:
- 7STREAM SLU
- Carrer de les Moles 27, 08002 Barcelona, Spain
- joan@7streams.io
For any privacy question or request, write to us at that address. We have not appointed a Data Protection Officer, as we are not required to; privacy requests go to the same contact.
2Scope of this policy
This policy covers the Walk me to the moon iOS app and its widgets, Live Activities and notifications; the walkmetothemoon.com website and invitation pages; any future release on other platforms (including Android, where the equivalent of Apple Health is Health Connect / Google Fit); and any support correspondence with us.
It does not cover third-party services you use alongside the Service — Apple, Google, your device manufacturer, other health or fitness apps writing to your health store, or any website we link to. Their own privacy policies apply to them.
3Data we collect
We collect only what a feature actually needs. Everything below is optional in the sense that you can decline the relevant permission or not use the feature — but some features will not work without it.
| Category | What it includes | Why |
|---|---|---|
| Account | Email address; password (stored only as a salted hash by our authentication provider — we never see it); or, if you use Sign in with Apple or Google, the identifier and email those services return (which may be Apple’s private relay address); account creation and sign-in timestamps; session tokens. | To create and secure your account and keep you signed in. |
| Profile | Display name, age, weight, height, activity level, goal (lose weight / move more / build habit), measurement units, language, week-start preference, avatar or initial, and your “home base” — an approximate starting location you choose. | To personalise your plan, calculate distance and energy, and generate landmarks near you. |
| Health & fitness (special category data) |
Step count, walking/running distance, active energy (kcal), heart rate where a watch or accessory records it, body mass / weigh-ins, and workout sessions — read from Apple Health with your permission — plus the daily, weekly and lifetime totals, streaks, stride estimate, brisk minutes, plan progress and milestone unlocks we derive from them. | This is the product: your steps power the journey, the milestones and the coach. |
| Walks & location | Start time, duration, distance, steps and energy of each walk; and, for outdoor walks where you grant location access, the route coordinates recorded while the walk is running. | To show your walk summary and draw your route. See section 7. |
| Social | Crews you create or join, friend connections, invitation codes you generate or redeem, leaderboard and race participation, contributions and results, and the crew names or messages you write. | To run crews, leaderboards, challenges and races. |
| Subscription | Whether you have an active entitlement, the product and period purchased, trial status, renewal and cancellation events, and store-issued transaction and anonymous user identifiers — received from Apple (or Google) through RevenueCat. We never receive your card number or billing details. | To unlock Premium and support billing questions. |
| Content you give us | Anything you type — goals, notes, what you tell the coach in your own words — and support emails you send us. | To provide the feature and answer you. |
| Device & technical | Device model, operating system and app version, locale and time zone, push notification token, app settings, crash and diagnostic reports, and IP address and request metadata logged by our hosting and backend providers. | To deliver notifications, keep the Service secure and reliable, and fix bugs. |
4Where the data comes from
- From you — what you enter during onboarding and in the app.
- From your device — Apple Health (with your explicit permission), motion sensors, location services (with your permission), and system diagnostics.
- From third parties — Apple and Google when you use their sign-in; Apple/Google and RevenueCat for subscription status.
- From other users — for example when someone invites you to a crew or adds you as a friend, that connection and the code used to make it.
5How we use it & our legal bases
Under the GDPR we must have a legal basis for each use. Ours are:
| Purpose | Legal basis |
|---|---|
| Creating and running your account; syncing your data across your devices. | Performance of a contract (Art. 6(1)(b)). |
| Tracking steps and distance; unlocking milestones; showing the journey; running crews, leaderboards and races. | Performance of a contract, and — for health data — your explicit consent (Art. 9(2)(a)), given through the health permission prompt and confirmed in the app. |
| Generating your plan, briefings, lessons, weight trends and coaching messages (Premium). | Performance of a contract and your explicit consent for health data. |
| Recording routes during outdoor walks. | Your consent, given through the location permission prompt; withdrawable at any time in your device settings. |
| Sending push notifications, reminders and nudges. | Your consent (notification permission); you can turn them off at any time. |
| Managing subscriptions, entitlements and billing questions. | Performance of a contract; legal obligation for tax and accounting records. |
| Keeping the Service secure; preventing fraud, cheating and abuse; enforcing our Terms. | Legitimate interests (Art. 6(1)(f)) in protecting the Service and its users. |
| Fixing bugs, measuring reliability and improving the product using aggregated or de-identified information. | Legitimate interests in maintaining and improving the Service. |
| Responding to your support messages. | Performance of a contract / legitimate interests. |
| Complying with law, and establishing, exercising or defending legal claims. | Legal obligation (Art. 6(1)(c)); legitimate interests; Art. 9(2)(f) where health data is involved. |
Where we rely on consent, you can withdraw it at any time — by turning off the relevant permission in your device settings, or by deleting your account. Withdrawal does not affect processing carried out before you withdrew, and some features will stop working without the permission.
6Apple Health / HealthKit commitments
The app reads step count, distance, active energy, heart rate and body mass from Apple Health, and writes your in-app walks back to Apple Health, only after you grant permission — and only the specific data types you allow. You can review and change this at any time in Settings → Privacy & Security → Health → Walk me to the moon, or in the Health app. Apple Health data may also be read in the background so your progress stays up to date, and a small snapshot of your progress is stored in a shared container on your device so the widget and Live Activity can display it.
In line with Apple’s requirements and our own policy, we commit that health data:
- is used only to provide you with health, fitness, journey and coaching features inside the Service;
- is never used for advertising, marketing, re-marketing or any similar purpose;
- is never sold, rented or licensed to anyone, and never disclosed to data brokers, advertising networks, insurers or employers;
- is never shared with a third party for their own purposes or for data mining, other than the service providers in section 11 who process it strictly on our instructions to run the Service; and
- is disclosed beyond that only with your consent or where the law requires it.
On Android, the equivalent commitments will apply to data read from Health Connect / Google Fit, in line with Google Play’s Health Connect policy.
7Location data
Location is optional. We request “while using the app” access, and we use it in two places:
- During a walk you start. If you allow it, we record your route so the app can show your path and distance. Routes are stored with that walk in your account and are visible only to you.
- Your “home base”. A single approximate coordinate you set, used to generate personalised landmark milestones around where you actually walk.
We do not track your location in the background outside an active walk, we do not build a profile of your movements for any purpose other than the features above, and we do not share location data with advertisers or any third party for their own purposes. You can revoke location access at any time in Settings → Privacy & Security → Location Services; the rest of the app keeps working without it.
8Contacts & invitations
If you choose to invite friends and grant contacts access, the app reads your contacts on your device only, to draw the picker list and address the invitation message you send. Your contacts are never uploaded to our servers, never stored by us, and never shared with anyone. The invitation itself is sent by you, through your own messaging app, and contains a link or code — not your personal data.
Invitation codes are random and non-guessable, and rate-limited to reduce abuse. Anyone holding a valid code can use it, so share codes only with people you trust.
9On-device processing & AI
A large part of what the app does happens on your device and never leaves it, including: reading and de-duplicating health samples, estimating your stride, computing your live walk metrics, the companion’s mood, and rendering shareable milestone cards.
Coaching text is generated using Apple’s on-device foundation models. That means the prompt — which includes your own numbers — is processed locally on your iPhone. We do not send your health, location or coaching data to OpenAI, Anthropic, Google or any other external AI provider, and we do not use your data to train any model, ours or anyone else’s. Where a device cannot run the on-device model, the app falls back to pre-written templates computed locally.
10What other users can see
The social features are opt-in, and they share exactly what they need to work:
- Members of a crew you join see your display name, your avatar or initial, and your activity contribution — such as daily, weekly or all-time steps and distance — plus your position in that crew’s leaderboard.
- Friends you connect with see your display name and comparable activity figures.
- Competing crews see aggregate results and, where the format requires it, individual contributions.
Other users never see your email address, your exact location or routes, your weight, height, age, heart rate, weigh-ins, coach content or subscription status. Choose a display name you are comfortable showing, and leave a crew or delete your account if you no longer want to be visible in it.
11Who we share data with
We share personal data only in these situations:
Service providers (processors)
They process data strictly on our instructions, under a data processing agreement, and may not use it for their own purposes:
| Provider | Role | Data involved |
|---|---|---|
| Supabase | Authentication, database, backend functions and hosting | Account, profile, activity, walks and routes, social, plan data |
| RevenueCat | Subscription and entitlement management | Store transaction and subscriber identifiers, subscription status |
| Apple | App distribution, sign-in, payments, push notifications, on-device models | Store account data (held by Apple), sign-in identifiers, push tokens |
| Sign-in; in future, Android distribution and payments | Sign-in identifiers; store data (held by Google) | |
| Vercel | Website hosting | Server logs, including IP address and request metadata |
Other users
As described in section 10, when you use social features.
Legal & safety
We may disclose data where we believe in good faith that it is necessary to comply with a law, regulation, legal process or enforceable governmental request; to enforce our Terms; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of us, our users or the public. Where lawful and reasonable, we will tell you first.
Business transfers
If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy or sale of assets, your data may be transferred as part of that transaction. We will require the recipient to honour this policy, and we will notify you of any material change before your data becomes subject to a different policy.
With your consent
Any other sharing happens only if you ask us to or agree to it.
12What we never do
- We never sell your personal data, and we do not “share” it for cross-context behavioural advertising as those terms are defined under US state privacy laws.
- We do not show third-party advertising in the app, and we do not use advertising SDKs or trackers.
- We do not use your health, location or activity data to profile you for marketing, or provide it to insurers, employers, credit agencies or data brokers.
- We do not use your personal data to train AI models, and we do not send it to external AI providers.
13International transfers
We are based in Spain and prefer EU-hosted infrastructure, but some of our providers are established outside the EEA (for example in the United States) or operate global infrastructure. Where personal data is transferred outside the EEA or the UK, we rely on an appropriate safeguard under Chapter V of the GDPR — an adequacy decision where one applies, or the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), together with additional technical and organisational measures such as encryption in transit and access controls. You can ask us for details of the safeguard used for a given transfer at joan@7streams.io.
14Retention & deletion
We keep personal data only as long as we need it for the purposes above:
| Data | How long we keep it |
|---|---|
| Account, profile, activity, walks, routes, milestones, plans, crew membership | For as long as your account exists. The journey is cumulative by design, so historical activity is retained to keep your totals correct. |
| Everything above, after you delete your account | Deleted from our live systems promptly, normally within 30 days. Related records are removed automatically with your account. |
| Encrypted backups | Rolling backups are overwritten in the ordinary cycle, normally within 90 days of deletion. |
| Crew and competition results others contributed to | May remain as historical or aggregate results, de-identified or shown without your name once your account is deleted. |
| Purchase and tax records | As long as tax, accounting and consumer law require (typically up to 6 years in Spain), held by us and by the app stores. |
| Security, abuse and server logs | Typically up to 12 months, longer if needed to investigate an incident. |
| Support correspondence | Up to 3 years after the matter is closed. |
| Data needed for legal claims | Until the relevant limitation period expires. |
How to delete everything. Open the app, tap your avatar to open your profile, and choose Delete account. This is permanent and cannot be undone — your progress, milestones, streaks and crew history go with it. You can also email joan@7streams.io and we will do it for you. Deleting the app alone does not delete your account, and does not cancel a subscription — cancel that in your app store settings. Data held in Apple Health is yours and stays there; delete it in the Health app if you want it gone.
15Security
We take technical and organisational measures appropriate to the sensitivity of the data, including: encryption in transit (HTTPS/TLS) and encryption at rest at our infrastructure providers; row-level security in our database so a signed-in user can only read and write their own rows; passwords stored only as salted hashes by our authentication provider; support for Sign in with Apple and Google; scoped, least-privilege access to production data; rate limiting on sensitive operations such as invitations; and keeping health data on your device wherever a feature can run locally.
No system is perfectly secure, and we cannot guarantee absolute security. You help by using a strong, unique password, keeping your device locked and up to date, and not sharing your account. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours where required, and notify you without undue delay where the law requires it.
16Your rights (GDPR / UK GDPR)
If you are in the EEA, the UK or Switzerland, you have the right to:
- Access the personal data we hold about you, and get a copy;
- Rectify data that is inaccurate or incomplete;
- Erase your data (“right to be forgotten”);
- Restrict processing in certain circumstances;
- Object to processing based on our legitimate interests;
- Data portability — receive your data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible;
- Withdraw consent at any time, without affecting processing carried out beforehand;
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (see section 21); and
- Complain to a supervisory authority.
How to exercise them. Email joan@7streams.io from the address on your account, or use the in-app options. We respond within one month, extendable by two further months for complex requests (we will tell you if so). We may need to verify your identity first, and we will not charge you unless a request is manifestly unfounded or excessive.
Complaints. You can complain to your local data protection authority. In Spain that is the Agencia Española de Protección de Datos (AEPD), aepd.es; in the UK, the Information Commissioner’s Office, ico.org.uk. We would appreciate the chance to resolve it with you first.
17US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas or another US state with a comprehensive privacy law, you may have the right to know what personal information we collect and how we use and disclose it; to access and obtain a copy of it; to correct it; to delete it; to opt out of sale, sharing for cross-context behavioural advertising, and profiling with legal or similarly significant effects; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.
We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We collect the categories listed in section 3, from the sources in section 4, for the purposes in section 5, and disclose them only to the recipients in section 11. We treat health and precise location data as sensitive personal information and use it only to provide the Service — never to infer characteristics about you for marketing.
To exercise any of these rights, or to appeal a decision we make on a request, email joan@7streams.io. An authorised agent may submit a request on your behalf with proof of authorisation.
18Your controls in the app
- Health data — Settings → Privacy & Security → Health → Walk me to the moon, or the Health app, to grant or revoke each data type.
- Location — Settings → Privacy & Security → Location Services → Walk me to the moon.
- Contacts — Settings → Privacy & Security → Contacts.
- Notifications — in the app’s settings, or Settings → Notifications; the coach’s daily nudge is off by default.
- Profile & visibility — change your display name, leave a crew, or remove a friend in the app.
- Your data — request an export, or delete your account, from your profile in the app.
- Subscription — manage or cancel in your App Store (or Google Play) account settings.
19Children
The Service is not directed to children. You must be at least 16 to use it, and we do not knowingly collect personal data from anyone under 16. If we learn that we have, we will delete the account and its data promptly. If you are a parent or guardian and believe a child has given us data, contact joan@7streams.io and we will act on it.
20Website, cookies & analytics
The walkmetothemoon.com website is a static site. It does not set advertising or tracking cookies and does not run third-party analytics or advertising scripts. Our hosting provider processes standard server logs (IP address, user agent, requested URL, timestamp) to serve the site securely and prevent abuse; those logs are retained for a short period. The invitation page reads the code in the link only to display it and open the app — it does not store anything about you.
If we ever add analytics or cookies that are not strictly necessary, we will update this policy and, where required, ask for your consent first.
21Automated decision-making
The app automatically generates plans, daily goals, briefings, weight-trend projections and coaching messages from your own activity data — that is the product. These are motivational suggestions only; they produce no legal or similarly significant effects, we make no decisions about your access to services, credit, insurance or employment, and the output is always advisory. You can ignore any suggestion, change your goal at any time, or contact us at joan@7streams.io to discuss how something was calculated.
22Changes & contact
We may update this policy as the Service evolves or the law changes. We will update the “Last updated” date above and, for material changes, notify you in the app, by email or on this website before they take effect. Where a change requires your consent, we will ask for it.
Contact us about anything in this policy, or to exercise your rights:
- 7STREAM SLU
- Carrer de les Moles 27, 08002 Barcelona, Spain
- joan@7streams.io
See also our Terms & Conditions.