WalkCue — Privacy Policy

Last updated: 2026-10-19

WalkCue is a walking timer app. Your routines, walk history, and settings stay on your device. We collect only anonymous product analytics so we can improve the app.

What we collect

WalkCue sends anonymous product analytics to PostHog (US cloud, project 389134). Per event, that includes:

• The event name (e.g. paywall.viewed, paywall.purchase_success, screen.viewed, settings.toggled) and non-identifying event properties such as the screen name, user segment (anonymous/free/trial/premium/lifetime), days since install, and locale.
• A random per-install identifier generated by the PostHog SDK. It is not your Apple ID, email, device name, phone number, IDFA, or any ad identifier.
• Your app version and build number, your device model and iOS version, and an is_review_env flag that marks events from TestFlight or App Review sandbox builds so we can exclude them.
• For in-app purchases: the StoreKit product ID, the transaction ID, and the price PostHog receives from the device. We never see your payment method, Apple ID, or billing address — Apple handles the transaction.

We never collect the durations, distances, pace, routes, step counts, goals, or any content of your walks or saved routines; we do not collect contacts, photos, health or motion data, precise or coarse location, or an advertising identifier. The PostHog iOS SDK is configured with autocapture off, screen-view autocapture off, session replay off, and personProfiles = .never; only the events described in this policy are emitted.

Identification after purchase

After your first in-app purchase on this device, we associate that install's analytics events with a pseudonymous identifier derived from a hash of Apple's identifier-for-vendor (IDFV): we take MD5(IDFV), keep only the first 12 hex characters, and prefix it with anon_. The raw IDFV itself is never sent. The IDFV is the same value for all apps from this developer on this device, so this pseudonymous identifier lets us count how many of our apps the same device has paid for; it is also stable across reinstalls as long as another of our apps remains installed. Apple's App Privacy taxonomy classifies IDFV-derived values as a Device ID, so we disclose it as such on the App Store listing. The pseudonymous identifier is never combined with your name, email, phone number, Apple ID, or payment details, is not used for advertising, and is not shared with data brokers. Turning off anonymous analytics in the app's Settings ("Share anonymous analytics") stops this identification from being sent.

Crash diagnostics and install attribution

• Crash diagnostics. If the app crashes, iOS (MetricKit) gives the app a crash report on the next launch. We send a short, PII-free crash signature (for example the exception type and app version) as an analytics event. We also send basic session timing, such as session length and screens per session, so we can spot performance problems.
• Install attribution. On first launch the app asks Apple's AdServices framework for an attribution token and sends it to Apple (api-adservices.apple.com). Apple replies only whether the install came from an Apple Search Ads campaign, and if so the campaign and ad-group identifiers. We record that on a single first-open analytics event to tell paid installs from organic ones. No personal information is involved. You can turn off Apple's ad attribution in iOS Settings → Privacy & Security → Apple Advertising.

What lives on your device

Your settings, saved routines, and walk history are stored locally using standard iOS preferences and local storage. Uninstalling the app deletes this data.

Network activity

WalkCue talks to three destinations over HTTPS:

• Apple's App Store, for the optional in-app purchases (monthly and yearly subscriptions and a one-time Lifetime unlock) and to verify your entitlement. Apple processes the transaction; we do not see your payment details.
• PostHog (us.i.posthog.com), for the anonymous analytics described above.
• Apple AdServices (api-adservices.apple.com), once on first launch, for the install attribution described above.

Notifications

If you enable a walk reminder, WalkCue schedules a local iOS notification. Nothing about the reminder is sent to us or anyone else.

Tracking & advertising

WalkCue does not run ads, does not use Apple's App Tracking Transparency framework, does not share any data with data brokers, and does not track you across apps or websites owned by other companies.

Retention

Analytics events are kept in our PostHog project for internal product analysis and are not sold or shared with advertisers.

Children

WalkCue is a general-audience app and is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If this policy changes, the updated version will appear at this URL with a new "Last updated" date.

Contact

Questions: tony@custody-compass.com.